$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9795737f-0d6c-3e16-9766-b5a421970025.roa File: 9795737f-0d6c-3e16-9766-b5a421970025.roa (raw, json) Hash identifier: +gySOP+dQDHkfCGXEiBrYI2cvxPYnqPyyRU50Xm9O6Q= Subject key identifier: 45:22:A3:51:FE:16:38:FD:7E:AB:62:99:71:96:3D:48:C6:D8:FD:79 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A5FA462AAFE49652953B0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9795737f-0d6c-3e16-9766-b5a421970025.roa Signing time: Thu 21 Aug 2025 13:08:32 +0000 ROA not before: Thu 21 Aug 2025 13:08:32 +0000 ROA not after: Wed 19 Nov 2025 14:08:32 +0000 asID: 31898 IP address blocks: 129.148.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:5f:a4:62:aa:fe:49:65:29:53:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:32 2025 GMT Not After : Nov 19 14:08:32 2025 GMT Subject: CN=25c7b9ca-64c9-4a8f-a2c6-b2a917644a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:77:10:c6:38:56:ab:7a:c7:a6:5c:28:af: 52:12:72:13:c5:2f:03:0b:f7:7d:94:7f:3a:da:65: e4:fd:ac:97:71:79:d6:b0:32:25:20:f4:df:01:3f: 9f:35:0e:fb:e1:16:37:f2:a4:db:38:67:5b:1b:b3: 89:aa:8d:e6:fb:6a:0d:23:2c:20:c0:fe:2f:3b:9e: 6e:2f:7d:e9:8c:32:3f:3d:9e:a3:fc:a7:11:0c:96: 34:17:63:ae:e4:10:98:7a:db:26:62:4f:2e:67:be: 98:71:eb:38:a7:92:18:12:03:1e:8c:ee:11:14:65: 47:64:f2:08:a9:83:7a:d4:c6:b4:89:97:42:cd:68: 88:1e:5c:0e:b7:aa:43:9c:ea:e4:2a:77:96:91:20: 48:cd:a3:fe:79:64:af:1b:d2:96:ca:c5:99:de:91: 93:46:e7:d3:3b:65:2e:13:c1:4b:98:bb:67:38:9b: 41:0c:04:df:5e:62:20:db:09:d3:8e:39:16:8d:f3: 71:cb:59:d2:39:7e:ba:68:c3:b8:46:33:19:9a:44: a6:88:41:d7:20:52:00:23:8f:27:81:23:8f:01:51: 40:49:d8:45:3e:d5:05:b3:49:31:fa:95:e8:af:57: 68:a5:17:8b:5a:4e:cb:14:08:bd:bc:15:66:aa:84: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:A3:51:FE:16:38:FD:7E:AB:62:99:71:96:3D:48:C6:D8:FD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9795737f-0d6c-3e16-9766-b5a421970025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a7:7c:22:ac:fd:27:47:bc:8f:7b:76:d1:64:c7:62:3c:af: 57:a5:9b:b6:07:82:e1:2b:2e:f8:a9:b0:2b:e3:18:5a:4e:63: d4:3a:c1:bd:07:13:fe:3f:71:f1:45:be:e7:47:79:30:d6:67: ae:fa:e0:97:71:ac:c6:1c:89:eb:72:5d:9b:df:fb:89:e3:6c: e9:3a:31:b1:9d:e3:3a:b5:07:f1:89:22:ae:e9:1a:a4:4f:5b: 0d:e0:cb:dc:91:3b:39:f9:8d:16:32:a2:a1:da:1c:b3:34:f6: 63:bf:fa:13:9e:50:3f:db:bd:2a:5a:c9:bd:ed:d6:80:f4:9c: fe:a8:51:9d:87:44:19:bf:68:07:68:95:bd:34:55:1c:85:e9: 85:bb:09:81:c8:cb:8b:5c:00:1c:ba:30:53:f3:ad:74:8f:d2: 05:56:f9:e1:73:8d:da:b2:76:cf:6e:be:70:b0:4c:58:cf:bb: 54:79:b5:86:f9:b5:62:65:d4:32:46:d1:ca:1d:c7:8d:90:f3: 48:3d:b7:09:b8:89:8d:7e:16:a5:67:df:6e:e7:35:0c:06:b7: 7b:e8:7c:02:e0:d8:01:8c:0e:12:60:cd:5d:f1:98:74:9d:8c: 97:06:c8:3f:97:1e:5b:32:56:e4:32:1e:9d:ba:09:81:da:d1: e7:af:ca:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKl+kYqr+SWUpU7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzMloXDTI1MTExOTE0MDgzMlowLzEtMCsGA1UEAxMk MjVjN2I5Y2EtNjRjOS00YThmLWEyYzYtYjJhOTE3NjQ0YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1V3EMY4Vqt6x6ZcKK9SEnITxS8DC/d9lH86 2mXk/ayXcXnWsDIlIPTfAT+fNQ774RY38qTbOGdbG7OJqo3m+2oNIywgwP4vO55u L33pjDI/PZ6j/KcRDJY0F2Ou5BCYetsmYk8uZ76Yces4p5IYEgMejO4RFGVHZPII qYN61Ma0iZdCzWiIHlwOt6pDnOrkKneWkSBIzaP+eWSvG9KWysWZ3pGTRufTO2Uu E8FLmLtnOJtBDATfXmIg2wnTjjkWjfNxy1nSOX66aMO4RjMZmkSmiEHXIFIAI48n gSOPAVFASdhFPtUFs0kx+pXor1dopReLWk7LFAi9vBVmqoS4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUio1H+Fjj9fqtimXGWPUjG2P15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc5NTczN2YtMGQ2Yy0z ZTE2LTk3NjYtYjVhNDIxOTcwMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGinfCKs/SdHvI97dtFkx2I8r1elm7YHguErLvipsCvjGFpOY9Q6wb0H E/4/cfFFvudHeTDWZ6764JdxrMYcietyXZvf+4njbOk6MbGd4zq1B/GJIq7pGqRP Ww3gy9yROzn5jRYyoqHaHLM09mO/+hOeUD/bvSpayb3t1oD0nP6oUZ2HRBm/aAdo lb00VRyF6YW7CYHIy4tcABy6MFPzrXSP0gVW+eFzjdqyds9uvnCwTFjPu1R5tYb5 tWJl1DJG0codx42Q80g9twm4iY1+FqVn327nNQwGt3vofALg2AGMDhJgzV3xmHSd jJcGyD+XHlsyVuQyHp26CYHa0eevyts= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:55 2025 by rpki-client