$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa File: bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa (raw, json) Hash identifier: g+iahBx4iycpAzlwgV0zscxv3adE8oOJIDoccNsuAlw= Subject key identifier: 97:EE:39:7D:FE:BC:56:0B:49:F6:E3:50:51:A6:6F:8B:F6:AC:A9:24 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D8F28FDF2F103AC52E2280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa Signing time: Mon 25 Aug 2025 17:34:10 +0000 ROA not before: Mon 25 Aug 2025 17:34:10 +0000 ROA not after: Sun 23 Nov 2025 18:34:10 +0000 asID: 31898 IP address blocks: 129.149.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d8:f2:8f:df:2f:10:3a:c5:2e:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:10 2025 GMT Not After : Nov 23 18:34:10 2025 GMT Subject: CN=297d9205-6713-4900-9845-1dfa2f4f2b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:5b:6f:19:9d:a8:81:c6:84:03:d2:a9:f1: e0:9f:31:39:53:46:4c:b9:4e:4c:6d:4a:be:0e:79: 14:1a:93:95:a1:99:44:8a:bc:38:3d:10:48:11:af: 23:45:85:0e:83:37:91:d2:fe:0a:71:16:73:d5:f0: 81:fe:bb:e5:f7:e0:a1:7c:f6:7d:5a:68:07:f6:f2: bb:a6:4d:17:1b:5e:ea:9b:99:70:50:3b:af:f0:2b: a5:7b:7e:19:e2:ca:54:c4:b3:56:2d:4f:cf:25:d6: 5d:1b:06:4f:5a:ed:cb:92:a0:5b:f4:89:9d:a6:2b: 52:90:71:1a:1d:e5:ef:ec:4d:18:e9:38:21:cb:13: 04:5d:94:c6:2b:f4:e2:9e:10:bd:f8:55:83:b2:ef: c3:87:ea:b3:61:7f:32:50:95:97:45:25:f0:78:76: cb:24:5c:1d:c6:8c:dc:37:74:9d:83:e0:22:f3:e2: f0:64:f6:e2:91:f9:23:4b:03:94:09:0c:3f:ae:29: ef:30:3e:4d:88:9d:be:7c:b2:b0:fc:c5:f7:81:0b: 9d:a3:a6:24:6e:cc:9b:73:ad:7c:e1:1e:1d:73:c4: fa:d6:d2:71:0a:cc:5f:db:8a:c4:a7:f1:5c:57:c4: ca:6d:93:d8:b9:be:07:a1:fd:6a:e2:34:60:eb:ff: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:39:7D:FE:BC:56:0B:49:F6:E3:50:51:A6:6F:8B:F6:AC:A9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfa453c8-7f9a-3e56-849f-d7cbef4d033c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ce:66:73:6b:7d:4c:de:08:ef:e5:17:ab:37:9a:1d:26:24: 71:a3:75:ef:f8:84:b7:16:83:30:7f:69:2f:a9:bc:64:9d:b1: fb:b7:e6:0d:e8:0c:07:6f:9a:23:cd:31:b4:4b:1a:2b:8b:ee: ec:be:7b:5c:46:53:38:a5:10:b1:ed:c1:1c:d8:36:7f:31:3b: de:69:b7:c7:ed:dd:97:b4:2d:63:c4:77:a1:73:84:14:48:3a: 2d:dd:fc:b4:60:37:3f:41:6f:c4:5c:49:0a:39:5d:77:9e:0a: 5a:e7:6e:d4:87:30:8f:71:26:59:3b:09:b4:d3:49:34:4b:69: ff:be:b1:f2:97:b8:de:78:c9:16:5d:7b:05:ee:80:78:66:66: 35:16:d8:01:b5:cf:35:6e:c4:02:3e:a9:ba:68:40:a6:4e:5f: 3e:20:af:c1:47:90:0f:ab:da:cd:e4:42:05:54:49:16:3a:45: 51:62:78:cb:4d:dc:f0:72:d6:ab:16:ea:25:68:93:5c:4e:b0: 3f:15:42:08:88:b3:cc:9b:e8:9e:e2:a2:0e:20:19:eb:16:5c: c4:b0:26:5b:e6:94:34:67:59:7e:38:cb:41:f4:c8:b0:77:f3: 61:9e:25:54:c3:56:11:a9:54:ef:09:6e:55:e9:91:e4:a4:d9: ce:91:a3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr52PKP3y8QOsUuIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQxMFoXDTI1MTEyMzE4MzQxMFowLzEtMCsGA1UEAxMk Mjk3ZDkyMDUtNjcxMy00OTAwLTk4NDUtMWRmYTJmNGYyYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP1bbxmdqIHGhAPSqfHgnzE5U0ZMuU5MbUq+ DnkUGpOVoZlEirw4PRBIEa8jRYUOgzeR0v4KcRZz1fCB/rvl9+ChfPZ9WmgH9vK7 pk0XG17qm5lwUDuv8Cule34Z4spUxLNWLU/PJdZdGwZPWu3LkqBb9ImdpitSkHEa HeXv7E0Y6TghyxMEXZTGK/TinhC9+FWDsu/Dh+qzYX8yUJWXRSXweHbLJFwdxozc N3Sdg+Ai8+LwZPbikfkjSwOUCQw/rinvMD5NiJ2+fLKw/MX3gQudo6Ykbsybc618 4R4dc8T61tJxCsxf24rEp/FcV8TKbZPYub4Hof1q4jRg6//R0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfuOX3+vFYLSfbjUFGmb4v2rKkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhNDUzYzgtN2Y5YS0z ZTU2LTg0OWYtZDdjYmVmNGQwMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrOZnNrfUzeCO/lF6s3mh0mJHGjde/4hLcWgzB/aS+pvGSdsfu35g3o DAdvmiPNMbRLGiuL7uy+e1xGUzilELHtwRzYNn8xO95pt8ft3Ze0LWPEd6FzhBRI Oi3d/LRgNz9Bb8RcSQo5XXeeClrnbtSHMI9xJlk7CbTTSTRLaf++sfKXuN54yRZd ewXugHhmZjUW2AG1zzVuxAI+qbpoQKZOXz4gr8FHkA+r2s3kQgVUSRY6RVFieMtN 3PBy1qsW6iVok1xOsD8VQgiIs8yb6J7iog4gGesWXMSwJlvmlDRnWX44y0H0yLB3 82GeJVTDVhGpVO8JblXpkeSk2c6Ro0A= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:51 2025 by rpki-client