$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa File: d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa (raw, json) Hash identifier: FDKcGGledj/uum7kx5PG812/t/UbDowGGU0KbOzooVM= Subject key identifier: D3:EC:7E:FB:86:2E:66:E7:B1:3F:28:14:0E:49:10:70:D3:19:3F:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEBFAE3EE7DE7880EADE08740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa Signing time: Wed 20 Aug 2025 18:21:14 +0000 ROA not before: Wed 20 Aug 2025 18:21:14 +0000 ROA not after: Tue 18 Nov 2025 19:21:14 +0000 asID: 31898 IP address blocks: 129.151.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:fa:e3:ee:7d:e7:88:0e:ad:e0:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:21:14 2025 GMT Not After : Nov 18 19:21:14 2025 GMT Subject: CN=3a4aa47f-2f29-429e-a05b-31567bc5c7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e9:7a:4a:92:46:a2:90:49:6b:1a:b3:29:a4: 07:29:50:20:c5:dd:74:5a:8c:74:7f:c4:e0:cb:85: 99:82:0b:95:d1:e2:90:0a:77:7f:e6:95:ce:49:76: d5:12:77:a8:1a:0b:f9:d2:65:3d:f2:03:76:38:b6: de:ae:93:58:89:de:ad:0d:61:96:14:d2:da:1c:c7: 21:fc:5b:2f:f3:01:2e:0f:86:be:45:bf:14:fb:86: 51:b9:d2:69:0e:d2:ba:9d:e3:92:12:36:06:c0:f8: 9f:88:86:ef:66:3c:32:86:ae:18:b4:d9:73:cc:cc: 00:52:8e:62:3a:bf:db:ef:16:2e:6a:fd:ba:3f:31: 58:83:c7:a0:95:8b:3a:e6:7b:61:be:24:3f:e9:8f: df:f5:0e:b9:99:3a:41:25:8b:78:7d:e6:6c:47:6c: 42:a7:1d:ee:e3:09:d0:8e:ea:f9:7d:0c:26:b1:09: 39:e7:47:3e:1d:7c:1d:aa:67:0f:36:64:16:61:52: c7:9b:57:ca:74:6a:fd:a5:28:5f:7f:45:af:b1:33: d2:e9:7b:e2:07:82:ef:8d:5d:3b:8f:d7:41:d2:24: 43:e0:7e:d3:84:64:20:5e:77:4e:59:9e:e2:15:5f: e8:af:74:68:f8:bd:5b:7e:a1:d1:de:b7:43:44:d9: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EC:7E:FB:86:2E:66:E7:B1:3F:28:14:0E:49:10:70:D3:19:3F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3d:5d:0a:e5:b8:57:42:29:93:e0:08:a3:7b:2d:c9:29:c8: 84:93:2a:e1:05:9c:e0:ef:e6:f8:16:5c:40:7e:3e:04:6a:8d: 39:2f:d5:5b:d6:a9:1c:b1:30:4d:48:12:fe:0c:3f:d3:1c:67: a2:ac:67:49:13:fc:b0:f7:d2:63:15:7b:28:51:33:c6:71:f6: 02:a9:5d:56:9d:0b:e7:ad:06:db:8a:54:10:06:0e:02:3d:58: 50:94:40:e6:ca:96:d1:6f:d5:2c:94:4e:fc:52:ba:39:b0:bf: ce:43:9e:29:7d:21:60:f7:89:44:0c:1c:61:b2:62:84:6f:64: ad:ba:bf:35:08:a3:79:43:3e:e3:e4:83:e5:82:7d:3d:99:09: 2c:80:81:5e:50:1e:0e:a6:de:1d:60:68:5d:95:ec:ce:e5:cd: 81:f6:46:84:3c:a2:3e:9b:88:c9:48:07:86:8f:29:4a:ab:ef: 2e:99:eb:4c:ea:36:65:a8:ed:6c:8d:fa:6e:1e:6e:3f:77:76: 2e:3f:12:e3:47:83:bc:e0:5b:b9:51:e6:28:cb:d9:d0:1f:d7: 85:c7:66:05:cc:5a:e1:c9:d5:a6:e1:8b:aa:7f:34:f0:72:bf: d1:c2:83:59:6e:84:b5:67:cc:08:57:c5:0f:7c:a4:c4:d3:0d: 32:a1:9e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErr+uPufeeIDq3gh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MjExNFoXDTI1MTExODE5MjExNFowLzEtMCsGA1UEAxMk M2E0YWE0N2YtMmYyOS00MjllLWEwNWItMzE1NjdiYzVjN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgul6SpJGopBJaxqzKaQHKVAgxd10Wox0f8Tg y4WZgguV0eKQCnd/5pXOSXbVEneoGgv50mU98gN2OLberpNYid6tDWGWFNLaHMch /Fsv8wEuD4a+Rb8U+4ZRudJpDtK6neOSEjYGwPifiIbvZjwyhq4YtNlzzMwAUo5i Or/b7xYuav26PzFYg8eglYs65nthviQ/6Y/f9Q65mTpBJYt4feZsR2xCpx3u4wnQ jur5fQwmsQk550c+HXwdqmcPNmQWYVLHm1fKdGr9pShff0WvsTPS6XviB4LvjV07 j9dB0iRD4H7ThGQgXndOWZ7iFV/or3Ro+L1bfqHR3rdDRNlLOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPsfvuGLmbnsT8oFA5JEHDTGT8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDA5YjZhOWYtYmIxOS0z MjdmLWJmODAtNDM3ZmJmOTlhZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo9XQrluFdCKZPgCKN7LckpyISTKuEFnODv5vgWXEB+PgRqjTkv1VvW qRyxME1IEv4MP9McZ6KsZ0kT/LD30mMVeyhRM8Zx9gKpXVadC+etBtuKVBAGDgI9 WFCUQObKltFv1SyUTvxSujmwv85Dnil9IWD3iUQMHGGyYoRvZK26vzUIo3lDPuPk g+WCfT2ZCSyAgV5QHg6m3h1gaF2V7M7lzYH2RoQ8oj6biMlIB4aPKUqr7y6Z60zq NmWo7WyN+m4ebj93di4/EuNHg7zgW7lR5ijL2dAf14XHZgXMWuHJ1abhi6p/NPBy v9HCg1luhLVnzAhXxQ98pMTTDTKhnig= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:51 2025 by rpki-client