$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa File: c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa (raw, json) Hash identifier: caxOrLWLzd6UxIj5CtnuIutxOWDdV5hmohmgreDleVI= Subject key identifier: 28:87:52:B2:17:F0:59:4B:9D:CB:44:BB:0D:89:B7:51:4C:D5:2A:FE Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584A8576024D12A8EDC8B2F1D380 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 401317 IP address blocks: 129.19.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:02:4d:12:a8:ed:c8:b2:f1:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=19663ea8-4da0-4c01-8f68-f40916e81c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d9:2d:da:10:0d:99:d1:32:9b:2a:ae:84:7d: 3a:93:c6:2d:c8:45:f1:d1:18:c6:ee:b0:9a:94:11: 13:c0:f8:d7:43:55:a8:4f:c4:a2:8c:30:74:4f:f6: ad:08:e2:fc:b9:17:f0:db:dd:ec:2a:ee:55:20:05: f8:2c:53:ec:99:15:69:3b:3c:84:cd:97:17:80:b5: ab:a5:f2:f1:f0:13:d4:35:c7:5c:dd:4f:84:6e:f3: fd:53:ee:10:ea:ee:b1:e3:0b:46:83:84:8a:dc:1b: 50:e8:56:ae:02:9c:1c:f8:b1:8b:e6:42:d7:8a:d3: 31:8b:70:b5:30:62:fe:c3:d6:c3:95:b4:e8:c2:c2: 07:76:72:48:aa:17:a2:d1:d2:f6:68:03:d3:7a:d5: db:3c:fb:39:94:58:37:81:34:e7:d6:7e:36:f7:1e: ff:a1:36:49:99:fe:e7:6a:b5:e3:f2:17:e8:14:bc: 34:25:c1:89:3e:d5:49:9b:57:93:9b:19:2e:e3:c6: 8b:bf:1e:d9:ea:53:3d:bd:ea:0e:cc:85:1d:4b:46: fa:fd:5f:45:85:2d:91:6d:91:22:19:77:a1:5e:8f: 0c:b4:c2:50:53:32:44:9f:a4:13:67:16:e6:00:14: c5:3d:b5:1b:9f:4a:e6:22:b5:c2:fd:29:06:9a:80: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:52:B2:17:F0:59:4B:9D:CB:44:BB:0D:89:B7:51:4C:D5:2A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e2:c0:05:b7:8b:c4:97:b8:5f:93:bd:7e:3d:7b:e1:93:41: 1e:dd:c1:c2:35:2a:50:c2:d2:d6:8a:0c:71:8e:0f:8e:b7:c4: e1:31:c4:17:72:9e:1a:da:36:43:e9:77:99:d3:1e:8f:05:9d: fe:03:31:52:18:1a:0e:b0:ba:0a:0b:06:43:70:2f:24:f8:da: 85:fd:b2:ff:f3:1d:96:08:53:e0:bc:9b:35:55:c7:4b:a9:36: c1:b4:a1:3a:c9:30:11:37:8e:18:b7:24:95:e4:98:c5:2c:45: d1:ff:b9:54:d1:98:f0:98:af:ef:9d:2d:08:5d:d2:45:85:15: 24:5d:25:8b:d1:f5:58:bf:b8:d3:de:1b:b9:4d:18:ef:36:f0: 06:b0:4e:c1:ef:da:1c:57:ea:06:67:30:ec:4b:ab:b3:6b:14: 71:44:5f:c5:36:78:22:b4:d3:27:55:22:7c:0c:04:9d:df:70: 54:21:52:18:15:5a:44:20:58:4f:1a:7c:60:0e:c5:6b:37:8c: be:2d:83:50:57:97:40:f6:59:16:44:e1:21:bb:2b:d0:5f:b8: 1d:64:41:ea:1c:dc:77:09:c3:ac:45:4b:2e:f3:91:60:74:20: 71:74:55:98:13:82:7e:93:97:f6:ec:08:cd:a5:17:5b:11:fd: 49:f6:f8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgJNEqjtyLLx04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MTk2NjNlYTgtNGRhMC00YzAxLThmNjgtZjQwOTE2ZTgxYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtkt2hANmdEymyquhH06k8YtyEXx0RjG7rCa lBETwPjXQ1WoT8SijDB0T/atCOL8uRfw293sKu5VIAX4LFPsmRVpOzyEzZcXgLWr pfLx8BPUNcdc3U+EbvP9U+4Q6u6x4wtGg4SK3BtQ6FauApwc+LGL5kLXitMxi3C1 MGL+w9bDlbTowsIHdnJIqhei0dL2aAPTetXbPPs5lFg3gTTn1n429x7/oTZJmf7n arXj8hfoFLw0JcGJPtVJm1eTmxku48aLvx7Z6lM9veoOzIUdS0b6/V9FhS2RbZEi GXehXo8MtMJQUzJEn6QTZxbmABTFPbUbn0rmIrXC/SkGmoD6gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHUrIX8FlLnctEuw2Jt1FM1Sr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYzEzMmZjNjItZjlmOS0z OTlmLTkyYTktMDJhYTVkNGMwMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADniwAW3i8SXuF+TvX49e+GTQR7dwcI1KlDC0taKDHGOD463xOExxBdy nhraNkPpd5nTHo8Fnf4DMVIYGg6wugoLBkNwLyT42oX9sv/zHZYIU+C8mzVVx0up NsG0oTrJMBE3jhi3JJXkmMUsRdH/uVTRmPCYr++dLQhd0kWFFSRdJYvR9Vi/uNPe G7lNGO828AawTsHv2hxX6gZnMOxLq7NrFHFEX8U2eCK00ydVInwMBJ3fcFQhUhgV WkQgWE8afGAOxWs3jL4tg1BXl0D2WRZE4SG7K9BfuB1kQeoc3HcJw6xFSy7zkWB0 IHF0VZgTgn6Tl/bsCM2lF1sR/Un2+MA= -----END CERTIFICATE-----Generated at Sun Jul 27 19:11:52 2025 by rpki-client