$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa File: 7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa (raw, json) Hash identifier: 2aQ7StjHJz+V6kqcWWVo+lWrQUcVUk2ENL96lZrrjbk= Subject key identifier: A1:41:C4:C7:AA:A2:6B:52:90:B9:B1:38:C4:47:33:F8:74:25:77:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE4060A3ABA8CE3EA099A550 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.148.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:60:a3:ab:a8:ce:3e:a0:99:a5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=7b431e29-d6d8-47eb-b994-5391d094792b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:5c:13:0c:04:5c:56:d8:dd:1f:dd:95:27: fb:9b:14:c8:5e:6d:5c:ff:b5:ee:bc:d6:9f:89:e1: 49:81:08:1d:db:18:fe:c6:5c:da:a4:e5:48:24:9d: 13:2a:dc:27:c8:72:5e:13:85:4c:ea:bb:4b:98:31: 01:ce:3a:65:d4:ed:fe:c8:0f:2a:4f:d3:29:72:23: 6c:25:2c:28:06:cb:c2:c6:2e:b8:89:1a:b7:92:65: 67:f9:f7:5c:0b:c0:d2:9d:ca:79:eb:99:f3:cc:a2: 90:80:6c:dc:80:4b:4f:14:49:59:9e:45:e2:bf:38: 22:44:2d:85:06:10:cb:cb:0c:59:66:60:96:e7:d0: 74:ac:39:61:96:52:d1:a4:7d:d1:ac:41:34:e7:d8: 2b:dc:91:c5:62:43:48:1e:ca:ed:d1:9d:3d:16:7d: 27:79:01:2a:39:62:8b:e3:62:e1:88:55:b7:6a:e3: b0:e4:e3:14:da:be:60:87:17:33:b2:a0:d1:8d:de: 67:c3:b9:86:23:cb:17:e5:4b:a4:77:4d:8b:6b:68: 54:7b:87:fa:85:73:3a:64:6b:2e:14:0f:6b:b4:a0: 0a:2e:fa:50:92:ec:65:ca:0a:4c:8b:32:05:d6:3a: 67:b0:aa:91:23:62:d9:2f:80:cd:f9:2a:ff:9f:4a: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:41:C4:C7:AA:A2:6B:52:90:B9:B1:38:C4:47:33:F8:74:25:77:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cce90f5-ddfd-358a-9aa0-2c939d9225c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a1:dc:29:b4:ec:30:eb:5f:5b:32:2f:00:cc:cf:30:ef:44: 76:8a:dc:08:bf:ac:fe:4d:ca:0e:de:c5:89:e6:69:2e:8a:4f: 59:13:f1:a1:70:59:6a:a3:aa:54:72:28:cf:53:1f:49:78:8e: 83:d4:08:ac:05:74:cc:a9:fa:78:97:2b:1e:7c:83:c8:ed:79: 62:e2:a8:6b:00:57:4e:7a:6a:c9:5b:7c:fa:1a:f7:f8:7d:67: 33:e5:a3:64:80:84:f9:22:53:a7:83:ac:2f:f9:b7:b4:54:cb: 82:01:16:c7:b3:44:86:fa:85:54:ee:c3:8b:30:74:36:c8:00: 9e:3f:f0:8c:ca:ad:a0:80:01:0f:82:67:c8:e8:c8:3a:d3:4b: 17:d8:dd:b9:9c:9d:c1:84:4f:02:2b:5f:fc:cb:ae:56:fe:c1: c5:d4:f7:5c:d7:d7:51:98:b6:f1:62:d5:c3:9a:d6:7d:78:17: ea:e0:7c:e2:53:cf:30:02:30:b6:ed:dc:7a:ae:cf:1e:34:c5: 5e:96:d3:06:a4:6a:1c:1a:27:fa:35:68:54:12:49:37:fc:97: c9:95:15:58:4a:2b:79:8a:31:94:b3:03:f5:3f:af:f5:b3:3c: b0:d4:e5:a4:de:ff:49:29:d5:28:8a:bc:6f:33:ce:00:45:45: a8:14:e4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGCjq6jOPqCZpVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk N2I0MzFlMjktZDZkOC00N2ViLWI5OTQtNTM5MWQwOTQ3OTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5VcEwwEXFbY3R/dlSf7mxTIXm1c/7XuvNaf ieFJgQgd2xj+xlzapOVIJJ0TKtwnyHJeE4VM6rtLmDEBzjpl1O3+yA8qT9MpciNs JSwoBsvCxi64iRq3kmVn+fdcC8DSncp565nzzKKQgGzcgEtPFElZnkXivzgiRC2F BhDLywxZZmCW59B0rDlhllLRpH3RrEE059gr3JHFYkNIHsrt0Z09Fn0neQEqOWKL 42LhiFW3auOw5OMU2r5ghxczsqDRjd5nw7mGI8sX5Uukd02La2hUe4f6hXM6ZGsu FA9rtKAKLvpQkuxlygpMizIF1jpnsKqRI2LZL4DN+Sr/n0qOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFBxMeqomtSkLmxOMRHM/h0JXf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NjZTkwZjUtZGRmZC0z NThhLTlhYTAtMmM5MzlkOTIyNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuh3Cm07DDrX1syLwDMzzDvRHaK3Ai/rP5Nyg7exYnmaS6KT1kT8aFw WWqjqlRyKM9TH0l4joPUCKwFdMyp+niXKx58g8jteWLiqGsAV056aslbfPoa9/h9 ZzPlo2SAhPkiU6eDrC/5t7RUy4IBFsezRIb6hVTuw4swdDbIAJ4/8IzKraCAAQ+C Z8joyDrTSxfY3bmcncGETwIrX/zLrlb+wcXU91zX11GYtvFi1cOa1n14F+rgfOJT zzACMLbt3Hquzx40xV6W0wakahwaJ/o1aFQSSTf8l8mVFVhKK3mKMZSzA/U/r/Wz PLDU5aTe/0kp1SiKvG8zzgBFRagU5AE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:47 2025 by rpki-client