$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa File: 686badf9-71ff-3a50-8be9-89519dccd889.roa (raw, json) Hash identifier: wyNhdRWRY1yVYrRCuPjvIwzpMixzh3dUELVRfDYaxJ4= Subject key identifier: 13:F1:D6:C3:F4:44:FC:5E:22:18:B9:D5:3D:1E:60:FC:9E:5D:F6:DD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C0528C8A5C879EA7F47A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa Signing time: Mon 25 Aug 2025 08:08:44 +0000 ROA not before: Mon 25 Aug 2025 08:08:44 +0000 ROA not after: Sun 23 Nov 2025 09:08:44 +0000 asID: 31898 IP address blocks: 129.158.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c0:52:8c:8a:5c:87:9e:a7:f4:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:08:44 2025 GMT Not After : Nov 23 09:08:44 2025 GMT Subject: CN=be8a0dd1-0d85-437d-8098-993f9d510bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:e8:a4:e3:ef:7c:22:10:00:66:86:8c:99: 6d:90:ce:ea:08:51:0e:0b:a0:15:63:21:8c:eb:4b: de:b2:6e:44:8b:6e:36:86:8a:0f:bb:3e:0c:3d:17: 91:d2:3f:03:d8:3b:35:6c:93:61:49:96:56:b4:80: 5c:fc:38:1f:1c:75:9c:bb:f6:fb:87:39:10:17:31: 7b:36:30:65:5d:40:7e:0a:9e:cd:83:98:68:41:e4: cc:1c:87:47:92:66:0d:fd:a5:b9:61:8f:6f:50:66: 23:9b:37:3b:e2:e8:20:c3:55:ac:38:ca:84:c7:8b: 98:91:02:a9:a0:c0:6a:11:f0:0d:88:51:b9:3f:c9: e6:f9:0b:e3:7b:49:83:c6:5f:8e:bc:1e:93:22:12: a5:4b:55:09:c5:b1:95:c0:5f:cc:4a:f1:52:fd:0d: af:bc:83:a7:35:a3:5b:b8:8d:3c:1d:ec:55:1d:9d: f3:23:67:8e:e0:26:d7:71:db:db:d9:50:11:8f:c4: f9:96:9b:38:7b:8d:c1:96:6c:c9:06:e0:e7:b1:9b: 28:0b:29:a5:21:29:a3:e9:cb:89:e3:ee:13:bc:2b: 5e:8d:94:15:d5:8a:39:22:01:22:39:04:5d:7e:40: 71:f9:b5:c8:fc:d0:f1:82:19:4e:c2:7f:24:27:52: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F1:D6:C3:F4:44:FC:5E:22:18:B9:D5:3D:1E:60:FC:9E:5D:F6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/686badf9-71ff-3a50-8be9-89519dccd889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.158.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:97:58:3f:83:ad:37:79:76:1d:27:f8:47:2b:b6:03:fb:5a: 76:6a:b3:62:d1:b7:3b:f6:46:46:22:f9:f0:31:97:7e:d2:fb: 52:d7:ed:bb:5e:3c:ba:e4:f9:1b:12:31:2b:e8:48:19:5e:4c: d9:fb:9d:f7:7c:d9:e2:0d:c7:a9:f9:82:c6:a7:13:cb:8b:90: ab:9c:34:d0:a2:81:72:c4:75:7a:c6:7f:01:24:5e:78:39:1b: c9:22:13:bd:96:89:e7:2a:46:9b:07:c4:74:66:7c:75:90:25: 0c:92:6c:e5:04:25:1e:09:ae:f5:ed:1e:b0:be:98:33:ab:5b: ac:4b:2a:25:42:64:69:5e:99:a3:b6:70:92:92:f3:bb:dd:68: 89:1f:69:45:65:da:3e:73:3f:27:b1:dc:a7:dd:38:fb:44:03: 15:7d:a1:16:83:86:63:5c:4c:94:11:78:91:18:5a:77:0d:58: a2:94:96:a7:c9:9f:96:1f:18:06:0c:57:ae:8c:53:2b:b2:fc: d0:0b:0c:83:ac:42:96:f9:1f:b3:cc:f6:ee:7b:8c:2a:94:24: a2:94:96:0b:20:85:b2:79:c6:0d:b2:f5:29:67:ab:95:50:8d: 2f:a5:97:9d:e9:a6:3c:b7:e7:53:f4:55:75:43:67:3e:36:ea: bf:51:5f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wFKMilyHnqf0eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDg0NFoXDTI1MTEyMzA5MDg0NFowLzEtMCsGA1UEAxMk YmU4YTBkZDEtMGQ4NS00MzdkLTgwOTgtOTkzZjlkNTEwYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNfopOPvfCIQAGaGjJltkM7qCFEOC6AVYyGM 60vesm5Ei242hooPuz4MPReR0j8D2Ds1bJNhSZZWtIBc/DgfHHWcu/b7hzkQFzF7 NjBlXUB+Cp7Ng5hoQeTMHIdHkmYN/aW5YY9vUGYjmzc74uggw1WsOMqEx4uYkQKp oMBqEfANiFG5P8nm+Qvje0mDxl+OvB6TIhKlS1UJxbGVwF/MSvFS/Q2vvIOnNaNb uI08HexVHZ3zI2eO4CbXcdvb2VARj8T5lps4e43BlmzJBuDnsZsoCymlISmj6cuJ 4+4TvCtejZQV1Yo5IgEiOQRdfkBx+bXI/NDxghlOwn8kJ1Ja2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPx1sP0RPxeIhi51T0eYPyeXfbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjg2YmFkZjktNzFmZi0z YTUwLThiZTktODk1MTlkY2NkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByXWD+DrTd5dh0n+EcrtgP7WnZqs2LRtzv2RkYi+fAxl37S+1LX7bte PLrk+RsSMSvoSBleTNn7nfd82eINx6n5gsanE8uLkKucNNCigXLEdXrGfwEkXng5 G8kiE72WiecqRpsHxHRmfHWQJQySbOUEJR4JrvXtHrC+mDOrW6xLKiVCZGlemaO2 cJKS87vdaIkfaUVl2j5zPyex3KfdOPtEAxV9oRaDhmNcTJQReJEYWncNWKKUlqfJ n5YfGAYMV66MUyuy/NALDIOsQpb5H7PM9u57jCqUJKKUlgsghbJ5xg2y9Slnq5VQ jS+ll53ppjy351P0VXVDZz426r9RX1A= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:04 2025 by rpki-client