$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa File: df4a0f30-4592-38ec-8796-28a0bfedf387.roa (raw, json) Hash identifier: JuaIzFUoQkozkTf6HJu6cD/3chaci68PWUBdgDJvkRs= Subject key identifier: 59:02:4F:9E:0B:77:5A:73:C3:7A:01:B0:45:48:AE:83:CF:97:00:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B0018B7F52D6C6A9D06871D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa Signing time: Wed 27 Aug 2025 23:17:30 +0000 ROA not before: Wed 27 Aug 2025 23:17:30 +0000 ROA not after: Wed 26 Nov 2025 00:17:30 +0000 asID: 31898 IP address blocks: 129.145.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:18:b7:f5:2d:6c:6a:9d:06:87:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 23:17:30 2025 GMT Not After : Nov 26 00:17:30 2025 GMT Subject: CN=983794f5-a583-49de-86d1-326073503b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:2d:dd:b1:5f:a9:11:c3:4d:00:63:a2:7e: 6f:39:19:35:88:08:26:2b:88:b5:6f:56:01:f6:a0: e9:ec:2e:98:6c:7a:07:d3:b4:db:a1:c8:33:52:02: b0:c0:ed:72:66:52:56:e2:a6:b5:f8:3c:a5:ae:b2: 8a:f5:d9:9e:af:53:b3:e7:5c:14:32:f4:45:37:e4: f7:0c:e0:3f:28:49:94:43:48:f2:bd:f9:2f:d6:ed: 51:1c:7d:20:02:c8:1c:37:9d:0a:12:d3:2b:b2:ef: cd:47:e8:49:b8:a5:9e:4b:1e:95:8d:ac:b7:97:cd: 1e:43:54:03:fe:8a:e3:a1:d5:f2:4b:ed:c2:5a:de: d6:f4:b5:59:6c:07:54:14:ea:b8:88:cd:36:ad:6d: b8:16:62:5a:fa:4b:fd:10:29:8f:e7:41:3a:87:8d: 04:61:aa:43:38:99:86:7b:bd:82:05:16:b4:84:64: 6b:4f:80:55:70:22:52:6c:1d:c4:82:2f:c1:5a:9f: 9e:0e:68:fa:7b:96:57:bc:03:67:06:c4:5f:33:b9: 9b:ec:fe:83:d3:99:1c:a0:ab:f2:d1:99:e1:b6:85: 00:ae:f0:6f:d6:f3:1f:00:d8:d7:c7:fe:75:df:ef: 49:1d:2d:f6:65:fd:b0:a0:4a:42:79:e4:f5:20:ca: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:4F:9E:0B:77:5A:73:C3:7A:01:B0:45:48:AE:83:CF:97:00:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df4a0f30-4592-38ec-8796-28a0bfedf387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:16:60:e7:d1:71:f8:6d:86:01:d6:fa:98:da:8c:b9:f1:56: ff:21:8d:55:b0:57:92:18:6d:6c:ba:f5:1d:f9:71:88:62:30: 2b:f9:7d:76:80:8f:37:83:29:a2:5c:b4:40:f7:a3:33:47:9a: 90:71:99:d2:a8:58:05:6e:15:c8:a9:b3:0a:c2:32:78:88:8b: ca:75:3b:49:ac:18:d0:9f:23:20:75:cb:ea:7c:3d:72:87:34: 80:86:26:c7:2f:f8:e6:b9:3e:de:b5:9e:6b:a8:af:06:42:00: 97:5d:d9:de:c9:16:06:ac:2a:68:e2:70:f4:58:00:78:67:d9: d5:8d:27:f7:7e:12:19:cd:d3:be:a2:53:6a:ca:2d:bd:e9:e9: 79:1f:1f:bf:41:6a:10:52:b7:75:fe:f4:ef:9e:86:8b:aa:9b: 90:02:42:2a:59:d4:91:e7:57:4e:f9:4e:64:39:e5:23:32:ac: 7a:28:f1:86:06:e0:80:b2:a4:de:db:0a:9b:f3:83:77:b2:05: 3b:46:9a:2e:f1:15:d8:32:e7:f4:34:d4:92:2d:3e:75:79:7a: be:1b:3e:4c:b8:2a:ee:45:1c:c8:c9:99:8f:02:87:59:b0:56: da:56:f3:c8:b7:98:16:41:a1:ad:aa:ec:22:21:a8:08:91:ae: b6:4c:78:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAGLf1LWxqnQaHHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIzMTczMFoXDTI1MTEyNjAwMTczMFowLzEtMCsGA1UEAxMk OTgzNzk0ZjUtYTU4My00OWRlLTg2ZDEtMzI2MDczNTAzYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXIt3bFfqRHDTQBjon5vORk1iAgmK4i1b1YB 9qDp7C6YbHoH07TbocgzUgKwwO1yZlJW4qa1+DylrrKK9dmer1Oz51wUMvRFN+T3 DOA/KEmUQ0jyvfkv1u1RHH0gAsgcN50KEtMrsu/NR+hJuKWeSx6Vjay3l80eQ1QD /orjodXyS+3CWt7W9LVZbAdUFOq4iM02rW24FmJa+kv9ECmP50E6h40EYapDOJmG e72CBRa0hGRrT4BVcCJSbB3Egi/BWp+eDmj6e5ZXvANnBsRfM7mb7P6D05kcoKvy 0ZnhtoUArvBv1vMfANjXx/513+9JHS32Zf2woEpCeeT1IMrMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkCT54Ld1pzw3oBsEVIroPPlwBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGY0YTBmMzAtNDU5Mi0z OGVjLTg3OTYtMjhhMGJmZWRmMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQWYOfRcfhthgHW+pjajLnxVv8hjVWwV5IYbWy69R35cYhiMCv5fXaA jzeDKaJctED3ozNHmpBxmdKoWAVuFcipswrCMniIi8p1O0msGNCfIyB1y+p8PXKH NICGJscv+Oa5Pt61nmuorwZCAJdd2d7JFgasKmjicPRYAHhn2dWNJ/d+EhnN076i U2rKLb3p6XkfH79BahBSt3X+9O+ehouqm5ACQipZ1JHnV075TmQ55SMyrHoo8YYG 4ICypN7bCpvzg3eyBTtGmi7xFdgy5/Q01JItPnV5er4bPky4Ku5FHMjJmY8Ch1mw VtpW88i3mBZBoa2q7CIhqAiRrrZMeA0= -----END CERTIFICATE-----Generated at Thu Oct 9 00:59:17 2025 by rpki-client