$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa File: 6d986a30-d093-316c-866a-30f3472f45bc.roa (raw, json) Hash identifier: GO/71AgAPSRbrbL+W27M/AMftHnXMER+RRtWZjW97Kg= Subject key identifier: E1:2A:C8:21:B2:FB:FC:43:32:B8:91:1A:95:A4:EB:2A:8C:11:97:99 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A60F96AA6CADBA4BB1C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa Signing time: Thu 21 Aug 2025 13:08:32 +0000 ROA not before: Thu 21 Aug 2025 13:08:32 +0000 ROA not after: Wed 19 Nov 2025 14:08:32 +0000 asID: 31898 IP address blocks: 129.149.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:60:f9:6a:a6:ca:db:a4:bb:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:32 2025 GMT Not After : Nov 19 14:08:32 2025 GMT Subject: CN=2afae948-394a-4eea-b551-59f2d5d44574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:fd:56:90:b8:66:79:c1:c2:4a:1c:c9:06: 3e:d2:25:9c:d8:b7:4b:0a:1f:a8:56:e8:6f:cf:fe: 01:65:c2:1e:21:a1:84:49:2d:7b:17:cb:a6:97:98: 74:64:00:7c:39:f4:c3:8a:e1:c6:2f:ab:45:98:fb: 9a:c2:4e:0a:b5:a9:bd:b2:25:5b:3d:76:f9:ba:d5: 4f:2b:f9:de:cd:fe:42:b7:7c:6b:23:6f:f4:9d:e7: 23:6b:92:78:12:43:7c:1e:49:a2:11:a8:cb:da:34: 42:b1:6c:e5:ff:37:e4:56:b8:b7:74:90:8f:33:ae: eb:b5:a1:72:eb:9f:53:5c:b8:2c:ef:4e:66:d7:05: 84:c2:db:4e:2b:46:66:5a:3b:d6:f9:85:d9:68:33: 7d:da:12:42:2e:4d:02:4f:fd:68:4f:c1:4b:f6:99: 75:34:54:52:ed:63:8a:8e:c1:e4:15:e4:c8:ae:2e: 1b:33:03:1a:2e:20:9b:90:fa:cc:81:5c:32:fc:3d: aa:e1:5a:d2:a3:c2:87:1b:66:17:ef:a5:9c:bf:47: 64:92:24:15:3f:3b:31:4d:e3:f2:01:aa:d8:65:a8: 88:57:80:6d:4d:79:6e:ed:1b:e8:0a:10:c0:b4:6a: fb:6e:92:40:28:c2:80:c9:5b:5e:c4:55:61:a7:27: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2A:C8:21:B2:FB:FC:43:32:B8:91:1A:95:A4:EB:2A:8C:11:97:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d986a30-d093-316c-866a-30f3472f45bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fc:65:c5:73:c8:91:b1:63:f2:b8:78:ee:6d:64:ec:f2:90: 45:c8:17:8e:a2:16:b2:3d:92:ce:4b:dd:4a:8a:5f:1e:f7:fd: 1d:07:e4:e6:82:83:92:5c:71:93:60:ff:db:6b:3b:77:f0:29: 3a:f4:b5:40:92:e9:e9:df:0f:33:85:97:5f:d9:09:bb:57:0d: f8:f6:5a:f3:00:d6:ed:aa:62:c6:46:b6:92:bb:c0:49:74:3a: d2:40:07:8a:ce:31:6e:22:92:6f:ae:1a:d4:9a:1f:2f:92:3d: 77:d9:ef:2d:d9:b8:c2:55:21:bb:e0:74:3d:1c:18:78:a2:5f: 1b:58:46:db:33:5d:49:c8:4d:6d:29:27:86:42:46:d8:27:0a: c4:fb:16:54:70:5a:44:f1:3e:73:46:bc:46:1c:47:32:6c:b3: 0a:db:6e:5c:be:14:02:69:a7:6f:d2:f5:91:62:9e:a3:c4:1b: bc:70:30:4f:ea:4a:f8:71:56:d0:a6:19:f5:75:5c:29:36:09: 67:68:2f:ac:17:c0:0a:63:8d:0a:f8:ad:d9:2d:97:a6:65:33: dc:2a:17:c0:e8:90:6e:26:eb:ad:98:b5:7e:39:0c:cf:66:55: bc:20:4e:9d:46:2f:21:b2:d3:f3:01:09:7a:ee:55:c4:1a:d8: 9b:e5:10:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmD5aqbK26S7HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzMloXDTI1MTExOTE0MDgzMlowLzEtMCsGA1UEAxMk MmFmYWU5NDgtMzk0YS00ZWVhLWI1NTEtNTlmMmQ1ZDQ0NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaH9VpC4ZnnBwkocyQY+0iWc2LdLCh+oVuhv z/4BZcIeIaGESS17F8uml5h0ZAB8OfTDiuHGL6tFmPuawk4Ktam9siVbPXb5utVP K/nezf5Ct3xrI2/0necja5J4EkN8HkmiEajL2jRCsWzl/zfkVri3dJCPM67rtaFy 659TXLgs705m1wWEwttOK0ZmWjvW+YXZaDN92hJCLk0CT/1oT8FL9pl1NFRS7WOK jsHkFeTIri4bMwMaLiCbkPrMgVwy/D2q4VrSo8KHG2YX76Wcv0dkkiQVPzsxTePy AarYZaiIV4BtTXlu7RvoChDAtGr7bpJAKMKAyVtexFVhpyfAFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEqyCGy+/xDMriRGpWk6yqMEZeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmQ5ODZhMzAtZDA5My0z MTZjLTg2NmEtMzBmMzQ3MmY0NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf8ZcVzyJGxY/K4eO5tZOzykEXIF46iFrI9ks5L3UqKXx73/R0H5OaC g5JccZNg/9trO3fwKTr0tUCS6enfDzOFl1/ZCbtXDfj2WvMA1u2qYsZGtpK7wEl0 OtJAB4rOMW4ikm+uGtSaHy+SPXfZ7y3ZuMJVIbvgdD0cGHiiXxtYRtszXUnITW0p J4ZCRtgnCsT7FlRwWkTxPnNGvEYcRzJsswrbbly+FAJpp2/S9ZFinqPEG7xwME/q SvhxVtCmGfV1XCk2CWdoL6wXwApjjQr4rdktl6ZlM9wqF8DokG4m662YtX45DM9m VbwgTp1GLyGy0/MBCXruVcQa2JvlEKI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:34 2025 by rpki-client