$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa File: cb8982ef-d66f-39ea-b5a6-ba28882be242.roa (raw, json) Hash identifier: Y3XZ3xFLeY28+h+n4mmObpo7vbnyCf+9nSae4mUwpow= Subject key identifier: 66:08:4A:56:DC:B9:F8:87:E9:15:B9:DC:DD:8A:81:51:2E:34:58:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD2A157CC677686C096F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa Signing time: Thu 21 Aug 2025 17:32:03 +0000 ROA not before: Thu 21 Aug 2025 17:32:03 +0000 ROA not after: Wed 19 Nov 2025 18:32:03 +0000 asID: 31898 IP address blocks: 129.159.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:2a:15:7c:c6:77:68:6c:09:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:03 2025 GMT Not After : Nov 19 18:32:03 2025 GMT Subject: CN=4ca72284-cc4f-4e97-bdca-d78afe2ad82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:4b:b0:49:b2:68:79:79:75:fd:aa:4f:8f: 0f:93:5f:a8:8d:9e:ef:f5:9c:e1:52:0c:ae:00:db: 44:26:80:44:0d:25:85:47:ef:23:9b:fa:db:d8:17: 27:7e:ab:53:f4:51:47:8f:7f:02:3d:95:5c:44:b6: b6:e4:01:af:0e:c2:58:be:e9:13:70:3a:d8:cc:dd: 99:e1:9c:62:db:cf:5d:40:6c:95:f3:83:27:65:cc: 66:ff:96:39:bc:2d:af:b4:f4:4e:b4:a4:52:ff:aa: a2:f9:94:72:c5:74:46:76:9c:77:e7:d4:f0:a8:61: 5c:26:6c:d0:54:10:01:d3:1a:a5:15:84:8c:4a:3d: a1:a7:43:45:f8:79:44:04:85:9b:e5:0a:25:c6:bf: 72:48:89:c2:0f:57:f7:81:2f:9b:e8:b8:f8:95:1c: 3c:04:ca:de:37:97:6e:ba:24:5f:9d:47:3c:b6:03: 3a:48:b2:89:12:5e:f4:af:04:cb:dd:87:f2:40:9f: f8:7a:6b:7d:78:c6:2b:b5:40:70:0b:7b:78:9f:56: cf:f7:bb:c5:c7:6a:2a:a1:da:e9:7e:a9:95:ea:e2: 13:0d:4f:9a:9a:a0:1a:3f:db:7b:19:51:fe:9c:c8: df:28:a6:a7:9c:e5:cb:62:0c:33:60:48:9c:5c:2f: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:4A:56:DC:B9:F8:87:E9:15:B9:DC:DD:8A:81:51:2E:34:58:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb8982ef-d66f-39ea-b5a6-ba28882be242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5b:ef:f9:26:19:74:f5:97:0d:4c:57:7b:99:46:73:a1:33: dc:42:85:27:02:03:e0:7f:cc:c9:1c:3e:6c:98:c5:e1:82:1c: 4f:45:d3:f6:f8:7b:df:de:11:9a:78:2d:0e:f3:c5:37:32:97: 39:e1:e2:93:01:6d:28:63:f9:e5:ac:2d:0e:21:4f:e5:f7:14: 9a:7f:4b:99:41:c1:46:ca:ed:b1:28:b7:d3:77:50:11:61:ec: 5c:07:93:5b:db:72:16:ac:32:d0:ce:60:d9:e7:f3:26:56:a3: 23:6d:be:6a:20:5e:2c:4b:5b:1b:c8:1d:71:9b:8a:0c:8b:3a: a9:d3:7f:0a:6b:60:91:e0:e8:36:b2:cb:5e:de:25:57:5f:c4: be:92:5f:0e:e5:d0:ef:fb:5a:06:d6:3f:8f:a6:80:72:84:81: 7f:95:46:2e:aa:82:42:66:20:a9:a9:53:de:c4:03:c8:81:5e: da:46:1a:52:0e:ae:a3:f3:4a:ab:af:44:8b:83:1d:b6:c1:5f: fb:4b:db:32:89:d0:86:b7:f4:c1:8e:97:95:6a:ab:d5:f8:73: 0a:4d:ed:24:08:b0:78:30:ba:7d:ea:25:2a:93:dc:a3:87:09: c4:cd:26:9b:25:bd:d4:1f:23:e5:ff:c7:a1:00:1f:6a:97:d6: e2:f6:e1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurSoVfMZ3aGwJb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIwM1oXDTI1MTExOTE4MzIwM1owLzEtMCsGA1UEAxMk NGNhNzIyODQtY2M0Zi00ZTk3LWJkY2EtZDc4YWZlMmFkODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhLsEmyaHl5df2qT48Pk1+ojZ7v9ZzhUgyu ANtEJoBEDSWFR+8jm/rb2BcnfqtT9FFHj38CPZVcRLa25AGvDsJYvukTcDrYzN2Z 4Zxi289dQGyV84MnZcxm/5Y5vC2vtPROtKRS/6qi+ZRyxXRGdpx359TwqGFcJmzQ VBAB0xqlFYSMSj2hp0NF+HlEBIWb5Qolxr9ySInCD1f3gS+b6Lj4lRw8BMreN5du uiRfnUc8tgM6SLKJEl70rwTL3YfyQJ/4emt9eMYrtUBwC3t4n1bP97vFx2oqodrp fqmV6uITDU+amqAaP9t7GVH+nMjfKKannOXLYgwzYEicXC97hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYISlbcufiH6RW53N2KgVEuNFjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2I4OTgyZWYtZDY2Zi0z OWVhLWI1YTYtYmEyODg4MmJlMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZ8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhb7/kmGXT1lw1MV3uZRnOhM9xChScCA+B/zMkcPmyYxeGCHE9F0/b4 e9/eEZp4LQ7zxTcylznh4pMBbShj+eWsLQ4hT+X3FJp/S5lBwUbK7bEot9N3UBFh 7FwHk1vbchasMtDOYNnn8yZWoyNtvmogXixLWxvIHXGbigyLOqnTfwprYJHg6Day y17eJVdfxL6SXw7l0O/7WgbWP4+mgHKEgX+VRi6qgkJmIKmpU97EA8iBXtpGGlIO rqPzSquvRIuDHbbBX/tL2zKJ0Ia39MGOl5Vqq9X4cwpN7SQIsHgwun3qJSqT3KOH CcTNJpslvdQfI+X/x6EAH2qX1uL24aY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:06 2025 by rpki-client