$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa File: c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa (raw, json) Hash identifier: VsQrd3U3naKqbXG/ydBWVXaWIwZcD8WR1lUqKFkYkpo= Subject key identifier: FE:9E:5F:B7:ED:CB:A2:AF:A3:48:EE:5C:9A:B3:5C:9F:BC:DA:39:95 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584B66320392A5A742F5D90C4CC0 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 401317 IP address blocks: 129.19.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:03:92:a5:a7:42:f5:d9:0c:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=30116a77-6045-4213-b790-5ac605e68d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:c3:f0:4c:27:84:7f:5f:c2:05:e7:ae:ce: 19:d1:01:d0:fb:91:aa:71:cf:77:d5:a0:ac:e5:10: 71:94:41:b1:d6:c3:09:6c:ad:5f:73:5d:a6:69:ae: 70:d3:af:34:44:3b:59:9a:ae:0f:b5:19:ac:24:71: aa:97:cb:ee:a3:a7:3c:c0:31:2a:0f:b6:fc:6e:83: ce:38:94:af:a8:82:db:cf:af:c3:50:17:4f:02:90: 79:98:fa:07:db:d8:25:8f:a3:d9:a1:76:8d:3e:ca: 6a:a2:cf:1c:47:48:a6:69:15:4d:28:23:fe:3d:30: 8c:51:25:8f:0d:ce:ef:c0:f2:47:85:11:f1:05:79: 58:6d:7d:3d:08:a2:cc:64:74:8a:a9:8f:6c:b4:12: d3:8d:1e:64:cf:09:ea:90:2b:00:78:b7:d8:1d:63: ae:0d:05:5e:24:e4:21:a7:9f:ef:f1:e5:1c:53:ce: bb:c9:84:5f:d8:a5:9c:2b:ba:61:4e:f8:7c:8f:75: 56:28:ce:ba:95:a0:3c:bd:bf:71:13:66:51:81:6c: 3d:cb:40:f4:53:a5:b0:1d:4a:5f:c3:13:46:90:9d: 46:26:93:ea:9e:09:82:af:02:6c:b3:01:68:02:a6: 06:28:01:de:bf:35:22:33:3c:c3:c9:fe:d8:3b:72: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:5F:B7:ED:CB:A2:AF:A3:48:EE:5C:9A:B3:5C:9F:BC:DA:39:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:24:94:f1:ad:d6:0c:12:7e:f5:31:cc:76:99:8a:fb:b4:2e: e1:bf:63:8d:b5:5c:8a:81:c0:f0:51:46:4a:52:b8:28:80:a4: c7:51:1f:c9:11:87:f7:65:da:55:e0:8c:1c:e5:7d:f6:08:ed: 8d:ca:52:78:d4:de:35:65:be:60:48:0d:67:5a:98:06:40:4a: 04:bd:46:5c:83:a1:4d:37:52:a0:a1:8c:d7:79:26:0c:3f:20: 63:c3:00:50:12:11:74:be:c1:4d:11:ee:8d:50:24:db:ea:26: 7e:00:55:d1:56:58:af:af:c0:31:06:13:2d:97:ae:b1:07:1e: ba:c8:32:ab:3a:20:7e:08:3d:49:13:6a:bc:cb:5b:c6:0c:f9: 62:a8:4d:2d:18:ff:6b:88:f7:0e:1f:f9:4b:a6:ca:30:7a:3d: ff:75:f7:70:a9:b8:c2:75:ec:7e:a6:fd:c7:9e:47:f6:73:ef: 17:de:e9:ee:37:fa:4c:32:8f:15:de:aa:55:dd:da:08:c0:96: da:0f:c3:58:9b:90:1d:08:05:ce:c6:b2:1d:da:e4:c1:0a:8d: 14:d7:19:96:11:0d:cd:a3:0b:ea:f6:3b:a0:4d:bd:13:5e:07: d2:55:28:3e:31:1a:dc:81:f0:04:94:d6:b9:07:a4:61:55:ea: 23:af:99:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgOSpadC9dkMTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MzAxMTZhNzctNjA0NS00MjEzLWI3OTAtNWFjNjA1ZTY4ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkHD8EwnhH9fwgXnrs4Z0QHQ+5Gqcc931aCs 5RBxlEGx1sMJbK1fc12maa5w0680RDtZmq4PtRmsJHGql8vuo6c8wDEqD7b8boPO OJSvqILbz6/DUBdPApB5mPoH29glj6PZoXaNPspqos8cR0imaRVNKCP+PTCMUSWP Dc7vwPJHhRHxBXlYbX09CKLMZHSKqY9stBLTjR5kzwnqkCsAeLfYHWOuDQVeJOQh p5/v8eUcU867yYRf2KWcK7phTvh8j3VWKM66laA8vb9xE2ZRgWw9y0D0U6WwHUpf wxNGkJ1GJpPqngmCrwJsswFoAqYGKAHevzUiMzzDyf7YO3LXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6eX7fty6Kvo0juXJqzXJ+82jmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYzEzMmZjNjItZjlmOS0z OTlmLTkyYTktMDJhYTVkNGMwMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkklPGt1gwSfvUxzHaZivu0LuG/Y421XIqBwPBRRkpSuCiApMdRH8kR h/dl2lXgjBzlffYI7Y3KUnjU3jVlvmBIDWdamAZASgS9RlyDoU03UqChjNd5Jgw/ IGPDAFASEXS+wU0R7o1QJNvqJn4AVdFWWK+vwDEGEy2XrrEHHrrIMqs6IH4IPUkT arzLW8YM+WKoTS0Y/2uI9w4f+UumyjB6Pf9193CpuMJ17H6m/ceeR/Zz7xfe6e43 +kwyjxXeqlXd2gjAltoPw1ibkB0IBc7Gsh3a5MEKjRTXGZYRDc2jC+r2O6BNvRNe B9JVKD4xGtyB8ASU1rkHpGFV6iOvmek= -----END CERTIFICATE-----Generated at Mon Nov 3 14:45:59 2025 by rpki-client