$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa File: c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa (raw, json) Hash identifier: b1ynX4rwkOrAIq9w986veHdH19ZWrVzimUIngvtBwSs= Subject key identifier: 6B:EC:71:A5:BB:E9:ED:C4:25:11:A1:E7:1F:F0:8A:3A:16:03:5D:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE59593A0453D271A2BEC1E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa Signing time: Fri 15 Aug 2025 21:10:15 +0000 ROA not before: Fri 15 Aug 2025 21:10:15 +0000 ROA not after: Thu 13 Nov 2025 22:10:15 +0000 asID: 31898 IP address blocks: 129.159.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:59:3a:04:53:d2:71:a2:be:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:15 2025 GMT Not After : Nov 13 22:10:15 2025 GMT Subject: CN=d1192296-892d-4e93-8f60-bed98ee902d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:b9:67:3a:2b:60:6a:23:63:ae:3e:72:9d: e0:44:e9:47:a8:08:48:9a:b4:73:a4:20:1b:80:79: 0d:28:41:ba:16:bd:79:38:54:b0:9d:97:91:c5:66: 72:17:28:e6:55:ee:c6:48:63:a7:fe:28:4a:e5:d1: a9:14:36:2e:6e:fc:8d:fa:7b:ac:ac:21:ab:fa:2b: 0b:fa:57:94:7f:22:b1:3e:eb:ca:fa:89:0a:30:05: b5:b7:5f:22:43:96:a3:38:30:6c:71:b1:55:3b:fe: 96:b6:7f:cb:ea:5f:39:08:84:f8:d2:6a:7a:48:c1: 3f:7f:7d:b9:c2:97:82:26:4a:d9:06:cb:9f:88:7c: 28:f9:d5:25:9e:2a:43:7f:da:57:21:db:ec:98:29: 6b:02:83:81:e7:5b:97:fb:ee:c5:9b:20:41:4b:46: cb:c5:b3:ba:c4:0c:cd:49:02:5a:e2:89:18:90:37: de:49:1b:b4:d4:63:b7:be:88:5b:f8:dc:ae:55:6a: f3:e9:31:f5:06:a4:33:f0:7d:58:5c:df:ad:d3:30: 2a:a2:ba:f6:42:d0:dd:ce:2e:72:81:8d:e5:42:90: ad:82:7c:f5:51:8e:0e:dc:69:40:63:81:87:67:95: aa:5f:62:57:98:6e:8f:f2:54:6c:dd:32:57:f7:f6: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:71:A5:BB:E9:ED:C4:25:11:A1:E7:1F:F0:8A:3A:16:03:5D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:41:ca:39:51:88:42:77:3b:91:38:d9:00:0d:fc:65:0e:8d: 98:6f:e9:ef:dd:6f:10:40:6b:bf:cd:05:ad:ef:6b:28:a2:49: e3:96:80:3c:ed:c7:ae:51:c4:ed:3c:5c:47:ef:cd:3c:98:2d: cb:6b:16:f2:c1:65:c9:2b:f4:1b:df:21:61:8b:11:55:fa:44: ea:a8:de:a5:a5:40:a3:bd:10:d5:20:6e:45:cf:0b:7c:2a:ba: da:4a:cd:bd:5d:2a:28:37:0c:32:65:07:d4:4f:b5:26:3b:dd: a0:07:e6:ba:f3:95:a3:b5:53:5b:84:cb:5d:58:98:06:eb:06: 9b:41:6d:65:45:e2:de:68:00:2d:9d:cc:1a:92:de:ef:25:c7: 6f:53:79:0e:43:3b:e8:54:e5:78:e2:e4:08:75:55:1c:68:1d: 25:9e:0b:c5:ba:a1:05:ca:aa:eb:05:52:1f:69:64:2e:45:7d: e5:85:89:e2:ad:6a:4b:0d:9c:bb:a0:d1:f0:55:39:c4:62:ff: ad:1c:22:99:3d:1f:11:5b:ba:12:b4:26:c4:cb:b2:fd:91:04: bf:be:4e:77:67:6f:4b:ad:4e:3b:f5:f4:9a:34:3e:f5:b9:d9: 18:2c:62:82:e3:30:a7:79:df:c6:1e:e9:9f:97:ee:40:1a:13: b7:8e:c4:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWVk6BFPScaK+weAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAxNVoXDTI1MTExMzIyMTAxNVowLzEtMCsGA1UEAxMk ZDExOTIyOTYtODkyZC00ZTkzLThmNjAtYmVkOThlZTkwMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymm5ZzorYGojY64+cp3gROlHqAhImrRzpCAb gHkNKEG6Fr15OFSwnZeRxWZyFyjmVe7GSGOn/ihK5dGpFDYubvyN+nusrCGr+isL +leUfyKxPuvK+okKMAW1t18iQ5ajODBscbFVO/6Wtn/L6l85CIT40mp6SME/f325 wpeCJkrZBsufiHwo+dUlnipDf9pXIdvsmClrAoOB51uX++7FmyBBS0bLxbO6xAzN SQJa4okYkDfeSRu01GO3vohb+NyuVWrz6TH1BqQz8H1YXN+t0zAqorr2QtDdzi5y gY3lQpCtgnz1UY4O3GlAY4GHZ5WqX2JXmG6P8lRs3TJX9/YQdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvscaW76e3EJRGh5x/wijoWA12TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzE0ODkzOGMtOWZkMi0z YmY0LTk4MjAtYzUxN2Y4Y2ZkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9ByjlRiEJ3O5E42QAN/GUOjZhv6e/dbxBAa7/NBa3vayiiSeOWgDzt x65RxO08XEfvzTyYLctrFvLBZckr9BvfIWGLEVX6ROqo3qWlQKO9ENUgbkXPC3wq utpKzb1dKig3DDJlB9RPtSY73aAH5rrzlaO1U1uEy11YmAbrBptBbWVF4t5oAC2d zBqS3u8lx29TeQ5DO+hU5Xji5Ah1VRxoHSWeC8W6oQXKqusFUh9pZC5FfeWFieKt aksNnLug0fBVOcRi/60cIpk9HxFbuhK0JsTLsv2RBL++Tndnb0utTjv19Jo0PvW5 2RgsYoLjMKd538Ye6Z+X7kAaE7eOxGs= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:54 2025 by rpki-client