$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2393024-5c62-3c5d-bda5-62c0af187c9c.roa File: e2393024-5c62-3c5d-bda5-62c0af187c9c.roa (raw, json) Hash identifier: oNrhv3Qq8E82EabEOt19PIyo3qVJ6uPnb5QBYVRXr48= Subject key identifier: A9:60:F1:73:17:28:01:C7:8F:23:68:BC:9A:56:FF:06:3D:60:B5:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C6D2350A2E62B4DE12800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2393024-5c62-3c5d-bda5-62c0af187c9c.roa Signing time: Wed 20 Aug 2025 21:05:31 +0000 ROA not before: Wed 20 Aug 2025 21:05:31 +0000 ROA not after: Tue 18 Nov 2025 22:05:31 +0000 asID: 31898 IP address blocks: 129.148.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:6d:23:50:a2:e6:2b:4d:e1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:31 2025 GMT Not After : Nov 18 22:05:31 2025 GMT Subject: CN=0aa05e3c-6b75-491c-ab18-3544fb3f8917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:8e:7e:57:e1:dd:41:df:e6:b9:f6:76:9c: 8a:a2:54:51:72:cd:0c:29:47:36:d7:17:76:7d:1e: 3e:68:13:bc:d2:c9:a0:6f:2f:69:65:6d:9f:8d:f5: 44:2f:9a:3b:7d:f8:6e:8f:a7:fe:0e:6b:27:f3:3a: b9:f3:24:a1:d7:f7:f7:54:31:95:18:45:8f:ee:46: b1:19:41:f5:b1:51:dc:5c:28:3f:5c:f7:b4:6f:a0: 31:e3:f4:9e:b8:3c:8e:4f:c4:d2:84:21:4d:3c:c1: b6:1a:ac:d3:17:36:ff:91:5c:60:3c:9b:70:30:27: 79:26:5f:93:5e:86:0d:93:3d:5a:aa:c7:ee:a8:4a: c3:b7:0f:4f:a8:20:2b:31:c6:47:2b:7d:a9:9b:0f: b3:af:c2:bb:6a:33:81:e2:c2:cd:e3:df:2a:22:21: b3:ee:5f:8d:b3:e8:44:c0:20:c9:df:59:66:d1:0f: 8b:44:77:99:96:24:fe:ec:ef:de:ac:1e:39:a3:41: f1:33:e1:93:b5:b1:42:0c:ac:25:c7:25:82:96:a6: 53:dc:e3:3c:06:20:0e:f0:78:d0:d2:0c:4b:df:26: 41:5e:04:26:5e:a0:c6:05:f7:33:5d:cb:33:49:ae: 2c:dc:f0:27:02:c9:67:75:78:fa:cb:cd:3c:75:02: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:F1:73:17:28:01:C7:8F:23:68:BC:9A:56:FF:06:3D:60:B5:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2393024-5c62-3c5d-bda5-62c0af187c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f1:22:71:ee:35:7f:af:47:1c:ba:3b:81:2e:e5:e3:5e:cd: 21:9c:8e:0d:d9:5e:8f:fb:02:2e:6f:95:53:50:9b:4e:2d:b8: 2e:74:e6:27:84:a7:bb:8f:e4:3c:53:60:ef:71:0c:e4:2c:4f: 92:ac:52:66:cd:ae:b6:b2:f6:58:4c:91:72:84:eb:a3:4f:ad: 6b:b0:e7:78:42:d1:f5:76:32:10:bb:1e:bc:67:49:61:bc:15: d7:95:59:b2:22:04:7e:61:96:5d:67:8f:2b:dc:c7:b6:13:9c: a5:09:f4:da:99:fc:53:87:3e:63:5c:be:0f:59:f8:b0:ee:0f: 8c:f7:8f:e3:fe:3e:6e:97:8d:6c:45:2b:ba:a7:1a:f1:9c:2b: 49:ac:de:08:0b:3c:29:4e:cb:72:17:d9:2c:c8:fc:e2:e5:29: 9d:d2:4b:04:25:cf:6c:93:d7:9f:f8:76:29:d1:d1:01:ee:7b: 97:8a:8e:03:3e:7c:7d:41:da:85:20:47:9f:e9:b4:fe:46:52: 89:98:d7:df:a6:ed:c6:a4:b4:ee:f8:df:8b:84:af:21:57:96: 32:dc:3e:c5:45:c7:f6:8f:38:3a:71:c8:2b:03:e0:55:08:61: a2:f6:23:d3:60:0f:ec:7e:33:20:e0:82:37:8c:0c:f7:3a:e8: 2e:cf:6f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTG0jUKLmK03hKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDUzMVoXDTI1MTExODIyMDUzMVowLzEtMCsGA1UEAxMk MGFhMDVlM2MtNmI3NS00OTFjLWFiMTgtMzU0NGZiM2Y4OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV6Oflfh3UHf5rn2dpyKolRRcs0MKUc21xd2 fR4+aBO80smgby9pZW2fjfVEL5o7ffhuj6f+Dmsn8zq58ySh1/f3VDGVGEWP7kax GUH1sVHcXCg/XPe0b6Ax4/SeuDyOT8TShCFNPMG2GqzTFzb/kVxgPJtwMCd5Jl+T XoYNkz1aqsfuqErDtw9PqCArMcZHK32pmw+zr8K7ajOB4sLN498qIiGz7l+Ns+hE wCDJ31lm0Q+LRHeZliT+7O/erB45o0HxM+GTtbFCDKwlxyWClqZT3OM8BiAO8HjQ 0gxL3yZBXgQmXqDGBfczXcszSa4s3PAnAslndXj6y808dQL6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlg8XMXKAHHjyNovJpW/wY9YLWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTIzOTMwMjQtNWM2Mi0z YzVkLWJkYTUtNjJjMGFmMTg3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDxInHuNX+vRxy6O4Eu5eNezSGcjg3ZXo/7Ai5vlVNQm04tuC505ieE p7uP5DxTYO9xDOQsT5KsUmbNrray9lhMkXKE66NPrWuw53hC0fV2MhC7HrxnSWG8 FdeVWbIiBH5hll1njyvcx7YTnKUJ9NqZ/FOHPmNcvg9Z+LDuD4z3j+P+Pm6XjWxF K7qnGvGcK0ms3ggLPClOy3IX2SzI/OLlKZ3SSwQlz2yT15/4dinR0QHue5eKjgM+ fH1B2oUgR5/ptP5GUomY19+m7caktO7434uEryFXljLcPsVFx/aPODpxyCsD4FUI YaL2I9NgD+x+MyDggjeMDPc66C7Pb54= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:40 2025 by rpki-client