$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa File: 919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa (raw, json) Hash identifier: wWOnYzPLxdSXXzEDvIrZrVGK7JN7GxVEH8HHK7JQPGU= Subject key identifier: C9:95:A9:C7:77:F0:93:25:AC:BE:AD:FC:88:93:A5:1F:BA:A4:31:BC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE1ADFB287A428D739F8DA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa Signing time: Thu 21 Aug 2025 12:37:18 +0000 ROA not before: Thu 21 Aug 2025 12:37:18 +0000 ROA not after: Wed 19 Nov 2025 13:37:18 +0000 asID: 31898 IP address blocks: 129.91.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:1a:df:b2:87:a4:28:d7:39:f8:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 12:37:18 2025 GMT Not After : Nov 19 13:37:18 2025 GMT Subject: CN=63ec937f-2444-4a27-9267-401c5649c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:4f:4a:c2:55:6f:40:43:68:f7:1a:31:a4: 0c:d0:9d:2a:4a:78:e5:87:32:3a:0e:df:c9:e6:db: 31:2d:36:ba:73:bf:72:e6:85:a0:a8:e8:85:71:75: a2:4f:62:22:d8:79:a6:9b:29:b3:59:51:63:d8:10: 65:23:c1:aa:a8:90:8c:3e:7f:0a:8c:b2:02:54:c5: 26:40:75:ba:e5:32:1b:71:d1:c5:e5:5e:2e:cb:cc: 29:dd:6e:a2:9d:fe:62:a7:2d:9b:9d:1d:64:6b:a1: 24:08:f5:29:3f:19:37:59:a9:5d:d7:bb:fe:da:49: 45:55:b6:8b:46:5a:83:9e:2b:1b:a0:4a:ae:a4:27: 42:4e:73:df:03:0f:4a:26:b6:af:ad:6a:bf:bc:2f: 9e:f7:e0:f5:90:0b:cc:30:ad:05:7c:b9:b5:b5:0f: 71:99:52:b8:a7:39:c1:33:e9:ca:cd:20:3d:12:08: f0:a7:ad:29:02:f4:59:e2:c1:cd:dd:7a:26:19:14: e4:44:2d:d3:32:ae:41:46:48:2d:84:cf:f7:23:16: e7:68:6b:22:b4:2c:16:99:44:c3:04:d7:c4:7e:08: 1d:a7:26:2b:75:a8:70:b8:37:b3:86:a3:9a:50:ea: 10:43:cd:14:36:b3:4f:83:78:81:72:dd:2d:42:5e: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:A9:C7:77:F0:93:25:AC:BE:AD:FC:88:93:A5:1F:BA:A4:31:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/919bf68c-ba5f-3f1f-b773-31b13a5d38d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.91.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:62:d8:1f:af:ee:19:1b:27:3d:f8:8e:80:a9:2c:98:1d:32: b7:e7:f1:64:0a:ab:12:87:f3:38:38:db:fd:30:75:17:5e:df: 83:7c:5c:93:22:f9:52:62:3d:07:2e:fd:9c:04:44:45:4d:d8: 3e:93:a1:88:44:e0:e1:3e:e5:08:ba:df:7c:f0:23:d8:32:fe: 06:75:68:de:c5:2b:23:ba:3c:7c:61:ee:11:3b:98:8e:ac:47: 6e:cf:67:6a:44:50:e2:dd:fa:9b:37:0c:b6:11:5f:50:54:f6: 43:98:87:1b:43:bd:09:c0:e0:b3:dc:c9:7a:9a:8c:24:8f:44: d2:89:3e:10:5c:fe:fd:22:8c:90:42:fb:a3:a2:d8:2e:39:b8: 32:61:21:74:38:f0:9d:05:5a:f7:ec:91:c9:6c:30:11:e2:e2: 7b:94:ea:46:d6:6b:d8:6a:fd:bd:39:49:af:21:e7:a5:d2:de: 46:07:ec:5a:39:2f:2c:81:dd:cd:ed:0b:4f:9c:3e:07:a9:e6: 0d:5f:78:c4:e4:45:07:f9:88:51:b2:40:c8:e6:06:91:16:cd: 24:36:b1:2b:1f:79:27:25:5d:4c:96:6b:8e:a8:53:a4:07:e7: df:d9:8d:37:c1:c9:83:03:04:72:ac:4c:4a:ea:0c:1a:b5:63: c9:60:98:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruGt+yh6Qo1zn42gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEyMzcxOFoXDTI1MTExOTEzMzcxOFowLzEtMCsGA1UEAxMk NjNlYzkzN2YtMjQ0NC00YTI3LTkyNjctNDAxYzU2NDljNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwZPSsJVb0BDaPcaMaQM0J0qSnjlhzI6Dt/J 5tsxLTa6c79y5oWgqOiFcXWiT2Ii2HmmmymzWVFj2BBlI8GqqJCMPn8KjLICVMUm QHW65TIbcdHF5V4uy8wp3W6inf5ipy2bnR1ka6EkCPUpPxk3Wald17v+2klFVbaL RlqDnisboEqupCdCTnPfAw9KJravrWq/vC+e9+D1kAvMMK0FfLm1tQ9xmVK4pznB M+nKzSA9Egjwp60pAvRZ4sHN3XomGRTkRC3TMq5BRkgthM/3IxbnaGsitCwWmUTD BNfEfggdpyYrdahwuDezhqOaUOoQQ80UNrNPg3iBct0tQl5+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmVqcd38JMlrL6t/IiTpR+6pDG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTE5YmY2OGMtYmE1Zi0z ZjFmLWI3NzMtMzFiMTNhNWQzOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgVsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhi2B+v7hkbJz34joCpLJgdMrfn8WQKqxKH8zg42/0wdRde34N8XJMi +VJiPQcu/ZwEREVN2D6ToYhE4OE+5Qi633zwI9gy/gZ1aN7FKyO6PHxh7hE7mI6s R27PZ2pEUOLd+ps3DLYRX1BU9kOYhxtDvQnA4LPcyXqajCSPRNKJPhBc/v0ijJBC +6Oi2C45uDJhIXQ48J0FWvfskclsMBHi4nuU6kbWa9hq/b05Sa8h56XS3kYH7Fo5 LyyB3c3tC0+cPgep5g1feMTkRQf5iFGyQMjmBpEWzSQ2sSsfeSclXUyWa46oU6QH 59/ZjTfByYMDBHKsTErqDBq1Y8lgmN8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:46 2025 by rpki-client