$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa File: 97936a49-6697-3eb2-875e-4638d0032b55.roa (raw, json) Hash identifier: uY0K3CZCR4YeEXVPSZXJ6HR/ZI3ajzPkMUNPmV6C8c4= Subject key identifier: AB:25:41:00:1C:A1:CB:55:87:49:4F:FE:0A:59:68:78:41:44:C3:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C14F8B8AD7E39729FFB600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa Signing time: Mon 25 Aug 2025 08:10:44 +0000 ROA not before: Mon 25 Aug 2025 08:10:44 +0000 ROA not after: Sun 23 Nov 2025 09:10:44 +0000 asID: 31898 IP address blocks: 129.213.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c1:4f:8b:8a:d7:e3:97:29:ff:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:10:44 2025 GMT Not After : Nov 23 09:10:44 2025 GMT Subject: CN=d8ca3ec2-c665-4176-ab3d-18eaa3e088d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3b:a3:6d:e4:04:f0:e8:44:39:31:82:93:4d: 56:f6:b9:ee:57:df:31:b1:0d:73:df:d3:bf:49:0a: 05:ee:56:cc:64:e4:08:a9:66:08:e1:dc:cf:2a:f7: 32:e8:1b:69:23:6a:35:39:3b:c2:05:85:99:57:97: e8:4e:ba:f3:6e:2d:e8:75:20:1b:3a:5e:e6:85:47: 70:d4:66:bd:8c:bc:75:e2:84:c5:3e:57:99:72:b3: ae:19:bc:5f:66:ab:7e:43:b2:b9:59:ab:a9:b0:c9: d2:57:4b:db:f4:53:7b:c2:eb:35:38:9b:9e:61:55: 6d:b3:5e:cd:64:97:16:b2:38:c0:70:0a:db:74:05: 21:b7:25:7d:f4:30:c4:de:9b:45:4c:4c:81:52:86: 9c:b6:e9:47:aa:7a:1f:50:ce:8f:61:cc:5f:2e:85: f9:63:8f:33:b6:9b:eb:f2:e9:78:97:e2:e1:44:b7: fb:37:51:72:38:87:99:4a:7a:df:71:c9:a9:91:d0: cc:f9:85:e2:c0:a0:56:b4:01:b6:0d:38:b6:a9:ac: 5b:f2:b9:6d:e0:c0:45:f8:d1:42:a6:f2:b3:46:ab: 02:33:2c:a3:c8:7b:71:da:10:b0:8a:be:41:b9:0e: da:4e:d9:77:7a:7f:72:04:9d:9d:8d:9e:6b:ef:22: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:25:41:00:1C:A1:CB:55:87:49:4F:FE:0A:59:68:78:41:44:C3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97936a49-6697-3eb2-875e-4638d0032b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6f:43:98:e8:d8:1d:d5:0c:b7:31:e8:59:77:42:9e:c9:28: 4d:7e:ac:78:78:59:1c:3f:86:c8:0e:b4:e8:4a:2b:e0:33:15: 96:ba:e8:fe:9d:19:f6:b4:08:a8:38:a3:ca:2d:eb:bf:72:c9: 7d:fb:1c:96:90:fb:d9:92:bb:cb:7e:ca:3e:71:17:44:75:d0: 44:fc:26:2c:f9:42:c0:9f:c9:8b:f9:dc:82:c4:72:0f:32:4b: a2:6b:93:14:f6:4e:31:fc:f3:42:ff:c2:26:f2:4a:76:56:1b: 21:5a:b4:6e:ba:4a:77:24:03:cb:7e:09:7a:c7:47:de:1e:52: cd:0d:11:43:fc:92:f7:6c:18:fa:b0:9b:12:d8:31:c5:0f:29: cb:c0:93:1b:b1:0d:17:06:78:07:98:39:e7:f1:af:bb:e2:25: 73:c3:e1:e6:70:56:e7:c2:56:9e:89:18:3b:96:e8:d2:73:2a: 9c:e4:05:61:7a:6e:06:aa:09:5c:c3:71:02:3e:cd:8a:07:ee: db:d4:df:53:7f:6b:ca:31:7b:84:50:15:93:f9:f8:e5:5b:99: 3e:44:01:d9:66:03:f7:8c:4e:4a:7b:f9:03:92:d0:82:8d:e6: e3:76:03:0c:9d:0c:59:e1:ca:0c:09:bd:3a:cf:05:4f:dd:1b: 9d:84:e1:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wU+Litfjlyn/tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTA0NFoXDTI1MTEyMzA5MTA0NFowLzEtMCsGA1UEAxMk ZDhjYTNlYzItYzY2NS00MTc2LWFiM2QtMThlYWEzZTA4OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDujbeQE8OhEOTGCk01W9rnuV98xsQ1z39O/ SQoF7lbMZOQIqWYI4dzPKvcy6BtpI2o1OTvCBYWZV5foTrrzbi3odSAbOl7mhUdw 1Ga9jLx14oTFPleZcrOuGbxfZqt+Q7K5WaupsMnSV0vb9FN7wus1OJueYVVts17N ZJcWsjjAcArbdAUhtyV99DDE3ptFTEyBUoactulHqnofUM6PYcxfLoX5Y48ztpvr 8ul4l+LhRLf7N1FyOIeZSnrfccmpkdDM+YXiwKBWtAG2DTi2qaxb8rlt4MBF+NFC pvKzRqsCMyyjyHtx2hCwir5BuQ7aTtl3en9yBJ2djZ5r7yJwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKslQQAcoctVh0lP/gpZaHhBRMPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc5MzZhNDktNjY5Ny0z ZWIyLTg3NWUtNDYzOGQwMDMyYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgdUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhvQ5jo2B3VDLcx6Fl3Qp7JKE1+rHh4WRw/hsgOtOhKK+AzFZa66P6d Gfa0CKg4o8ot679yyX37HJaQ+9mSu8t+yj5xF0R10ET8Jiz5QsCfyYv53ILEcg8y S6JrkxT2TjH880L/wibySnZWGyFatG66SnckA8t+CXrHR94eUs0NEUP8kvdsGPqw mxLYMcUPKcvAkxuxDRcGeAeYOefxr7viJXPD4eZwVufCVp6JGDuW6NJzKpzkBWF6 bgaqCVzDcQI+zYoH7tvU31N/a8oxe4RQFZP5+OVbmT5EAdlmA/eMTkp7+QOS0IKN 5uN2AwydDFnhygwJvTrPBU/dG52E4WM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:07:57 2025 by rpki-client