$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa File: 8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa (raw, json) Hash identifier: YDNmkVT0gMZPAnxHgUfUN5VrI/MuGQ1zphlN0whwpTg= Subject key identifier: C2:6D:54:79:FC:9F:55:DC:A1:B4:75:CF:EF:57:F2:5E:B4:BA:3C:57 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF01320A5ACD87A0D6D85EA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa Signing time: Fri 22 Aug 2025 05:33:18 +0000 ROA not before: Fri 22 Aug 2025 05:33:18 +0000 ROA not after: Thu 20 Nov 2025 06:33:18 +0000 asID: 31898 IP address blocks: 129.146.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:20:a5:ac:d8:7a:0d:6d:85:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:33:18 2025 GMT Not After : Nov 20 06:33:18 2025 GMT Subject: CN=397f2065-1720-40fd-bbcb-a3e81298c8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:22:1e:cf:ad:54:9f:1e:df:2f:e1:76:b2: fd:29:c6:05:78:d7:9b:67:19:bf:30:9a:17:c1:a9: ce:1a:af:4c:79:b0:1d:98:34:03:39:ee:a9:35:40: 21:60:c4:42:3c:8e:3c:21:e2:08:32:bf:62:e0:5d: 9f:f6:68:68:d8:a1:c8:b6:8d:f5:99:85:cd:5d:55: bd:24:d0:c3:3e:bb:6c:ef:56:26:df:08:99:e9:9a: b8:d0:cb:49:10:8f:7f:9b:a8:24:41:3c:79:2a:98: 44:95:c4:67:56:cd:8a:db:34:98:90:fd:c3:e4:a3: ef:17:f3:14:42:fd:6d:c5:7d:39:e9:f1:1a:b6:bf: 1d:d2:14:9e:fe:98:b9:ce:ef:38:68:a1:23:5b:d8: 8d:d3:e1:09:43:98:6e:ae:02:21:70:89:00:51:5e: b4:17:d9:f7:ea:63:cf:0b:71:de:31:83:05:87:d0: ea:27:45:4a:1a:54:b3:04:8d:f8:46:2d:31:85:8f: f6:08:7d:02:cb:43:1e:b2:d7:f2:82:67:48:0e:ca: 8b:ac:bf:98:64:0d:26:8c:8e:c7:4a:0e:82:d9:87: a1:f7:a2:cc:78:d9:cf:7e:51:6f:82:69:cf:1d:c9: 26:8a:7a:82:29:05:1b:23:9a:8b:ae:58:0e:54:6d: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6D:54:79:FC:9F:55:DC:A1:B4:75:CF:EF:57:F2:5E:B4:BA:3C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e9f7d97-8815-3ceb-81ec-e613f2a2752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:66:2c:2a:6b:49:b6:3e:fb:30:30:f2:67:6e:19:e6:83:c0: a2:ab:ca:cf:92:42:d5:c5:11:43:c8:44:cc:32:0d:4d:e6:a5: 2a:79:26:ca:e6:e5:97:59:48:e3:a5:d5:ca:cb:73:c4:8f:be: bd:d3:98:ac:df:75:40:47:9f:43:e7:23:76:51:a7:64:84:60: 04:bb:c2:fa:e7:73:4c:b8:74:0f:75:45:58:56:e7:cb:50:43: 99:ba:b1:c5:54:71:e1:5e:18:56:0e:43:87:00:c0:d7:3f:27: e9:03:5f:97:54:78:96:37:68:c8:b0:13:5a:4d:d4:25:cb:3d: 85:c4:bf:f1:a2:b0:b4:2c:2e:e2:57:24:23:68:e1:0f:95:73: 90:7c:9d:95:5d:66:ef:bd:47:7f:87:61:a5:6b:bc:b7:6e:1b: ee:cf:c3:6f:69:ef:7d:bb:41:80:3e:36:ab:89:1d:75:95:3a: 54:3f:3b:5d:50:4b:c0:ea:ef:77:a3:42:29:5f:f2:37:11:1c: 74:a6:70:e4:be:79:66:53:21:90:c3:3d:1e:de:90:84:05:29: a3:2c:43:9b:6d:56:a8:ee:3e:0c:01:f2:c8:99:8c:2d:08:c8: 49:1f:6a:75:93:e0:d8:3a:67:43:15:10:05:f5:d9:3e:f7:51: 16:15:a2:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEyClrNh6DW2F6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzMxOFoXDTI1MTEyMDA2MzMxOFowLzEtMCsGA1UEAxMk Mzk3ZjIwNjUtMTcyMC00MGZkLWJiY2ItYTNlODEyOThjOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgwiHs+tVJ8e3y/hdrL9KcYFeNebZxm/MJoX wanOGq9MebAdmDQDOe6pNUAhYMRCPI48IeIIMr9i4F2f9mho2KHIto31mYXNXVW9 JNDDPrts71Ym3wiZ6Zq40MtJEI9/m6gkQTx5KphElcRnVs2K2zSYkP3D5KPvF/MU Qv1txX056fEatr8d0hSe/pi5zu84aKEjW9iN0+EJQ5hurgIhcIkAUV60F9n36mPP C3HeMYMFh9DqJ0VKGlSzBI34Ri0xhY/2CH0Cy0MestfygmdIDsqLrL+YZA0mjI7H Sg6C2Yeh96LMeNnPflFvgmnPHckminqCKQUbI5qLrlgOVG0bDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJtVHn8n1XcobR1z+9X8l60ujxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGU5ZjdkOTctODgxNS0z Y2ViLTgxZWMtZTYxM2YyYTI3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChmLCprSbY++zAw8mduGeaDwKKrys+SQtXFEUPIRMwyDU3mpSp5Jsrm 5ZdZSOOl1crLc8SPvr3TmKzfdUBHn0PnI3ZRp2SEYAS7wvrnc0y4dA91RVhW58tQ Q5m6scVUceFeGFYOQ4cAwNc/J+kDX5dUeJY3aMiwE1pN1CXLPYXEv/GisLQsLuJX JCNo4Q+Vc5B8nZVdZu+9R3+HYaVrvLduG+7Pw29p7327QYA+NquJHXWVOlQ/O11Q S8Dq73ejQilf8jcRHHSmcOS+eWZTIZDDPR7ekIQFKaMsQ5ttVqjuPgwB8siZjC0I yEkfanWT4Ng6Z0MVEAX12T73URYVovA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:15 2025 by rpki-client