$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa File: 7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa (raw, json) Hash identifier: a+HfsrLPLyfoZ7xn9sL9iydvzEM9oiLPnTL0Gh+kr9g= Subject key identifier: 91:23:6C:0F:40:27:2C:74:4F:E2:19:7C:DA:8E:9A:06:C3:5B:76:9F Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584BA0D263C4A7DFEDAE56B09580 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 0 IP address blocks: 149.112.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:63:c4:a7:df:ed:ae:56:b0:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2b2df4f5-d79f-4be7-90c7-096ea355a245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:d9:dd:3b:a7:b9:d1:18:a1:d9:f5:a0:cc: ff:48:51:4d:10:2f:70:c7:49:6f:5a:49:26:c8:36: fb:66:9b:cf:5a:48:8b:85:f9:ed:28:08:b8:50:b0: 92:aa:9f:76:5d:51:ba:2f:da:a5:4a:5a:44:de:fc: 21:0f:f1:b3:db:ed:cb:32:db:7c:2a:ce:62:3b:76: c9:3e:e0:ea:fc:4d:36:a9:9c:4f:13:a8:67:61:08: f9:e7:26:6a:3e:b2:00:3a:a5:21:a0:ac:28:26:62: 62:c3:d6:d9:47:d2:14:0e:c4:30:07:d7:b1:98:69: fe:52:d7:52:c7:b6:e3:84:dd:01:4e:7c:97:80:e6: e3:30:77:62:12:05:19:50:d1:52:a8:62:c8:ff:a2: 47:25:32:0a:b4:bb:7f:2b:39:ac:68:22:6f:b8:1c: d0:34:c1:70:d3:79:fd:cd:da:c6:53:d9:6a:c7:d6: 93:f4:29:51:a2:00:36:2d:19:e6:96:98:03:66:65: 0a:b9:2b:7b:02:ea:13:66:b9:c0:7b:7a:b0:0b:8d: f1:31:e1:49:a9:15:f2:55:e8:a1:dd:a6:ad:e8:af: d0:ae:e4:68:93:85:b6:31:e0:4d:6c:42:ac:63:43: f3:29:89:d7:58:8b:c5:f7:15:b2:0b:30:96:50:82: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:6C:0F:40:27:2C:74:4F:E2:19:7C:DA:8E:9A:06:C3:5B:76:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7c59f9b2-3c8e-3336-9639-ac2dc66d3268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 149.112.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c2:4f:11:ce:84:cd:03:7c:17:43:9b:f4:29:c3:a8:8d:63: 04:24:ba:54:67:57:7b:ec:5c:1a:49:69:43:ee:13:50:1a:62: 04:76:60:3d:5b:89:ef:60:2b:fd:33:af:d1:aa:8f:9c:bb:37: b0:d3:62:cf:0c:1f:10:6f:b1:0f:e9:6e:50:aa:0d:61:c1:e3: 8e:36:07:7a:3a:b2:bf:6f:7e:b4:53:c0:a5:ef:35:4d:cc:aa: 73:8c:0c:0a:c1:7b:13:89:0d:88:e9:a0:0c:3c:34:3c:81:45: e1:e6:2f:d2:c4:a5:a5:47:ba:b4:f7:c6:81:73:60:01:c2:0a: d6:c7:cd:91:6b:0e:52:8c:8e:90:a5:2a:f5:8f:53:71:70:d8: fb:d4:e4:99:84:cd:ec:f6:04:9c:80:35:cb:20:bd:ae:24:67: 55:23:9a:46:cf:22:f5:58:b1:13:6c:a0:be:95:db:18:57:01: b9:a9:8e:e0:31:c8:db:95:ab:77:bb:cb:63:26:31:26:a5:86: ae:bf:fd:58:ae:ae:e0:ec:60:84:9b:40:97:db:f8:06:76:4f: 4a:17:a4:8a:a5:05:d8:78:30:01:1d:8c:d9:be:c5:2a:75:2d: 73:fe:e3:47:c5:31:9d:95:32:00:4c:23:38:c0:2a:fa:77:70: ef:0a:ab:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mPEp9/trlawlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmIyZGY0ZjUtZDc5Zi00YmU3LTkwYzctMDk2ZWEzNTVhMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnZ3TunudEYodn1oMz/SFFNEC9wx0lvWkkm yDb7ZpvPWkiLhfntKAi4ULCSqp92XVG6L9qlSlpE3vwhD/Gz2+3LMtt8Ks5iO3bJ PuDq/E02qZxPE6hnYQj55yZqPrIAOqUhoKwoJmJiw9bZR9IUDsQwB9exmGn+UtdS x7bjhN0BTnyXgObjMHdiEgUZUNFSqGLI/6JHJTIKtLt/KzmsaCJvuBzQNMFw03n9 zdrGU9lqx9aT9ClRogA2LRnmlpgDZmUKuSt7AuoTZrnAe3qwC43xMeFJqRXyVeih 3aat6K/QruRok4W2MeBNbEKsY0PzKYnXWIvF9xWyCzCWUILEgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEjbA9AJyx0T+IZfNqOmgbDW3afMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvN2M1OWY5YjItM2M4ZS0z MzM2LTk2MzktYWMyZGM2NmQzMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7CTxHOhM0DfBdDm/Qpw6iNYwQkulRnV3vsXBpJaUPuE1AaYgR2YD1b ie9gK/0zr9Gqj5y7N7DTYs8MHxBvsQ/pblCqDWHB4442B3o6sr9vfrRTwKXvNU3M qnOMDArBexOJDYjpoAw8NDyBReHmL9LEpaVHurT3xoFzYAHCCtbHzZFrDlKMjpCl KvWPU3Fw2PvU5JmEzez2BJyANcsgva4kZ1UjmkbPIvVYsRNsoL6V2xhXAbmpjuAx yNuVq3e7y2MmMSalhq6//ViuruDsYISbQJfb+AZ2T0oXpIqlBdh4MAEdjNm+xSp1 LXP+40fFMZ2VMgBMIzjAKvp3cO8KqyY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:37 2025 by rpki-client