$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa File: ca414a24-2cf9-355c-b83f-5c043bd7f053.roa (raw, json) Hash identifier: w2jFQAeRBtq/Q1huRhWES55Fh8SnUxmOi+VX22wRorQ= Subject key identifier: DF:C5:F9:E1:84:AF:D0:AA:25:3C:2E:24:87:52:5D:EF:19:74:9D:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EEF89B161762366CB76E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa Signing time: Fri 22 Aug 2025 12:56:16 +0000 ROA not before: Fri 22 Aug 2025 12:56:16 +0000 ROA not after: Thu 20 Nov 2025 13:56:16 +0000 asID: 31898 IP address blocks: 129.153.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ee:f8:9b:16:17:62:36:6c:b7:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:16 2025 GMT Not After : Nov 20 13:56:16 2025 GMT Subject: CN=488bbb80-b704-4c37-bc1e-97c46892f5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:16:5b:6c:cf:75:75:a3:05:7b:e0:37:fc: e6:ed:0d:67:ea:76:98:a7:68:c9:3d:cb:c5:8f:87: 1a:f6:4d:c8:0c:3d:e4:f7:d6:e7:15:07:25:7f:6a: 09:0b:5d:45:0d:c4:05:f0:84:3f:db:90:60:84:28: 1c:5f:bd:61:4d:97:9e:49:25:38:cf:ec:33:5a:2d: 0b:24:c7:9a:1b:e0:43:33:e4:58:80:33:08:48:4d: 6e:eb:fb:31:06:3c:3f:8b:ca:e7:6c:21:f9:ec:ef: 9b:f8:e0:25:06:3d:da:e9:25:ee:52:66:41:1b:5f: 75:27:9b:e2:e1:44:83:77:e3:e9:a1:48:62:23:4d: d2:9e:b2:61:d0:d7:d3:4b:8c:80:a6:6f:90:2a:d2: d6:3f:eb:c3:39:1e:93:97:02:b7:b4:fe:c6:2c:88: d3:f4:71:08:24:59:53:3c:40:7d:1c:48:10:3a:6b: 4f:a3:93:41:06:30:35:0e:4e:5f:14:ca:2b:5f:c0: c4:c0:69:ad:ea:ab:e6:b3:de:1b:66:ed:ff:17:f0: c7:9e:ed:98:fa:e5:1c:5c:a0:f0:9b:9b:e6:35:ea: aa:c9:3c:68:13:aa:10:a8:71:4a:31:17:fc:b9:b2: 38:5f:9b:f6:cf:90:d4:86:34:7d:db:c3:f6:d4:db: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C5:F9:E1:84:AF:D0:AA:25:3C:2E:24:87:52:5D:EF:19:74:9D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca414a24-2cf9-355c-b83f-5c043bd7f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ea:32:28:9d:54:8e:ef:66:98:a0:bb:25:55:38:ca:53:ff: fa:09:e1:06:f1:bc:b5:ae:4c:d2:0d:cb:d8:89:70:b2:45:53: 0c:bb:25:eb:f1:24:b6:fb:0f:8d:71:db:2e:d7:bb:fb:6d:e4: 04:e4:69:62:59:84:2b:f4:b1:f8:d7:94:78:c4:56:50:2b:8f: 73:99:1e:55:0d:a8:44:6b:4f:a2:38:0b:24:a3:c9:67:53:a7: 3e:36:5a:56:26:f9:ab:ef:2d:54:ec:23:7b:50:bd:6e:e9:03: 77:1c:67:e1:84:7a:7d:b1:6b:31:bf:f5:40:bf:51:01:23:d6: d1:e3:a0:c3:87:6c:63:47:77:19:af:46:a4:2d:fa:d5:aa:c2: bf:22:65:a9:ab:9c:25:71:96:4c:ab:1c:d3:f0:c6:3d:3e:54: 23:4b:22:06:19:4d:ff:9a:be:6b:bb:9d:e8:32:63:20:4d:f0: 5d:51:d2:6d:7c:8c:a9:39:f8:27:4e:af:c8:f5:8a:d6:fb:a2: b8:6a:bb:eb:e1:3d:82:e6:1a:7e:66:fc:c3:6c:29:5d:58:46: f8:4e:a8:45:9b:f9:8e:66:0d:0d:4f:07:ed:be:9c:2c:8f:28: 81:be:e9:2c:bd:2e:91:72:57:c0:c4:fd:83:e2:ae:ec:bc:32: 08:e4:33:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7vibFhdiNmy3boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYxNloXDTI1MTEyMDEzNTYxNlowLzEtMCsGA1UEAxMk NDg4YmJiODAtYjcwNC00YzM3LWJjMWUtOTdjNDY4OTJmNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJQWW2zPdXWjBXvgN/zm7Q1n6naYp2jJPcvF j4ca9k3IDD3k99bnFQclf2oJC11FDcQF8IQ/25BghCgcX71hTZeeSSU4z+wzWi0L JMeaG+BDM+RYgDMISE1u6/sxBjw/i8rnbCH57O+b+OAlBj3a6SXuUmZBG191J5vi 4USDd+PpoUhiI03SnrJh0NfTS4yApm+QKtLWP+vDOR6TlwK3tP7GLIjT9HEIJFlT PEB9HEgQOmtPo5NBBjA1Dk5fFMorX8DEwGmt6qvms94bZu3/F/DHnu2Y+uUcXKDw m5vmNeqqyTxoE6oQqHFKMRf8ubI4X5v2z5DUhjR928P21Nsb4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/F+eGEr9CqJTwuJIdSXe8ZdJ3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2E0MTRhMjQtMmNmOS0z NTVjLWI4M2YtNWMwNDNiZDdmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTqMiidVI7vZpiguyVVOMpT//oJ4QbxvLWuTNINy9iJcLJFUwy7Jevx JLb7D41x2y7Xu/tt5ATkaWJZhCv0sfjXlHjEVlArj3OZHlUNqERrT6I4CySjyWdT pz42WlYm+avvLVTsI3tQvW7pA3ccZ+GEen2xazG/9UC/UQEj1tHjoMOHbGNHdxmv RqQt+tWqwr8iZamrnCVxlkyrHNPwxj0+VCNLIgYZTf+avmu7negyYyBN8F1R0m18 jKk5+CdOr8j1itb7orhqu+vhPYLmGn5m/MNsKV1YRvhOqEWb+Y5mDQ1PB+2+nCyP KIG+6Sy9LpFyV8DE/YPiruy8MgjkMwI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:52 2025 by rpki-client