$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa File: b0020376-0cd1-398b-8222-d9d832024913.roa (raw, json) Hash identifier: oIqmc+vaMs8ZQkwJcZk71iFPw7ojYUI/w7yTZUyubpg= Subject key identifier: 00:16:58:EC:AA:5C:D9:CD:75:77:FF:E3:24:29:E6:79:92:CF:50:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013765AA9D8B36C8886AA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa Signing time: Fri 22 Aug 2025 05:33:59 +0000 ROA not before: Fri 22 Aug 2025 05:33:59 +0000 ROA not after: Thu 20 Nov 2025 06:33:59 +0000 asID: 31898 IP address blocks: 129.146.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:76:5a:a9:d8:b3:6c:88:86:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:33:59 2025 GMT Not After : Nov 20 06:33:59 2025 GMT Subject: CN=a871e424-d93d-4e72-af07-4d837e7ab779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:2f:40:6f:85:06:9e:30:ed:05:cf:d5:95: 32:4b:52:71:74:88:df:51:78:c4:ef:92:3f:2d:66: 01:4c:fb:e5:a7:e5:ec:56:4b:32:80:ae:0e:1c:6f: 10:51:ac:bf:65:05:5c:13:cf:53:40:1f:25:5e:da: 3a:92:c6:73:c6:09:4b:9d:4a:05:49:7d:22:40:be: 17:64:e7:d3:1f:60:95:90:b9:57:94:78:be:49:64: a2:9e:6c:14:31:19:64:07:9f:91:c0:ce:c1:4c:6f: 81:8d:ed:5a:1f:27:da:02:b3:1c:ad:11:26:fb:2f: 65:1a:a3:a9:7a:68:09:33:a9:05:2d:97:04:be:39: 23:72:88:b8:10:f3:28:48:cf:c5:07:80:96:75:da: 27:a3:e7:f0:74:c6:13:61:a0:36:81:22:44:60:cc: 8e:0a:1a:10:a1:51:ab:49:1b:96:9a:3f:a2:f3:e0: e4:f9:77:6e:5f:26:58:80:a1:c2:05:19:0b:8a:36: ea:d3:10:75:b5:09:5e:33:7d:85:ac:6e:2f:ed:96: 14:17:18:71:7a:44:85:2d:17:d4:9c:12:76:1b:ef: 5d:50:74:81:55:9c:25:25:77:8a:3e:84:99:b2:a7: 33:4e:fa:51:65:e9:c2:48:75:1f:b1:f2:47:64:87: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:58:EC:AA:5C:D9:CD:75:77:FF:E3:24:29:E6:79:92:CF:50:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4a:3f:bb:40:bb:31:54:2d:a3:6e:d5:f4:c0:bb:bc:0a:d6: ed:c5:24:33:f0:01:84:3b:0a:b3:c8:d3:dc:73:8b:c5:ff:52: 9a:8f:92:b1:ff:7f:d7:da:19:8f:2f:9f:9b:36:39:82:c9:43: e9:9d:c4:aa:38:b9:44:10:23:47:d6:b9:2c:bd:e4:67:3d:c9: ac:09:76:59:4c:aa:55:6b:36:5d:c8:ae:21:91:c2:3f:08:83: 2b:f1:9f:a6:8e:f2:70:b7:2d:e7:8e:8b:ed:ff:4a:2d:ce:ce: ef:62:aa:26:8f:37:4c:43:9b:05:b7:1e:f9:4d:45:db:1b:2c: e7:52:c0:46:99:30:38:2b:4e:d2:3c:93:62:3a:4a:41:0f:bd: 38:2b:d3:96:fd:49:29:e2:a7:07:e1:75:81:1b:ea:71:f6:ee: 5b:6e:a1:27:59:d3:93:47:27:e2:83:3b:cf:3a:a0:47:48:33: 95:fc:15:64:a5:36:1d:23:ff:66:04:e8:29:b4:23:24:d4:34: 90:a0:da:42:a7:3e:65:2b:08:85:9f:1f:ed:8f:82:3a:a0:95: 7d:61:be:4d:06:c0:7e:33:c5:ad:a0:1c:9d:7d:0d:7b:e6:2f: 49:c2:99:5d:fc:de:49:c6:e1:d0:80:07:5d:1c:53:6f:01:86: 7d:fa:4d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE3ZaqdizbIiGqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzM1OVoXDTI1MTEyMDA2MzM1OVowLzEtMCsGA1UEAxMk YTg3MWU0MjQtZDkzZC00ZTcyLWFmMDctNGQ4MzdlN2FiNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYcvQG+FBp4w7QXP1ZUyS1JxdIjfUXjE75I/ LWYBTPvlp+XsVksygK4OHG8QUay/ZQVcE89TQB8lXto6ksZzxglLnUoFSX0iQL4X ZOfTH2CVkLlXlHi+SWSinmwUMRlkB5+RwM7BTG+Bje1aHyfaArMcrREm+y9lGqOp emgJM6kFLZcEvjkjcoi4EPMoSM/FB4CWddono+fwdMYTYaA2gSJEYMyOChoQoVGr SRuWmj+i8+Dk+XduXyZYgKHCBRkLijbq0xB1tQleM32FrG4v7ZYUFxhxekSFLRfU nBJ2G+9dUHSBVZwlJXeKPoSZsqczTvpRZenCSHUfsfJHZIcIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAWWOyqXNnNdXf/4yQp5nmSz1CXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjAwMjAzNzYtMGNkMS0z OThiLTgyMjItZDlkODMyMDI0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpKP7tAuzFULaNu1fTAu7wK1u3FJDPwAYQ7CrPI09xzi8X/UpqPkrH/ f9faGY8vn5s2OYLJQ+mdxKo4uUQQI0fWuSy95Gc9yawJdllMqlVrNl3IriGRwj8I gyvxn6aO8nC3LeeOi+3/Si3Ozu9iqiaPN0xDmwW3HvlNRdsbLOdSwEaZMDgrTtI8 k2I6SkEPvTgr05b9SSnipwfhdYEb6nH27ltuoSdZ05NHJ+KDO886oEdIM5X8FWSl Nh0j/2YE6Cm0IyTUNJCg2kKnPmUrCIWfH+2PgjqglX1hvk0GwH4zxa2gHJ19DXvm L0nCmV383knG4dCAB10cU28Bhn36TcQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:05:04 2025 by rpki-client