$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa File: e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa (raw, json) Hash identifier: GN5vPiExkvDqCurghMyt8lTEBCp+slSLlhpIubqmSAE= Subject key identifier: 7B:6A:64:1E:73:47:CF:66:9D:1B:36:85:BF:08:87:1C:E1:73:1B:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C11ACF98724ABAF1C57480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa Signing time: Mon 25 Aug 2025 08:10:19 +0000 ROA not before: Mon 25 Aug 2025 08:10:19 +0000 ROA not after: Sun 23 Nov 2025 09:10:19 +0000 asID: 31898 IP address blocks: 129.213.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c1:1a:cf:98:72:4a:ba:f1:c5:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:10:19 2025 GMT Not After : Nov 23 09:10:19 2025 GMT Subject: CN=ebe29ab9-e7d5-4624-839e-ae51cdd99417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:57:dc:9c:29:d7:f2:8a:19:ee:c6:ce:e8: d1:38:8b:0c:5f:66:d7:8d:cf:d1:11:34:b8:0c:3d: 71:26:18:ee:fe:58:f9:dd:fb:d5:40:f5:0a:32:28: 49:d9:8f:fe:1c:fd:c5:18:2e:ad:22:ea:9c:e4:8b: 93:af:32:75:4f:b6:14:1a:9a:25:17:3e:f5:eb:1b: b8:9e:7d:00:05:3b:d8:46:e5:79:e3:5e:4d:89:f0: 0b:1c:70:97:3d:10:32:fb:8f:84:2d:8d:5b:3b:4f: 9d:2a:36:83:7a:b2:51:a4:be:93:4e:9d:86:d8:dc: a5:11:98:f0:b2:b8:04:23:18:73:3d:5d:a8:67:ce: 3f:61:c2:63:46:97:40:52:c8:a7:ec:f1:c6:6a:9d: 96:bc:fd:c3:2f:53:86:0f:d8:ab:12:a6:a7:b4:59: 15:fe:37:68:70:9d:56:8c:fc:3f:25:24:e4:1c:ab: ed:10:bc:80:d0:9a:f5:59:e2:d0:0b:67:c3:5c:b6: dc:99:24:e5:b8:f4:86:ee:a9:b5:90:d3:97:f8:1f: 2c:cc:d6:19:30:f6:05:4a:6f:b1:4d:80:04:93:aa: 72:a5:c2:6c:e6:70:cc:0e:f4:b7:6b:b0:c0:bc:fa: 34:4a:e8:66:14:ae:f2:bf:27:61:09:e3:77:68:64: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6A:64:1E:73:47:CF:66:9D:1B:36:85:BF:08:87:1C:E1:73:1B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e99a1559-68f5-34c7-9a88-697d6e5fe21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:db:14:83:7e:e9:1a:da:f1:fb:bc:e0:21:f7:92:df:e2:41: 1c:4e:d0:3d:65:6b:3b:fd:28:92:20:ae:7c:af:da:73:e1:ef: 8b:31:cc:db:22:9b:b6:56:53:eb:b4:43:f7:8d:fb:86:a9:d8: b3:36:c7:db:eb:2e:92:b2:51:c9:46:08:05:a0:a7:b5:0d:4d: d3:de:21:00:d8:b1:9e:ff:b3:cc:ee:f0:43:40:dc:51:dc:a6: 95:3c:39:75:48:84:bb:82:56:54:4c:f9:55:d8:3a:0c:e4:c4: 5b:e3:f6:77:2b:2a:7a:a5:22:03:6d:14:41:df:9f:fe:9b:e5: 82:bc:14:ca:ed:cc:e1:03:9d:3e:cf:c8:7a:5e:13:84:cf:3c: ba:3a:1b:98:e5:0f:e0:e3:04:5b:35:a6:86:d2:0f:e4:de:a6: cc:4c:c0:0a:07:c5:7e:a3:94:7d:0a:76:44:d8:cd:ec:f9:83: 35:2e:69:b6:5d:08:fa:43:47:ce:9b:52:60:40:4a:17:1b:ee: e6:4d:ad:4a:52:53:a9:1f:28:c1:5d:b2:2f:c7:11:6a:b6:35: fc:b0:89:36:26:f6:c4:06:85:f5:16:d3:b7:bb:7a:35:f3:d7: b2:b6:d5:42:59:21:e8:f7:5c:d5:50:7e:93:a5:20:6f:28:17: a9:36:0c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wRrPmHJKuvHFdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTAxOVoXDTI1MTEyMzA5MTAxOVowLzEtMCsGA1UEAxMk ZWJlMjlhYjktZTdkNS00NjI0LTgzOWUtYWU1MWNkZDk5NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjlX3Jwp1/KKGe7GzujROIsMX2bXjc/RETS4 DD1xJhju/lj53fvVQPUKMihJ2Y/+HP3FGC6tIuqc5IuTrzJ1T7YUGpolFz716xu4 nn0ABTvYRuV5415NifALHHCXPRAy+4+ELY1bO0+dKjaDerJRpL6TTp2G2NylEZjw srgEIxhzPV2oZ84/YcJjRpdAUsin7PHGap2WvP3DL1OGD9irEqantFkV/jdocJ1W jPw/JSTkHKvtELyA0Jr1WeLQC2fDXLbcmSTluPSG7qm1kNOX+B8szNYZMPYFSm+x TYAEk6pypcJs5nDMDvS3a7DAvPo0SuhmFK7yvydhCeN3aGSiuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtqZB5zR89mnRs2hb8Ihxzhcxu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTk5YTE1NTktNjhmNS0z NGM3LTlhODgtNjk3ZDZlNWZlMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgdUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDbFIN+6Rra8fu84CH3kt/iQRxO0D1lazv9KJIgrnyv2nPh74sxzNsi m7ZWU+u0Q/eN+4ap2LM2x9vrLpKyUclGCAWgp7UNTdPeIQDYsZ7/s8zu8ENA3FHc ppU8OXVIhLuCVlRM+VXYOgzkxFvj9ncrKnqlIgNtFEHfn/6b5YK8FMrtzOEDnT7P yHpeE4TPPLo6G5jlD+DjBFs1pobSD+TepsxMwAoHxX6jlH0KdkTYzez5gzUuabZd CPpDR86bUmBAShcb7uZNrUpSU6kfKMFdsi/HEWq2NfywiTYm9sQGhfUW07e7ejXz 17K21UJZIej3XNVQfpOlIG8oF6k2DH4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:15 2025 by rpki-client