$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa File: 40599033-d1ac-3fc1-a624-cd863d4737bd.roa (raw, json) Hash identifier: Pb1Xe8CY0mS8Vj4Ts58mAomahc7rpsHoUA8W5jWc4Z8= Subject key identifier: 87:17:E5:95:66:60:05:A5:C6:9D:C1:D2:AB:00:C2:82:E4:DE:2B:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B9F6CDC522071D66E9EABF100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 46558 IP address blocks: 129.213.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:dc:52:20:71:d6:6e:9e:ab:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=d19d50cd-f1da-4141-8d38-239c537ec554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:5a:90:76:ba:af:19:1d:d5:69:a9:42:40: e1:4c:b6:36:f4:0d:95:cd:f2:a8:1c:59:cd:65:67: 62:44:7e:fe:8b:11:cf:46:6b:86:37:80:c4:0b:d6: 37:e5:9d:73:5a:a2:04:fa:55:8a:71:ad:ad:e0:0e: b9:73:e3:cc:e4:a0:79:12:8b:25:53:6e:6e:6f:2a: 51:ea:c6:56:7e:88:13:8b:e6:15:f0:90:3a:8a:a4: fb:e1:4d:72:87:c0:86:d1:7d:08:8f:5f:92:e1:f6: 78:20:b2:88:89:ad:04:aa:d6:11:0b:4a:b6:49:22: 0f:70:4b:aa:9a:cf:e5:99:2d:ca:63:b1:8b:d9:a3: c9:00:a8:37:4c:9d:27:f9:5e:c6:1c:ba:47:ea:99: 17:3c:34:cc:6f:b0:73:c2:4d:be:d8:13:bd:99:81: ec:8e:c0:30:bf:94:93:90:29:8b:88:ab:26:6b:06: a2:2b:ad:2c:a1:26:70:44:62:0e:ab:90:0f:93:75: da:34:4d:e0:9d:ca:e1:62:d8:93:99:0b:88:e9:33: b2:5a:c1:b6:9b:7f:99:11:b7:f2:55:5e:50:73:70: 3e:56:60:f6:71:e9:2f:69:13:c6:22:36:2f:05:7e: 14:48:33:e3:9d:71:e7:14:f6:ec:69:e0:ec:94:56: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:E5:95:66:60:05:A5:C6:9D:C1:D2:AB:00:C2:82:E4:DE:2B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40599033-d1ac-3fc1-a624-cd863d4737bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6b:ec:51:42:a3:30:16:57:45:ef:3d:c0:4e:63:35:48:9c: 01:aa:db:47:c9:26:f7:c7:f5:58:1b:dd:06:0e:d5:a4:c5:3c: 8d:a7:9e:05:e2:57:e2:15:40:00:c5:30:ea:bb:54:b3:e1:5d: bc:6d:92:ba:b3:da:fd:3b:97:79:3e:fd:6d:31:53:3f:3b:05: 7f:c6:e9:79:89:9d:78:2e:34:02:e7:27:a7:80:fe:e4:8f:1b: ab:cc:84:02:8b:e1:44:0d:88:d6:2a:db:ff:7a:f1:81:70:b6: f5:50:2c:cb:08:54:c1:6e:e0:1f:58:d2:10:70:11:3a:55:72: 79:54:4f:af:21:c1:68:58:82:4a:7a:a4:7d:c4:6c:60:39:5b: 9f:eb:67:f8:3a:bf:ec:70:91:09:13:50:a8:74:4c:43:2f:1c: d1:25:8a:89:3e:4b:2a:84:9e:18:f0:1f:f1:2d:14:f1:98:3d: 2b:a5:25:67:0b:98:4f:df:e6:78:98:f6:cb:47:ea:d1:96:ac: d3:3d:f3:11:9e:5f:41:a2:aa:55:8e:ce:7e:91:23:e2:b5:72: eb:2b:6d:18:14:07:0a:8c:27:15:94:77:d1:a7:09:c8:89:b7: bd:f4:c8:2c:8d:76:08:da:11:ea:f0:05:91:8c:29:ca:f8:59: ae:2b:9d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNxSIHHWbp6r8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk ZDE5ZDUwY2QtZjFkYS00MTQxLThkMzgtMjM5YzUzN2VjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD5akHa6rxkd1WmpQkDhTLY29A2VzfKoHFnN ZWdiRH7+ixHPRmuGN4DEC9Y35Z1zWqIE+lWKca2t4A65c+PM5KB5EoslU25ubypR 6sZWfogTi+YV8JA6iqT74U1yh8CG0X0Ij1+S4fZ4ILKIia0EqtYRC0q2SSIPcEuq ms/lmS3KY7GL2aPJAKg3TJ0n+V7GHLpH6pkXPDTMb7Bzwk2+2BO9mYHsjsAwv5ST kCmLiKsmawaiK60soSZwRGIOq5APk3XaNE3gncrhYtiTmQuI6TOyWsG2m3+ZEbfy VV5Qc3A+VmD2cekvaRPGIjYvBX4USDPjnXHnFPbsaeDslFbu0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcX5ZVmYAWlxp3B0qsAwoLk3iuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDA1OTkwMzMtZDFhYy0z ZmMxLWE2MjQtY2Q4NjNkNDczN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRr7FFCozAWV0XvPcBOYzVInAGq20fJJvfH9Vgb3QYO1aTFPI2nngXi V+IVQADFMOq7VLPhXbxtkrqz2v07l3k+/W0xUz87BX/G6XmJnXguNALnJ6eA/uSP G6vMhAKL4UQNiNYq2/968YFwtvVQLMsIVMFu4B9Y0hBwETpVcnlUT68hwWhYgkp6 pH3EbGA5W5/rZ/g6v+xwkQkTUKh0TEMvHNEliok+SyqEnhjwH/EtFPGYPSulJWcL mE/f5niY9stH6tGWrNM98xGeX0GiqlWOzn6RI+K1cusrbRgUBwqMJxWUd9GnCciJ t730yCyNdgjaEerwBZGMKcr4Wa4rnRI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:29 2025 by rpki-client