$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa File: ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa (raw, json) Hash identifier: GIFXRt2fZKVwKOLtlHIgAG9IN4KIBmT9J6Bu0G/9dAw= Subject key identifier: 1C:C1:9B:DC:F0:C0:B3:AF:E5:1D:1E:21:68:D1:AA:8A:98:45:6C:19 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE1ADD417B3C62BED1A72A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa Signing time: Thu 21 Aug 2025 12:37:17 +0000 ROA not before: Thu 21 Aug 2025 12:37:17 +0000 ROA not after: Wed 19 Nov 2025 13:37:17 +0000 asID: 31898 IP address blocks: 129.149.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:1a:dd:41:7b:3c:62:be:d1:a7:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 12:37:17 2025 GMT Not After : Nov 19 13:37:17 2025 GMT Subject: CN=9db6a3bb-1aa6-4347-a5c8-d43292a79ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:8c:4e:09:38:04:51:ec:d5:4d:81:31:0b: c0:fe:93:31:d3:80:55:cc:d0:77:3f:22:ea:da:c7: bf:37:8a:cb:a2:4e:9d:b5:78:de:53:19:37:c2:29: 9e:cc:72:1e:88:3d:7d:e7:ee:9d:d1:eb:49:c2:60: b8:b7:fa:b9:06:17:fd:42:af:c8:8e:fb:04:d2:83: 62:a4:38:ac:1d:2f:b9:8d:c3:cb:50:41:e1:23:24: a0:82:17:c2:6f:e5:bc:7b:64:c1:93:e8:c6:01:60: 4d:02:4c:56:7f:31:e0:f2:90:75:30:20:f8:97:b4: 52:b4:35:cf:d7:b5:3f:43:15:b5:f4:b3:17:61:fb: 0c:2f:d0:d0:61:59:d2:c5:7b:c6:de:c1:e4:f8:23: 63:f7:db:1c:7a:71:2b:6f:84:ab:67:2e:23:0a:65: c2:45:2a:49:4f:66:85:a7:fb:6b:ba:05:83:ee:2e: d9:32:aa:b6:5c:0b:90:68:cc:70:03:64:c0:ae:30: 1a:3e:d0:02:10:71:6b:07:9a:02:02:62:d6:92:98: fb:9f:b7:75:97:cd:57:12:e1:b2:13:c1:e1:26:4a: e8:da:1a:fa:80:58:7f:ff:cd:9b:a4:08:57:35:c5: 5c:ab:93:da:43:3d:9b:80:5b:69:8b:03:7b:4e:29: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C1:9B:DC:F0:C0:B3:AF:E5:1D:1E:21:68:D1:AA:8A:98:45:6C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7e:ea:00:9d:8a:4c:a0:33:6e:fa:31:8d:1f:48:49:cb:63: ad:28:9d:22:b8:20:19:c4:01:b8:7d:5f:f6:93:66:68:e9:0b: 68:a9:d4:39:b4:50:71:50:8c:67:77:1a:39:e4:70:4b:5b:d2: 5c:60:1a:c7:d1:53:53:75:af:41:59:85:a2:fe:7c:92:21:85: c7:68:63:e7:93:44:07:52:c0:65:84:40:d1:b9:84:67:4e:2a: 15:af:97:d2:59:a0:5a:1a:66:34:51:85:e9:05:a3:40:3e:06: 74:78:98:ae:8b:4c:3b:fd:fa:c8:68:83:62:a9:ad:f7:34:16: ca:a0:0a:94:4c:24:ab:ff:d8:41:aa:c8:47:ec:70:e0:44:5f: e2:0f:32:d3:07:49:a7:56:2c:69:fe:e7:2d:f2:35:32:36:e9: 7c:54:69:6f:40:b0:ad:19:8a:d4:5a:17:a3:56:12:95:08:48: d7:38:bc:41:8d:27:26:a0:e7:51:63:f7:3d:e2:f4:6f:05:3c: 1e:b6:f1:f7:76:4c:e1:fe:ed:d1:7c:08:a2:cb:40:f0:c8:19: c5:93:fd:86:df:72:7f:c4:2d:25:99:c5:c3:1f:c8:e3:fd:3c: 68:a4:62:2a:08:ad:c5:57:62:f9:b6:7a:90:37:0a:57:eb:34: cd:41:f6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruGt1BezxivtGnKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEyMzcxN1oXDTI1MTExOTEzMzcxN1owLzEtMCsGA1UEAxMk OWRiNmEzYmItMWFhNi00MzQ3LWE1YzgtZDQzMjkyYTc5YWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4uMTgk4BFHs1U2BMQvA/pMx04BVzNB3PyLq 2se/N4rLok6dtXjeUxk3wimezHIeiD195+6d0etJwmC4t/q5Bhf9Qq/IjvsE0oNi pDisHS+5jcPLUEHhIySgghfCb+W8e2TBk+jGAWBNAkxWfzHg8pB1MCD4l7RStDXP 17U/QxW19LMXYfsML9DQYVnSxXvG3sHk+CNj99scenErb4SrZy4jCmXCRSpJT2aF p/trugWD7i7ZMqq2XAuQaMxwA2TArjAaPtACEHFrB5oCAmLWkpj7n7d1l81XEuGy E8HhJkro2hr6gFh//82bpAhXNcVcq5PaQz2bgFtpiwN7Tik6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzBm9zwwLOv5R0eIWjRqoqYRWwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGVkMWQxYzctZWI2YS0z NjUxLThhZGEtZmYzODc4N2YyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5+6gCdikygM276MY0fSEnLY60onSK4IBnEAbh9X/aTZmjpC2ip1Dm0 UHFQjGd3GjnkcEtb0lxgGsfRU1N1r0FZhaL+fJIhhcdoY+eTRAdSwGWEQNG5hGdO KhWvl9JZoFoaZjRRhekFo0A+BnR4mK6LTDv9+shog2Kprfc0FsqgCpRMJKv/2EGq yEfscOBEX+IPMtMHSadWLGn+5y3yNTI26XxUaW9AsK0ZitRaF6NWEpUISNc4vEGN Jyag51Fj9z3i9G8FPB628fd2TOH+7dF8CKLLQPDIGcWT/Ybfcn/ELSWZxcMfyOP9 PGikYioIrcVXYvm2epA3ClfrNM1B9i8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:16 2025 by rpki-client