$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa File: be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa (raw, json) Hash identifier: IXKwowyxUVoOkV4knowJSCt5t8Ajv3xvrNHzqSqQO/g= Subject key identifier: 3B:22:CF:A9:E0:AA:E8:62:CD:46:27:B0:FA:DB:6E:81:7A:B2:16:5A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0138771695BD601B550A9A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa Signing time: Fri 22 Aug 2025 05:34:07 +0000 ROA not before: Fri 22 Aug 2025 05:34:07 +0000 ROA not after: Thu 20 Nov 2025 06:34:07 +0000 asID: 31898 IP address blocks: 129.146.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:87:71:69:5b:d6:01:b5:50:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:34:07 2025 GMT Not After : Nov 20 06:34:07 2025 GMT Subject: CN=0339ee2b-82a5-4113-a54b-d1cf5dc46981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:7a:28:32:f8:83:8b:cc:b3:9b:38:7c:79: ef:a0:6d:f3:2a:f4:2a:f5:c4:8a:d1:12:1f:ed:8d: 64:f4:13:da:74:c2:6b:33:41:ee:73:b5:a6:77:33: fe:b4:42:41:82:0f:60:e6:c9:4c:aa:52:0a:1f:ed: cc:61:cd:4f:81:28:dd:dd:a7:4a:1f:fd:c3:6b:70: 89:6f:66:f0:55:d0:cd:5d:12:44:1d:32:11:5b:8a: 13:84:4e:8c:91:ea:dc:2c:61:f9:f9:65:06:1d:17: a9:d2:03:e7:ea:77:2d:13:26:3a:65:b5:12:b8:52: 46:a5:eb:58:c7:f6:ed:be:92:c6:01:ba:d4:30:38: d0:0b:8a:d3:e7:1a:db:28:e9:29:60:6a:cf:17:7e: 5b:83:7b:c8:f8:0d:2e:de:50:b6:90:c4:73:df:96: a9:a7:d0:09:a5:15:2f:81:dd:6a:66:9f:14:1b:9f: 55:f0:6b:04:0c:17:c1:26:2c:71:38:fe:a0:eb:2c: 99:0f:2f:cf:7f:8e:4b:2b:2e:34:e6:35:66:98:fd: 06:07:6a:46:fb:1b:e0:48:ae:49:0b:dc:a5:03:ea: 49:4b:f3:52:1c:48:6a:44:f6:e7:48:de:70:dd:4b: 85:e7:9f:58:1d:57:c3:b9:2a:85:8e:df:36:5d:a8: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:CF:A9:E0:AA:E8:62:CD:46:27:B0:FA:DB:6E:81:7A:B2:16:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ab:95:6a:58:c3:dc:79:04:69:c7:86:29:f3:4c:1d:c8:73: 92:18:13:f3:69:09:db:5d:11:5c:cc:5c:53:e5:89:fe:0f:e4: 4a:c2:6a:0e:8e:07:52:83:6b:92:fa:84:09:7a:da:37:f9:52: d4:fc:6a:0d:20:87:6b:ed:69:54:ad:dd:fd:ca:e7:e8:99:b1: f7:48:36:42:b0:86:7a:21:0c:2b:d8:d0:c3:17:00:a2:2d:6b: 9b:4c:73:23:70:31:64:35:c6:ea:f7:7e:b5:3b:aa:13:2c:4a: 63:2e:ce:0c:33:2e:31:46:70:c4:c7:a5:a9:f0:48:d9:5f:ff: bb:49:fc:11:fe:f2:f0:2a:4f:bb:49:2a:e1:c5:85:8b:d1:e5: ba:c9:5c:ca:b9:46:89:25:4a:de:19:0a:ed:d7:10:66:60:d4: 38:21:81:bf:f6:84:39:d7:3e:bc:b1:e0:f4:8c:74:8c:51:25: 7d:79:9a:8c:80:ed:11:33:e2:99:c2:13:fd:75:d3:13:7e:b2: c7:c0:ec:27:a0:74:8f:96:47:d2:81:8b:02:ca:0d:95:63:54: 1b:fa:fc:be:56:66:02:42:8d:82:d9:cb:5d:5f:88:2e:84:a7: 03:33:8e:f5:5c:04:1b:e9:38:74:1c:bf:d2:5c:cf:1b:7e:33: c1:1a:80:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE4dxaVvWAbVQqaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzQwN1oXDTI1MTEyMDA2MzQwN1owLzEtMCsGA1UEAxMk MDMzOWVlMmItODJhNS00MTEzLWE1NGItZDFjZjVkYzQ2OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A56KDL4g4vMs5s4fHnvoG3zKvQq9cSK0RIf 7Y1k9BPadMJrM0Huc7WmdzP+tEJBgg9g5slMqlIKH+3MYc1PgSjd3adKH/3Da3CJ b2bwVdDNXRJEHTIRW4oThE6MkercLGH5+WUGHRep0gPn6nctEyY6ZbUSuFJGpetY x/btvpLGAbrUMDjQC4rT5xrbKOkpYGrPF35bg3vI+A0u3lC2kMRz35app9AJpRUv gd1qZp8UG59V8GsEDBfBJixxOP6g6yyZDy/Pf45LKy405jVmmP0GB2pG+xvgSK5J C9ylA+pJS/NSHEhqRPbnSN5w3UuF559YHVfDuSqFjt82XahwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsiz6ngquhizUYnsPrbboF6shZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmU2YjkyZWMtOWZiZC0z ZmMwLWI2MzEtODQ0MDM1ZWM2ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIerlWpYw9x5BGnHhinzTB3Ic5IYE/NpCdtdEVzMXFPlif4P5ErCag6O B1KDa5L6hAl62jf5UtT8ag0gh2vtaVSt3f3K5+iZsfdINkKwhnohDCvY0MMXAKIt a5tMcyNwMWQ1xur3frU7qhMsSmMuzgwzLjFGcMTHpanwSNlf/7tJ/BH+8vAqT7tJ KuHFhYvR5brJXMq5RoklSt4ZCu3XEGZg1Dghgb/2hDnXPryx4PSMdIxRJX15moyA 7REz4pnCE/110xN+ssfA7CegdI+WR9KBiwLKDZVjVBv6/L5WZgJCjYLZy11fiC6E pwMzjvVcBBvpOHQcv9Jczxt+M8EagBk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:34 2025 by rpki-client