$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa File: d4822db4-899b-317f-98e0-8c241217efa5.roa (raw, json) Hash identifier: iEIQp4cs0M5utIDz2z4LdZTnet489usGcifjU5preus= Subject key identifier: CD:50:AC:89:F7:B3:9B:1F:45:D3:9C:13:B1:C0:56:96:2D:1A:B7:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDD9FA560B09C379B658B180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa Signing time: Thu 21 Aug 2025 10:26:32 +0000 ROA not before: Thu 21 Aug 2025 10:26:32 +0000 ROA not after: Wed 19 Nov 2025 11:26:32 +0000 asID: 31898 IP address blocks: 129.148.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:d9:fa:56:0b:09:c3:79:b6:58:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:26:32 2025 GMT Not After : Nov 19 11:26:32 2025 GMT Subject: CN=415fad26-d03c-487f-a7e6-67e2d23ba018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:00:a7:60:de:f3:4e:cb:53:de:a7:22:e0: f6:a0:5c:fa:2a:b7:81:87:6c:0a:bb:5e:77:b4:4c: 59:5c:b9:7c:31:1c:2f:7e:6a:c2:a2:61:fa:b3:4a: 24:83:cb:51:65:36:6f:da:d6:29:37:a4:41:0c:50: e0:03:55:8b:47:ff:2f:1b:f4:ba:3e:77:2a:9f:3f: 1b:08:19:b4:8a:4f:19:32:2a:99:0f:af:48:c8:1f: 5f:11:ea:4d:41:c2:17:b4:67:0f:ec:c5:40:c8:69: 47:f8:0f:55:02:40:b4:93:19:ef:19:5f:da:41:39: 7d:a0:0a:ae:dd:64:37:11:d1:96:a3:cb:6c:e1:0e: d4:0f:b3:33:b3:1a:45:f8:0e:25:73:dc:2b:6a:62: 17:bc:72:03:8a:64:66:a7:e1:a6:9c:74:7d:1b:bc: c8:d9:9e:e5:e1:02:ed:32:43:be:95:0e:b3:39:0f: 04:83:7b:cf:ae:60:91:3f:b7:b6:e6:71:67:76:24: 39:53:46:6f:70:7d:eb:be:c0:41:56:bc:49:c2:4a: 35:96:f5:1b:bf:95:2d:69:a7:27:e8:85:66:29:5d: 83:c1:13:50:42:63:94:45:da:27:0c:69:80:7f:b2: f5:b1:bf:92:38:56:7e:94:e2:07:5d:f8:76:40:b7: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:AC:89:F7:B3:9B:1F:45:D3:9C:13:B1:C0:56:96:2D:1A:B7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d4822db4-899b-317f-98e0-8c241217efa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5b:aa:47:92:77:6c:aa:62:51:d5:d0:c2:49:1a:0e:5e:3b: de:03:83:80:37:d3:a6:05:d8:16:ca:65:65:04:87:8d:74:2c: 20:db:c0:7e:66:e5:34:69:bf:f3:2f:d3:70:34:e6:ae:cd:74: b5:85:c2:c2:05:52:2c:50:10:58:a7:96:6c:8b:d9:6a:59:7c: fc:da:99:74:4c:bf:d8:3a:f9:42:22:85:d6:8f:da:88:5b:11: 51:fe:e0:ae:af:ac:47:6b:17:e3:36:b4:bf:55:b3:6a:41:8b: b5:40:03:e4:79:29:6a:df:f3:b0:0b:9b:ce:45:45:58:d4:3e: 04:ad:40:39:f0:39:5d:31:c1:fa:bc:0a:ef:f4:52:0a:1d:9b: 56:14:59:8a:92:78:25:19:c8:37:a6:0a:99:07:d7:aa:04:90: 34:96:37:31:02:18:26:75:2e:7e:d5:dd:a7:c3:a4:4d:a8:5d: 08:e8:e0:63:08:9d:34:83:86:c3:2e:19:ba:f2:aa:d5:64:67: b0:d5:ae:2c:37:b0:91:9e:ef:e6:87:c3:6c:ba:53:34:07:a4: 0b:d6:de:13:5d:6e:2f:f5:bb:e0:5d:9d:66:6e:6b:07:27:ba: e6:81:71:36:e3:f4:8f:4b:13:58:03:43:21:b5:14:f0:2b:8c: 97:53:73:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2fpWCwnDebZYsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjYzMloXDTI1MTExOTExMjYzMlowLzEtMCsGA1UEAxMk NDE1ZmFkMjYtZDAzYy00ODdmLWE3ZTYtNjdlMmQyM2JhMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm28Ap2De807LU96nIuD2oFz6KreBh2wKu153 tExZXLl8MRwvfmrComH6s0okg8tRZTZv2tYpN6RBDFDgA1WLR/8vG/S6Pncqnz8b CBm0ik8ZMiqZD69IyB9fEepNQcIXtGcP7MVAyGlH+A9VAkC0kxnvGV/aQTl9oAqu 3WQ3EdGWo8ts4Q7UD7MzsxpF+A4lc9wramIXvHIDimRmp+GmnHR9G7zI2Z7l4QLt MkO+lQ6zOQ8Eg3vPrmCRP7e25nFndiQ5U0ZvcH3rvsBBVrxJwko1lvUbv5Utaacn 6IVmKV2DwRNQQmOURdonDGmAf7L1sb+SOFZ+lOIHXfh2QLcPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1QrIn3s5sfRdOcE7HAVpYtGrfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDQ4MjJkYjQtODk5Yi0z MTdmLTk4ZTAtOGMyNDEyMTdlZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpbqkeSd2yqYlHV0MJJGg5eO94Dg4A306YF2BbKZWUEh410LCDbwH5m 5TRpv/Mv03A05q7NdLWFwsIFUixQEFinlmyL2WpZfPzamXRMv9g6+UIihdaP2ohb EVH+4K6vrEdrF+M2tL9Vs2pBi7VAA+R5KWrf87ALm85FRVjUPgStQDnwOV0xwfq8 Cu/0Ugodm1YUWYqSeCUZyDemCpkH16oEkDSWNzECGCZ1Ln7V3afDpE2oXQjo4GMI nTSDhsMuGbryqtVkZ7DVriw3sJGe7+aHw2y6UzQHpAvW3hNdbi/1u+BdnWZuawcn uuaBcTbj9I9LE1gDQyG1FPArjJdTcw8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:22 2025 by rpki-client