$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa File: 2be2708d-f96f-31e9-b570-30cc2b48e949.roa (raw, json) Hash identifier: WjfKIv30+niXoS11rvcIAXy+0YE+Jzk1pkP067+r1M0= Subject key identifier: A3:33:AB:32:F4:C4:05:F2:EB:28:FD:D6:51:FB:F3:4D:33:9A:3F:FF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B0018BABAC7B662A1DE7C17C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa Signing time: Wed 27 Aug 2025 23:17:32 +0000 ROA not before: Wed 27 Aug 2025 23:17:32 +0000 ROA not after: Wed 26 Nov 2025 00:17:32 +0000 asID: 31898 IP address blocks: 129.145.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:18:ba:ba:c7:b6:62:a1:de:7c:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 23:17:32 2025 GMT Not After : Nov 26 00:17:32 2025 GMT Subject: CN=50ef3bfe-cba0-49c2-b105-d0bdbc3756ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:a9:d1:bd:4e:72:c3:5e:4a:fe:e9:43:70: 44:2a:aa:12:41:cd:6d:6e:75:3d:99:41:09:e6:72: 06:7a:ed:ba:c1:19:a1:49:3b:e1:41:f8:7e:4e:d4: 63:7e:7e:75:ce:28:d7:f0:47:ba:c7:37:78:58:0b: 93:ce:81:67:39:f7:2b:c8:a0:a2:68:52:c7:c4:4a: 6d:be:43:6d:82:9c:d8:1e:74:49:7d:19:ee:36:df: ca:bc:b6:af:be:ec:14:31:8b:11:f6:62:3a:80:69: 2b:17:46:76:2a:3a:62:58:d4:04:48:d0:e6:73:9f: 9f:23:20:08:e4:ee:a4:1c:16:b5:ea:bc:e0:5e:b1: 0c:51:9d:4f:d7:a5:35:4c:49:fa:77:cf:3f:bd:96: cc:38:35:f4:3d:2c:60:83:27:7c:d7:ea:e9:da:aa: 79:0a:19:47:6e:54:15:41:46:d5:52:79:d0:13:6e: 31:48:bf:c6:dd:61:26:6a:c5:08:07:46:95:98:18: cc:33:3a:50:d5:a8:84:dc:4a:c0:56:4a:eb:4a:8b: fe:a2:69:b8:2d:9a:e5:3b:25:70:de:75:d5:86:7e: 68:9a:df:0f:cf:47:1f:0f:bc:7d:58:cc:9d:b3:4d: 14:14:56:8e:b4:24:ab:1c:76:d6:99:33:a2:58:ee: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:AB:32:F4:C4:05:F2:EB:28:FD:D6:51:FB:F3:4D:33:9A:3F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2be2708d-f96f-31e9-b570-30cc2b48e949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f6:e5:4e:34:27:5f:bf:b9:bf:38:47:70:3f:cb:7c:a6:86: 80:37:93:5f:38:79:ac:9a:97:7a:94:0a:21:c6:61:02:81:c3: a1:60:3c:22:f2:e4:b5:db:97:f5:6b:7c:00:d2:5d:e7:7e:1d: 7d:19:8d:38:b5:07:4b:fa:be:fa:74:a8:01:38:14:4b:18:41: f0:6f:f5:67:c4:7d:c8:1c:fe:de:f8:31:74:a4:93:63:17:67: 72:46:c0:cc:57:f5:a1:56:a9:f0:0e:25:e0:71:94:45:87:41: 4b:c9:d5:c4:d8:a1:df:d3:1d:1f:fd:29:a3:fa:4e:d8:08:5b: 13:ad:b9:67:a4:f2:d4:95:cb:99:39:53:6f:87:71:7a:6e:05: 6b:80:18:7d:21:15:87:2a:92:e9:d0:65:d6:cd:64:d7:2c:5a: 90:4e:34:a0:ec:97:f2:b6:38:b4:df:39:b4:ce:33:88:72:b5: 1d:25:75:0b:d0:0b:29:2f:de:55:de:24:c6:ae:11:f6:3d:fe: d6:c9:99:9c:ac:09:4a:0c:20:f1:eb:29:4c:07:32:ed:e8:72: cc:b3:ff:3b:de:70:e3:a0:b5:6a:2d:5d:26:34:4e:5d:bd:d1: 9d:25:80:fb:a9:b0:5c:c9:b3:0a:77:62:77:b1:5d:f4:a8:db: 6c:91:38:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAGLq6x7Ziod58F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIzMTczMloXDTI1MTEyNjAwMTczMlowLzEtMCsGA1UEAxMk NTBlZjNiZmUtY2JhMC00OWMyLWIxMDUtZDBiZGJjMzc1NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC6p0b1OcsNeSv7pQ3BEKqoSQc1tbnU9mUEJ 5nIGeu26wRmhSTvhQfh+TtRjfn51zijX8Ee6xzd4WAuTzoFnOfcryKCiaFLHxEpt vkNtgpzYHnRJfRnuNt/KvLavvuwUMYsR9mI6gGkrF0Z2KjpiWNQESNDmc5+fIyAI 5O6kHBa16rzgXrEMUZ1P16U1TEn6d88/vZbMODX0PSxggyd81+rp2qp5ChlHblQV QUbVUnnQE24xSL/G3WEmasUIB0aVmBjMMzpQ1aiE3ErAVkrrSov+omm4LZrlOyVw 3nXVhn5omt8Pz0cfD7x9WMyds00UFFaOtCSrHHbWmTOiWO6A4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMzqzL0xAXy6yj91lH7800zmj//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmJlMjcwOGQtZjk2Zi0z MWU5LWI1NzAtMzBjYzJiNDhlOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD25U40J1+/ub84R3A/y3ymhoA3k184eayal3qUCiHGYQKBw6FgPCLy 5LXbl/VrfADSXed+HX0ZjTi1B0v6vvp0qAE4FEsYQfBv9WfEfcgc/t74MXSkk2MX Z3JGwMxX9aFWqfAOJeBxlEWHQUvJ1cTYod/THR/9KaP6TtgIWxOtuWek8tSVy5k5 U2+HcXpuBWuAGH0hFYcqkunQZdbNZNcsWpBONKDsl/K2OLTfObTOM4hytR0ldQvQ Cykv3lXeJMauEfY9/tbJmZysCUoMIPHrKUwHMu3ocsyz/zvecOOgtWotXSY0Tl29 0Z0lgPupsFzJswp3YnexXfSo22yROHc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:31 2025 by rpki-client