$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa File: c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa (raw, json) Hash identifier: 94B3Xc1qNFAKeYo4L40Fe9RbOO4FVzPC49mC2ZKnrGY= Subject key identifier: 36:49:5C:75:6D:31:6C:C3:A6:0B:B4:BE:6E:DF:B8:5B:F1:95:C8:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE976A162E02317A1BCD4B380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa Signing time: Tue 19 Aug 2025 20:43:08 +0000 ROA not before: Tue 19 Aug 2025 20:43:08 +0000 ROA not after: Mon 17 Nov 2025 21:43:08 +0000 asID: 31898 IP address blocks: 129.151.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:76:a1:62:e0:23:17:a1:bc:d4:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:43:08 2025 GMT Not After : Nov 17 21:43:08 2025 GMT Subject: CN=365f9029-c05e-42ce-b0ea-6e9e280ff980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:da:45:f3:79:38:c1:0f:31:2a:de:27:ff: 77:ec:52:61:2b:78:8d:fe:ff:59:ae:f7:f5:15:07: 65:63:90:0d:b6:15:ed:57:f8:96:3a:36:5e:a1:c8: 4a:07:ea:91:9f:81:b8:22:f1:83:10:b1:dc:5b:fc: 36:34:2e:c7:03:2b:c7:9b:8f:94:08:0c:d3:09:aa: ca:14:ef:9a:f6:b2:14:af:d8:51:b4:33:a1:63:65: e8:e0:f0:89:b2:9e:e1:3d:b1:93:39:63:9a:44:e1: ad:f7:cb:39:68:98:ee:11:b7:6b:07:6d:fa:ae:41: f6:a4:71:36:1d:48:d1:51:bc:01:37:62:24:41:dd: f7:c8:10:1b:28:88:23:ce:dd:a6:e0:c7:e1:14:30: 98:34:59:68:0c:5d:bb:5f:8c:56:b0:d5:51:7c:57: 49:89:b1:f3:69:20:67:42:54:2e:e2:1c:dd:fd:de: dd:43:88:7a:53:b5:62:c1:a6:85:13:b7:fe:f3:96: 99:33:6c:c0:fd:11:6d:77:0e:b9:3b:94:6b:2e:19: dc:be:4f:bf:b9:cf:a5:99:91:61:b7:16:43:3f:da: 8f:ff:27:26:58:e0:65:e1:fa:e2:b3:fd:6d:fb:e2: be:f0:ee:83:2c:f1:50:0d:d1:f1:7e:7e:d3:28:87: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:49:5C:75:6D:31:6C:C3:A6:0B:B4:BE:6E:DF:B8:5B:F1:95:C8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7b:21:b3:ce:9e:fb:0c:c6:9b:0a:0c:d8:5d:b0:b0:ab:c9: 63:b3:fa:3e:dd:2d:c4:5e:9d:63:ae:e4:61:ec:f9:30:c8:42: f1:1e:be:66:70:a3:e0:56:cd:34:95:3a:3d:28:a0:dd:33:dd: 45:cb:79:67:4d:35:23:5f:18:62:b7:6b:3c:1d:99:6e:60:55: 65:ac:41:b6:9e:bf:fe:70:96:bc:56:ee:2e:4a:26:49:16:59: 0d:c2:28:d3:80:ca:0d:93:1f:e4:66:17:d2:ab:cd:f1:11:55: c8:45:d3:5e:b5:88:22:46:32:4b:7a:98:fd:26:d5:3e:c3:ad: 7a:9d:f4:22:d1:72:79:9f:f6:5d:00:1a:0b:71:b4:0c:66:e7: 23:95:6a:ae:79:af:23:bc:48:46:49:6c:b3:3a:65:d1:0c:bf: b5:69:53:ca:af:30:4a:df:55:e8:44:ce:d0:2c:fc:28:6d:c1: 7c:d1:68:23:43:34:69:63:e2:63:84:95:8b:36:a9:67:aa:f0: d3:42:2c:f7:d6:04:df:c0:b7:0e:7e:d6:71:4f:07:3c:23:d7: 6f:cf:05:4f:80:a9:d9:60:2a:28:17:05:c3:b1:b6:2d:08:50: 77:a6:19:dd:53:31:de:5b:e7:f0:18:e0:09:02:f0:29:a6:5b: 2f:cd:0a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdqFi4CMXobzUs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDMwOFoXDTI1MTExNzIxNDMwOFowLzEtMCsGA1UEAxMk MzY1ZjkwMjktYzA1ZS00MmNlLWIwZWEtNmU5ZTI4MGZmOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeDaRfN5OMEPMSreJ/937FJhK3iN/v9Zrvf1 FQdlY5ANthXtV/iWOjZeochKB+qRn4G4IvGDELHcW/w2NC7HAyvHm4+UCAzTCarK FO+a9rIUr9hRtDOhY2Xo4PCJsp7hPbGTOWOaROGt98s5aJjuEbdrB236rkH2pHE2 HUjRUbwBN2IkQd33yBAbKIgjzt2m4MfhFDCYNFloDF27X4xWsNVRfFdJibHzaSBn QlQu4hzd/d7dQ4h6U7ViwaaFE7f+85aZM2zA/RFtdw65O5RrLhncvk+/uc+lmZFh txZDP9qP/ycmWOBl4fris/1t++K+8O6DLPFQDdHxfn7TKIcPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZJXHVtMWzDpgu0vm7fuFvxlcipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQxY2FkMGQtNWZmMC0z ZDkzLWFlZmUtNzlmZDcyODljMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC57IbPOnvsMxpsKDNhdsLCryWOz+j7dLcRenWOu5GHs+TDIQvEevmZw o+BWzTSVOj0ooN0z3UXLeWdNNSNfGGK3azwdmW5gVWWsQbaev/5wlrxW7i5KJkkW WQ3CKNOAyg2TH+RmF9KrzfERVchF0161iCJGMkt6mP0m1T7DrXqd9CLRcnmf9l0A GgtxtAxm5yOVaq55ryO8SEZJbLM6ZdEMv7VpU8qvMErfVehEztAs/ChtwXzRaCND NGlj4mOElYs2qWeq8NNCLPfWBN/Atw5+1nFPBzwj12/PBU+AqdlgKigXBcOxti0I UHemGd1TMd5b5/AY4AkC8CmmWy/NCgU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:58 2025 by rpki-client