$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa File: 40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa (raw, json) Hash identifier: zB0gJ6cMOLwZrwhsub+2FlPBMRUrT0UR6Y1ps8QWOY0= Subject key identifier: 08:BF:49:FA:59:39:8A:13:BA:BB:14:A6:E3:87:41:0A:F1:98:6A:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C7019331C3D85AAD79B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa Signing time: Wed 20 Aug 2025 21:05:33 +0000 ROA not before: Wed 20 Aug 2025 21:05:33 +0000 ROA not after: Tue 18 Nov 2025 22:05:33 +0000 asID: 31898 IP address blocks: 129.148.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:70:19:33:1c:3d:85:aa:d7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:33 2025 GMT Not After : Nov 18 22:05:33 2025 GMT Subject: CN=60ca8e5b-6723-4f56-a9fb-6822f8f993ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:7d:43:9a:16:72:c2:a7:f5:b4:8c:03:da: 8b:66:cc:11:fa:2f:fa:25:f8:9b:3a:6e:6c:6e:f9: f1:f5:4d:54:37:c8:2e:a3:7a:2a:c2:20:5f:85:30: e4:22:66:4e:b6:0e:82:2f:cf:cb:6c:29:b6:42:8e: f9:b1:e7:fe:93:98:f7:8b:c0:ae:e3:7f:bb:cf:fe: e5:69:1f:7c:ea:a1:2c:12:92:ed:dc:1b:1b:ba:6f: 2c:39:73:dd:59:76:8e:8a:36:90:52:10:5b:29:37: d9:0d:4a:24:1e:8b:92:7e:a1:31:ba:ae:65:13:7b: a1:c3:a9:27:b2:8f:56:97:98:25:4f:4d:26:77:62: 95:5d:8c:08:7f:cc:06:cf:4e:94:e8:42:c0:9a:e3: b0:cc:53:e1:3d:08:ae:11:46:7f:a8:3b:41:31:2f: d1:19:35:e3:64:7a:92:96:e2:11:5b:e7:c9:b7:19: a7:77:66:65:9a:2b:b7:be:40:a4:7f:7f:61:2c:5e: 7f:c5:8f:73:b4:3d:e2:02:39:d9:81:95:f1:ea:94: b6:cf:14:c6:57:30:7c:90:fd:0c:dd:f0:c7:22:a0: cf:c9:b6:1c:48:84:b8:b5:35:54:1e:42:57:69:3e: e3:7e:bf:d6:d7:18:c2:c7:12:6e:13:4f:b3:a1:75: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BF:49:FA:59:39:8A:13:BA:BB:14:A6:E3:87:41:0A:F1:98:6A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40f3578c-8ddd-3ae7-8e46-ce25193b583f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:44:91:7a:4a:1f:10:e5:72:17:1d:ca:9b:2e:60:3d:2a:7f: 0d:6a:76:f1:7c:88:0f:ab:88:15:58:01:62:66:3a:07:6c:36: 9a:a1:2c:14:f7:c0:2a:86:fd:95:65:30:74:91:7c:23:da:e6: f2:bf:94:f9:c9:74:5c:f0:1d:54:db:e4:4f:42:20:aa:0c:54: 93:55:2d:e7:cb:9a:81:a2:43:95:24:bb:7f:7f:8c:06:57:42: e2:55:da:16:4a:df:48:4b:d4:54:8a:21:c7:ea:33:cc:eb:72: 83:8e:e1:9a:3d:6c:66:45:e8:03:5d:3d:a6:28:28:5f:d8:50: ed:46:70:f5:38:6a:69:2a:d9:2c:14:f1:0f:ab:77:c3:e6:fe: 5c:4a:cf:09:70:d6:f1:5e:31:15:c2:c5:73:b4:6c:77:c1:fb: fd:f6:78:46:99:f3:b9:37:4a:76:16:dd:f0:9f:da:74:52:4e: c4:b2:6d:9a:50:1a:7b:ae:1d:c3:bb:a4:42:fa:a8:50:95:9f: 94:46:ec:33:3a:50:c0:66:02:ca:38:bf:5a:97:38:76:63:a2: 7c:f0:ca:e8:7e:4f:dc:11:06:1a:e1:2d:c3:a3:18:02:bf:24: 52:bd:48:f2:3c:19:15:db:08:9b:6e:fa:af:bb:b7:41:13:4f: 1b:f0:54:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTHAZMxw9harXmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDUzM1oXDTI1MTExODIyMDUzM1owLzEtMCsGA1UEAxMk NjBjYThlNWItNjcyMy00ZjU2LWE5ZmItNjgyMmY4Zjk5M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYV9Q5oWcsKn9bSMA9qLZswR+i/6JfibOm5s bvnx9U1UN8guo3oqwiBfhTDkImZOtg6CL8/LbCm2Qo75sef+k5j3i8Cu43+7z/7l aR986qEsEpLt3Bsbum8sOXPdWXaOijaQUhBbKTfZDUokHouSfqExuq5lE3uhw6kn so9Wl5glT00md2KVXYwIf8wGz06U6ELAmuOwzFPhPQiuEUZ/qDtBMS/RGTXjZHqS luIRW+fJtxmnd2Zlmiu3vkCkf39hLF5/xY9ztD3iAjnZgZXx6pS2zxTGVzB8kP0M 3fDHIqDPybYcSIS4tTVUHkJXaT7jfr/W1xjCxxJuE0+zoXVd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi/SfpZOYoTursUpuOHQQrxmGqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBmMzU3OGMtOGRkZC0z YWU3LThlNDYtY2UyNTE5M2I1ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5EkXpKHxDlchcdypsuYD0qfw1qdvF8iA+riBVYAWJmOgdsNpqhLBT3 wCqG/ZVlMHSRfCPa5vK/lPnJdFzwHVTb5E9CIKoMVJNVLefLmoGiQ5Uku39/jAZX QuJV2hZK30hL1FSKIcfqM8zrcoOO4Zo9bGZF6ANdPaYoKF/YUO1GcPU4amkq2SwU 8Q+rd8Pm/lxKzwlw1vFeMRXCxXO0bHfB+/32eEaZ87k3SnYW3fCf2nRSTsSybZpQ GnuuHcO7pEL6qFCVn5RG7DM6UMBmAso4v1qXOHZjonzwyuh+T9wRBhrhLcOjGAK/ JFK9SPI8GRXbCJtu+q+7t0ETTxvwVCY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:56 2025 by rpki-client