$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa File: faf56999-57e6-37e7-b0c9-6130e35b117a.roa (raw, json) Hash identifier: 76Uz9an2eaQa0fA57/KyHvsHtmNfKk2iHd+jhJQtIPo= Subject key identifier: E4:3D:B4:34:41:F6:3F:A8:B5:4F:5F:63:99:51:A7:27:B3:76:D3:E4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8BFEE32EEDA4692B07C8980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa Signing time: Mon 25 Aug 2025 08:07:57 +0000 ROA not before: Mon 25 Aug 2025 08:07:57 +0000 ROA not after: Sun 23 Nov 2025 09:07:57 +0000 asID: 31898 IP address blocks: 129.145.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:bf:ee:32:ee:da:46:92:b0:7c:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:07:57 2025 GMT Not After : Nov 23 09:07:57 2025 GMT Subject: CN=fa01dc43-820d-4edd-8833-c31295a01c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:5b:6a:41:77:db:9a:a5:1e:7a:98:ca:9f: 61:b1:99:58:33:1c:72:3c:00:e7:54:8f:7a:c2:3d: 67:bf:81:83:5f:0c:57:31:da:15:7e:3d:5f:5d:79: f7:5a:a8:da:12:36:9f:b3:94:f1:c3:bd:13:06:fe: 8b:6c:cc:4e:37:aa:ce:38:f1:5f:95:a5:f1:87:5a: a0:a3:e1:02:31:73:04:8f:df:38:1a:0a:10:6c:dd: 2d:20:c6:e3:7f:ec:f1:ba:3e:1c:3d:b3:62:46:1a: ef:41:c7:cb:b1:e0:5f:63:aa:c6:de:5c:93:bc:e3: 40:8e:ee:de:54:3f:0c:28:af:ae:4d:77:15:c8:53: aa:40:28:85:d5:09:72:c1:03:31:da:23:5c:eb:f1: e8:27:e8:d9:9e:20:27:9d:5f:c0:02:09:1a:ba:10: e8:de:3a:9f:de:01:5b:46:ee:57:a6:d1:df:f6:30: f6:e5:8e:f1:a3:91:f4:2c:38:95:07:7d:de:62:dc: fd:bb:e6:df:38:1f:95:b2:7a:68:ad:dd:a3:bb:5d: d8:cd:94:d7:ac:ce:5b:82:20:e3:6e:e4:94:36:e4: 9d:81:bc:db:c6:9b:6c:16:e9:44:c7:4c:63:ce:b6: 4c:9f:69:f9:4d:63:5c:71:de:7c:1b:57:ad:00:50: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:B4:34:41:F6:3F:A8:B5:4F:5F:63:99:51:A7:27:B3:76:D3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5d:72:a2:a1:67:11:58:d2:65:83:65:60:e4:c1:9a:3b:10: 70:74:2e:fb:d5:2e:5d:ac:6b:69:06:63:90:79:c6:12:29:29: ca:d0:51:40:e5:38:44:73:e8:b9:01:af:47:60:aa:0f:53:69: b4:f8:87:ac:18:08:da:61:34:5c:04:f7:86:69:49:14:82:b5: 5f:48:d6:fa:da:24:c4:8a:db:fc:4a:5a:03:66:d0:5c:9f:33: 3e:2c:81:c9:78:25:45:e9:46:d4:a6:fa:39:96:73:c5:c0:93: f9:59:f4:4b:ce:d6:13:6e:bf:d2:d9:23:40:7a:e8:6e:c0:32: bf:23:80:4f:c3:1c:d8:86:c8:ac:c2:a9:86:59:f6:3e:b3:9b: 5a:49:ec:d4:9b:5e:76:f4:af:b9:c7:05:67:ec:f8:97:93:af: 4a:0b:1b:c3:24:4f:f1:c7:98:ad:bb:10:7b:c5:54:8e:c8:96: de:38:82:b7:f0:30:b6:eb:5b:9b:54:a9:d9:13:25:8c:da:8d: 6d:0f:95:35:d5:3b:96:af:b5:eb:6b:f8:91:14:6f:57:16:c2: a1:7f:76:3f:7a:0e:da:06:62:4c:26:14:ae:6a:2e:2d:e6:12: d9:07:9d:60:0d:a2:af:e3:d1:fc:e2:be:b1:26:ba:2d:90:79: 3b:7e:20:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4v+4y7tpGkrB8iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDc1N1oXDTI1MTEyMzA5MDc1N1owLzEtMCsGA1UEAxMk ZmEwMWRjNDMtODIwZC00ZWRkLTg4MzMtYzMxMjk1YTAxYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq9bakF325qlHnqYyp9hsZlYMxxyPADnVI96 wj1nv4GDXwxXMdoVfj1fXXn3WqjaEjafs5Txw70TBv6LbMxON6rOOPFflaXxh1qg o+ECMXMEj984GgoQbN0tIMbjf+zxuj4cPbNiRhrvQcfLseBfY6rG3lyTvONAju7e VD8MKK+uTXcVyFOqQCiF1QlywQMx2iNc6/HoJ+jZniAnnV/AAgkauhDo3jqf3gFb Ru5XptHf9jD25Y7xo5H0LDiVB33eYtz9u+bfOB+Vsnpord2ju13YzZTXrM5bgiDj buSUNuSdgbzbxptsFulEx0xjzrZMn2n5TWNccd58G1etAFAjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ9tDRB9j+otU9fY5lRpyezdtPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFmNTY5OTktNTdlNi0z N2U3LWIwYzktNjEzMGUzNWIxMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZdcqKhZxFY0mWDZWDkwZo7EHB0LvvVLl2sa2kGY5B5xhIpKcrQUUDl OERz6LkBr0dgqg9TabT4h6wYCNphNFwE94ZpSRSCtV9I1vraJMSK2/xKWgNm0Fyf Mz4sgcl4JUXpRtSm+jmWc8XAk/lZ9EvO1hNuv9LZI0B66G7AMr8jgE/DHNiGyKzC qYZZ9j6zm1pJ7NSbXnb0r7nHBWfs+JeTr0oLG8MkT/HHmK27EHvFVI7Ilt44grfw MLbrW5tUqdkTJYzajW0PlTXVO5avtetr+JEUb1cWwqF/dj96DtoGYkwmFK5qLi3m EtkHnWANoq/j0fzivrEmui2QeTt+IBQ= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:33 2025 by rpki-client