$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f49b41d0-5ed4-3a62-bde6-8782c4dc2de1.roa File: f49b41d0-5ed4-3a62-bde6-8782c4dc2de1.roa (raw, json) Hash identifier: VZwo7H0BpGBIapwqamR20okBy9Mcj9NhwAohUhi6JJs= Subject key identifier: 96:71:BB:B0:1E:CB:53:FD:1E:57:88:5F:18:82:AC:EA:4D:78:A9:12 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4FD11B1660A345ED026500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f49b41d0-5ed4-3a62-bde6-8782c4dc2de1.roa Signing time: Mon 04 Aug 2025 18:20:59 +0000 ROA not before: Mon 04 Aug 2025 18:20:59 +0000 ROA not after: Sun 02 Nov 2025 19:20:59 +0000 asID: 46558 IP address blocks: 129.213.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4f:d1:1b:16:60:a3:45:ed:02:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:20:59 2025 GMT Not After : Nov 2 19:20:59 2025 GMT Subject: CN=2eaea300-e4bf-43b6-acac-db51b8959072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:dd:e8:8f:3c:9b:11:43:d4:1a:c7:6f:cf: da:1f:1a:89:ed:1a:cd:a4:81:8a:a4:4e:bd:2e:9d: 95:ca:6a:54:91:9a:dd:fd:fa:19:8e:e3:75:83:72: 6a:46:79:5f:a3:88:93:f9:92:a5:e7:84:ad:35:c4: e0:6e:ae:85:8b:14:3b:49:1d:56:c3:ea:1f:61:88: cd:ec:63:50:79:3d:f2:56:13:55:15:a1:39:2e:2f: f1:78:a0:05:a4:e6:69:05:4f:07:11:30:9a:42:2f: 62:de:1b:00:c0:bf:ab:f2:d7:a5:d8:b2:6d:4c:2f: f9:a2:a8:af:da:94:82:a2:a1:73:40:0e:42:c1:a2: 9c:11:d9:2c:67:8c:3c:8b:ac:ba:c0:24:ca:d2:6f: a3:1f:b8:65:aa:82:4a:c5:3a:5d:ba:80:58:e3:ae: b8:5e:1f:5c:66:34:67:6b:fc:57:b0:86:42:e4:92: 22:52:f4:df:cf:ad:20:b0:9a:3a:52:f4:51:ba:c4: a7:5e:a9:00:08:c1:bf:7c:98:b0:e9:2a:d8:e3:03: 83:30:36:70:6c:54:78:ef:77:b0:d8:e9:a1:d4:5a: fa:67:29:ff:be:9d:2e:22:1e:90:2c:10:7b:22:3b: ff:10:4d:1a:87:8f:16:21:c8:45:1c:88:1d:f6:57: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:71:BB:B0:1E:CB:53:FD:1E:57:88:5F:18:82:AC:EA:4D:78:A9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f49b41d0-5ed4-3a62-bde6-8782c4dc2de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:8f:c1:81:67:a8:a8:a2:1e:59:be:d0:dc:fd:66:0e:a9: b5:5d:43:26:bb:ed:cd:34:63:c9:6a:66:9d:25:9b:2d:bc:46: fe:de:9c:17:45:ec:0e:e5:7c:52:15:13:00:39:6c:64:c2:96: a4:f8:98:a6:1d:46:d8:00:73:f8:24:0b:e1:ba:31:9b:90:51: 58:11:72:10:83:65:1c:f9:91:bc:5a:55:63:93:13:49:1f:07: fd:8a:a6:07:be:c9:f5:dc:b9:60:96:76:c3:20:31:dc:b3:79: 35:a6:1d:01:91:f1:dd:de:d8:9e:d5:ab:df:25:19:2a:83:42: 04:8f:d6:76:c5:93:2a:28:0a:5d:7d:17:74:86:85:26:2f:fe: d1:38:5a:58:0b:fa:6a:9a:0a:4b:20:f6:db:68:31:42:dd:44: 72:4c:9f:33:cb:de:75:bf:f1:26:41:54:cb:66:52:59:e1:23: e4:13:99:3b:60:6c:15:39:9d:c4:d5:1a:f3:d4:03:e3:ed:ba: f3:20:64:d8:9e:49:1a:4c:15:91:e2:47:27:ee:36:84:90:40: c9:8f:2a:84:60:1c:6c:40:f4:5f:64:60:db:56:15:84:e3:81: 82:b6:bc:52:9e:6d:03:87:43:54:01:5d:24:42:fc:a0:dc:6f: 50:8d:20:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/T9EbFmCjRe0CZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MjA1OVoXDTI1MTEwMjE5MjA1OVowLzEtMCsGA1UEAxMk MmVhZWEzMDAtZTRiZi00M2I2LWFjYWMtZGI1MWI4OTU5MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumHd6I88mxFD1BrHb8/aHxqJ7RrNpIGKpE69 Lp2VympUkZrd/foZjuN1g3JqRnlfo4iT+ZKl54StNcTgbq6FixQ7SR1Ww+ofYYjN 7GNQeT3yVhNVFaE5Li/xeKAFpOZpBU8HETCaQi9i3hsAwL+r8tel2LJtTC/5oqiv 2pSCoqFzQA5CwaKcEdksZ4w8i6y6wCTK0m+jH7hlqoJKxTpduoBY4664Xh9cZjRn a/xXsIZC5JIiUvTfz60gsJo6UvRRusSnXqkACMG/fJiw6SrY4wODMDZwbFR473ew 2Omh1Fr6Zyn/vp0uIh6QLBB7Ijv/EE0ah48WIchFHIgd9ldMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZxu7Aey1P9HleIXxiCrOpNeKkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQ5YjQxZDAtNWVkNC0z YTYyLWJkZTYtODc4MmM0ZGMyZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdXzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhj8GBZ6iooh5ZvtDc/WYOqbVdQya77c00Y8lqZp0lmy28Rv7enBdF 7A7lfFIVEwA5bGTClqT4mKYdRtgAc/gkC+G6MZuQUVgRchCDZRz5kbxaVWOTE0kf B/2Kpge+yfXcuWCWdsMgMdyzeTWmHQGR8d3e2J7Vq98lGSqDQgSP1nbFkyooCl19 F3SGhSYv/tE4WlgL+mqaCksg9ttoMULdRHJMnzPL3nW/8SZBVMtmUlnhI+QTmTtg bBU5ncTVGvPUA+PtuvMgZNieSRpMFZHiRyfuNoSQQMmPKoRgHGxA9F9kYNtWFYTj gYK2vFKebQOHQ1QBXSRC/KDcb1CNIA0= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:11 2025 by rpki-client