$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1edd56e6-2c6b-3b59-8c24-0749b625c33a.roa File: 1edd56e6-2c6b-3b59-8c24-0749b625c33a.roa (raw, json) Hash identifier: kvRkLBwXuZToDqk5Vs7jOdYgkYayEoOCg29yg9eQPdU= Subject key identifier: 23:40:C8:AC:59:FD:99:B3:6F:99:4F:CE:2C:5E:23:2C:C7:5F:53:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE8DA206F7A2E080BF39D680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1edd56e6-2c6b-3b59-8c24-0749b625c33a.roa Signing time: Thu 21 Aug 2025 16:28:31 +0000 ROA not before: Thu 21 Aug 2025 16:28:31 +0000 ROA not after: Wed 19 Nov 2025 17:28:31 +0000 asID: 31898 IP address blocks: 149.130.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:8d:a2:06:f7:a2:e0:80:bf:39:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 16:28:31 2025 GMT Not After : Nov 19 17:28:31 2025 GMT Subject: CN=32e5c4b2-8480-4d53-a70c-33d2e79a18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4c:e0:39:f2:44:e1:17:83:36:aa:83:a0:4d: 30:0a:ed:88:01:e4:49:12:5e:6e:b1:37:7d:fe:07: 63:e9:d0:c4:e9:b3:d1:e1:80:73:b8:01:3c:f0:1d: e4:c3:29:e4:1a:22:14:80:a8:fe:6d:5e:f7:09:53: ea:14:a9:6a:a3:97:28:6b:52:fd:4d:fe:8a:7a:35: f5:e8:ed:99:aa:8e:6e:da:54:bd:6c:b0:34:71:84: 06:32:54:29:a2:b6:c1:d2:0e:f2:69:27:05:97:7e: 16:60:01:42:f8:a5:27:da:49:9e:08:66:c0:a0:b1: b8:c5:dc:cd:85:b4:e1:51:f1:cc:34:ed:98:0e:86: a3:c2:3b:87:2c:1d:71:67:1a:c8:e5:a8:40:2e:a1: 0f:49:c4:90:9a:42:96:41:df:6c:67:fb:dc:dd:b9: 6f:f6:7c:5f:48:11:2c:71:e9:67:1c:0e:1f:8e:68: ba:ac:cd:f0:51:97:ba:be:56:06:a5:f7:5b:cd:74: ba:51:5b:19:31:f6:7a:b7:93:b5:f3:6f:22:6d:18: 5c:28:34:5b:83:de:78:d2:4b:62:96:74:89:cc:0a: 58:35:77:29:10:5e:0d:b0:8a:3f:80:81:f6:f1:a4: 6c:55:d2:28:ce:60:ec:29:95:35:a1:0a:11:22:c1: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:C8:AC:59:FD:99:B3:6F:99:4F:CE:2C:5E:23:2C:C7:5F:53:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1edd56e6-2c6b-3b59-8c24-0749b625c33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9b:93:78:85:ca:99:61:87:8c:e1:30:4e:4b:83:6c:66:2c: 1e:18:a3:01:3e:63:25:06:94:d6:9b:1f:45:53:5a:47:5f:a7: b1:a3:a4:65:15:5d:48:c0:8e:da:a5:68:2e:3b:de:4e:f1:6b: 1d:c0:2b:32:4c:47:43:db:8a:1e:2d:c7:ae:36:84:ba:76:ec: d4:2f:a5:2c:66:d1:4b:9b:d6:7b:07:03:09:3e:d9:e5:c1:af: 41:e0:54:ff:e6:3c:68:4a:f4:7d:f6:d5:27:74:75:88:f4:15: 04:df:e5:1a:c9:81:e9:09:d0:76:8a:7e:89:dd:ff:7c:84:0c: 5e:c9:57:72:5d:19:fb:5b:54:37:39:07:2d:44:4b:89:d9:22: 71:52:87:b5:fb:07:63:e8:0b:33:c0:1e:bc:33:51:5c:e5:0b: 48:db:fa:4b:05:0a:c5:48:d9:de:72:ab:2d:b1:8a:6a:b2:13: 6b:01:8f:a4:67:ec:ab:dc:e8:12:47:41:c4:1e:de:99:e1:94: 57:b1:28:ea:c9:3a:8a:61:a2:f3:4c:59:fe:42:b3:a0:b8:86: fc:30:f5:d2:7a:ea:9f:fa:21:9a:1f:e8:fc:bf:d7:f7:38:a1: 73:b0:bf:bc:8f:0b:ad:46:a2:8b:cf:ac:5d:a2:fa:b4:e5:c0: d1:9e:9d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErujaIG96LggL851oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE2MjgzMVoXDTI1MTExOTE3MjgzMVowLzEtMCsGA1UEAxMk MzJlNWM0YjItODQ4MC00ZDUzLWE3MGMtMzNkMmU3OWExOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EzgOfJE4ReDNqqDoE0wCu2IAeRJEl5usTd9 /gdj6dDE6bPR4YBzuAE88B3kwynkGiIUgKj+bV73CVPqFKlqo5coa1L9Tf6KejX1 6O2Zqo5u2lS9bLA0cYQGMlQporbB0g7yaScFl34WYAFC+KUn2kmeCGbAoLG4xdzN hbThUfHMNO2YDoajwjuHLB1xZxrI5ahALqEPScSQmkKWQd9sZ/vc3blv9nxfSBEs celnHA4fjmi6rM3wUZe6vlYGpfdbzXS6UVsZMfZ6t5O1828ibRhcKDRbg9540kti lnSJzApYNXcpEF4NsIo/gIH28aRsVdIozmDsKZU1oQoRIsGqhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNAyKxZ/Zmzb5lPzixeIyzHX1MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVkZDU2ZTYtMmM2Yi0z YjU5LThjMjQtMDc0OWI2MjVjMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIabk3iFyplhh4zhME5Lg2xmLB4YowE+YyUGlNabH0VTWkdfp7GjpGUV XUjAjtqlaC473k7xax3AKzJMR0Pbih4tx642hLp27NQvpSxm0Uub1nsHAwk+2eXB r0HgVP/mPGhK9H321Sd0dYj0FQTf5RrJgekJ0HaKfond/3yEDF7JV3JdGftbVDc5 By1ES4nZInFSh7X7B2PoCzPAHrwzUVzlC0jb+ksFCsVI2d5yqy2ximqyE2sBj6Rn 7Kvc6BJHQcQe3pnhlFexKOrJOophovNMWf5Cs6C4hvww9dJ66p/6IZof6Py/1/c4 oXOwv7yPC61GoovPrF2i+rTlwNGenZ8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:40 2025 by rpki-client