$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7bd4ca7-40a2-33db-9fa0-daed41338ad5.roa File: e7bd4ca7-40a2-33db-9fa0-daed41338ad5.roa (raw, json) Hash identifier: jlgFYvAVyKEVNt3fm2KXtXmV+DjC6hXh/1H9oklagEs= Subject key identifier: 5B:C3:53:F4:CE:FD:38:C5:92:4F:06:20:42:6C:29:11:84:BF:1E:4B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD2436BD1FB3F58C8A7BA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7bd4ca7-40a2-33db-9fa0-daed41338ad5.roa Signing time: Thu 21 Aug 2025 17:32:00 +0000 ROA not before: Thu 21 Aug 2025 17:32:00 +0000 ROA not after: Wed 19 Nov 2025 18:32:00 +0000 asID: 31898 IP address blocks: 129.159.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:24:36:bd:1f:b3:f5:8c:8a:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:00 2025 GMT Not After : Nov 19 18:32:00 2025 GMT Subject: CN=3716826b-52d0-473f-87d6-2108e6cc1031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:85:8c:43:4a:4a:3a:3c:79:c4:cd:25:91: 9a:31:f7:48:68:48:f2:be:95:70:bb:b4:5c:db:9a: a8:1b:74:e5:a5:83:5c:29:e6:25:50:05:94:9b:e5: 21:17:d5:72:08:e4:99:c5:3f:97:1c:70:38:ed:47: 67:71:19:0b:7a:73:da:80:3c:5a:f2:54:7c:07:ea: 94:f1:2a:b9:2a:00:8c:da:71:55:d9:d9:dc:83:ae: 6a:52:81:db:d6:3f:68:16:44:6d:db:42:68:51:7d: 0c:68:82:60:3e:56:4d:36:9a:db:1e:e7:88:88:70: e0:21:ef:8e:ae:e8:41:f6:6c:1b:34:96:a6:46:95: 31:db:ee:e7:65:9d:61:8f:e6:a3:2b:84:6c:b9:e2: 02:80:0a:1d:f9:9f:1f:fe:81:0d:69:51:b8:07:42: 1f:b0:60:da:c0:01:c9:ab:3c:c8:06:81:e9:38:ba: 1f:78:47:c6:29:fe:c4:a8:ba:2b:f8:5d:3d:df:54: 3b:b6:0b:15:c1:a6:d2:1c:f8:f6:7c:47:f8:e3:28: 88:a6:9f:23:cc:4b:7a:f6:ac:1c:c0:89:8d:de:fd: 95:01:71:ce:19:37:0a:95:70:10:e4:81:92:65:c6: c0:dd:d2:2e:50:19:b4:6e:e0:0c:11:29:c4:f8:ce: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:53:F4:CE:FD:38:C5:92:4F:06:20:42:6C:29:11:84:BF:1E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7bd4ca7-40a2-33db-9fa0-daed41338ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:38:5b:bb:1c:ed:55:fc:29:f3:74:33:6f:6b:bc:6e:1a:78: 47:ff:08:7d:fe:2f:68:71:14:c8:2b:3b:b3:b6:e5:2c:7e:1f: a3:ea:76:c4:b9:fe:12:d0:0d:27:dc:72:7b:1e:1b:74:f6:a7: 91:fb:d9:ac:40:30:12:c5:20:05:5a:3e:53:2a:9d:e2:c8:05: 42:2e:c2:85:e5:50:44:92:e8:23:56:b1:df:14:86:c2:8b:70: d9:a1:ec:54:16:c9:ba:81:56:21:1f:fc:d1:87:96:93:32:a9: 1c:7b:a2:95:8a:6d:e2:7d:fa:c7:c8:e4:ce:7e:6e:f1:2a:16: 35:15:05:57:8c:1a:ea:77:9f:ee:5e:ce:62:13:78:b0:67:d9: b7:6c:38:9f:8e:97:3a:5f:e5:9a:05:f4:0b:7a:55:be:9c:92: 5a:b2:7f:84:aa:7e:ce:d0:c8:2d:d5:78:5c:27:66:9f:3f:33: 53:83:26:f8:76:9b:d5:57:ff:a6:21:3c:2e:18:99:28:d7:df: 85:65:a5:ed:08:ea:60:c2:01:09:29:18:1e:dc:89:b2:ff:1b: fc:f2:88:ae:6d:b7:01:8b:31:6d:44:2b:a7:18:05:d3:23:b1: 71:22:ab:d1:7a:e3:63:c6:cd:d5:84:70:3c:f2:97:a9:3f:4f: c0:6a:6b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurSQ2vR+z9YyKe6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIwMFoXDTI1MTExOTE4MzIwMFowLzEtMCsGA1UEAxMk MzcxNjgyNmItNTJkMC00NzNmLTg3ZDYtMjEwOGU2Y2MxMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYuFjENKSjo8ecTNJZGaMfdIaEjyvpVwu7Rc 25qoG3TlpYNcKeYlUAWUm+UhF9VyCOSZxT+XHHA47UdncRkLenPagDxa8lR8B+qU 8Sq5KgCM2nFV2dncg65qUoHb1j9oFkRt20JoUX0MaIJgPlZNNprbHueIiHDgIe+O ruhB9mwbNJamRpUx2+7nZZ1hj+ajK4RsueICgAod+Z8f/oENaVG4B0IfsGDawAHJ qzzIBoHpOLofeEfGKf7EqLor+F0931Q7tgsVwabSHPj2fEf44yiIpp8jzEt69qwc wImN3v2VAXHOGTcKlXAQ5IGSZcbA3dIuUBm0buAMESnE+M4iGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvDU/TO/TjFkk8GIEJsKRGEvx5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTdiZDRjYTctNDBhMi0z M2RiLTlmYTAtZGFlZDQxMzM4YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU4W7sc7VX8KfN0M29rvG4aeEf/CH3+L2hxFMgrO7O25Sx+H6PqdsS5 /hLQDSfccnseG3T2p5H72axAMBLFIAVaPlMqneLIBUIuwoXlUESS6CNWsd8UhsKL cNmh7FQWybqBViEf/NGHlpMyqRx7opWKbeJ9+sfI5M5+bvEqFjUVBVeMGup3n+5e zmITeLBn2bdsOJ+Olzpf5ZoF9At6Vb6cklqyf4Sqfs7QyC3VeFwnZp8/M1ODJvh2 m9VX/6YhPC4YmSjX34Vlpe0I6mDCAQkpGB7cibL/G/zyiK5ttwGLMW1EK6cYBdMj sXEiq9F642PGzdWEcDzyl6k/T8Bqa0g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:04 2025 by rpki-client