$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa File: f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa (raw, json) Hash identifier: Ofzd1GdbIwPt99pAyJZP4tyMl2sOOmLasK6rXFL/hJE= Subject key identifier: 63:BF:5E:7E:28:FF:03:27:48:38:60:A9:B4:AE:81:33:7E:AA:5A:CF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA7673708E32BE5BBA9E32DD Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa Signing time: Fri 08 Aug 2025 18:12:43 +0000 ROA not before: Fri 08 Aug 2025 18:12:43 +0000 ROA not after: Thu 06 Nov 2025 19:12:43 +0000 asID: 31898 IP address blocks: 129.146.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:73:70:8e:32:be:5b:ba:9e:32:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:43 2025 GMT Not After : Nov 6 19:12:43 2025 GMT Subject: CN=83603cd8-788e-446a-86d2-e3cc4fdf7549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:74:f8:59:07:e4:33:e9:cd:52:7e:04:0b: 8b:d9:88:8b:d4:d2:50:33:81:9d:2d:4e:6d:b5:ac: ea:87:24:7f:7e:49:15:d4:df:30:7d:be:3b:e0:90: 53:04:14:23:19:18:b2:26:9f:e0:f7:38:9d:6c:4f: bc:4e:27:10:46:90:23:46:53:97:25:94:44:2a:86: 50:2a:f5:8b:ec:b1:49:b9:12:18:1b:05:96:e9:9a: 6a:aa:f7:fe:ee:c3:58:86:2a:36:ad:67:7c:cd:92: 5e:65:21:6a:82:d6:60:2a:41:e0:a4:f6:a6:af:43: 3f:a0:ea:a6:6c:ad:cc:92:12:1d:50:7f:40:90:33: 36:a8:55:9c:8e:22:12:0c:fd:a5:10:e3:29:30:06: a5:76:89:89:d1:ae:e2:09:31:4f:0a:c7:3d:fb:88: 28:8c:6c:70:2d:03:ea:c7:eb:fa:37:07:29:4e:90: 26:19:dd:bf:f3:7b:71:9c:b0:8a:3c:84:f2:63:ed: e2:ef:bb:8c:63:0a:9d:81:de:4f:29:e1:35:80:0c: 77:d1:ba:c7:6f:2f:e4:e0:96:9e:3c:ee:a3:61:ab: 63:26:3e:81:4b:ba:52:6f:ab:77:71:64:f0:72:f5: d1:9e:2a:85:6d:53:77:4a:19:fa:fa:9f:eb:c3:b7: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:5E:7E:28:FF:03:27:48:38:60:A9:B4:AE:81:33:7E:AA:5A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42d349f-6ee4-36f4-ac52-cda42fe291eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:da:66:14:9c:13:aa:43:ea:76:49:13:7d:ed:3d:09:a4:8c: 0e:50:cc:f8:83:33:2f:fa:39:8f:ec:e3:85:55:9e:ba:70:18: b8:83:bc:b7:ee:0a:72:c4:33:f8:b4:48:ee:da:a8:fe:2f:25: 90:a6:2d:ce:37:74:29:7f:75:1f:6f:5b:62:9c:6f:77:54:38: b6:83:ff:33:e8:66:21:23:31:76:9a:5c:08:d5:93:50:55:7e: d1:43:42:94:18:16:95:90:6c:7e:95:5e:85:e6:ed:82:ec:b1: f2:d1:8b:c8:c1:20:3e:76:d1:cd:f9:48:1c:0e:0e:62:f2:fa: 54:e6:23:7f:9e:35:86:f5:a7:bb:ae:3a:f0:9f:b0:cf:bb:9c: 21:f1:8f:5e:74:c0:c8:94:61:75:01:4b:73:73:39:c3:2b:5e: d2:6f:a1:1f:09:14:14:72:38:68:91:75:cc:26:30:b9:63:0e: ff:67:3a:fc:95:70:4e:39:d0:55:23:2b:2f:74:63:c0:25:31: 5d:44:c0:0c:2f:13:8c:ee:4a:e4:25:c8:80:84:19:2c:20:d2: f9:a4:6c:1c:b7:d3:00:b1:ac:a6:16:52:6c:05:e5:84:94:4e: e8:93:1f:23:41:ef:35:d6:bb:6d:ce:37:39:66:ab:a2:60:ac: e7:d8:f4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdnNwjjK+W7qeMt0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTI0M1oXDTI1MTEwNjE5MTI0M1owLzEtMCsGA1UEAxMk ODM2MDNjZDgtNzg4ZS00NDZhLTg2ZDItZTNjYzRmZGY3NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHF0+FkH5DPpzVJ+BAuL2YiL1NJQM4GdLU5t tazqhyR/fkkV1N8wfb474JBTBBQjGRiyJp/g9zidbE+8TicQRpAjRlOXJZREKoZQ KvWL7LFJuRIYGwWW6Zpqqvf+7sNYhio2rWd8zZJeZSFqgtZgKkHgpPamr0M/oOqm bK3MkhIdUH9AkDM2qFWcjiISDP2lEOMpMAaldomJ0a7iCTFPCsc9+4gojGxwLQPq x+v6NwcpTpAmGd2/83txnLCKPITyY+3i77uMYwqdgd5PKeE1gAx30brHby/k4Jae PO6jYatjJj6BS7pSb6t3cWTwcvXRniqFbVN3Shn6+p/rw7dl0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO/Xn4o/wMnSDhgqbSugTN+qlrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyZDM0OWYtNmVlNC0z NmY0LWFjNTItY2RhNDJmZTI5MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbaZhScE6pD6nZJE33tPQmkjA5QzPiDMy/6OY/s44VVnrpwGLiDvLfu CnLEM/i0SO7aqP4vJZCmLc43dCl/dR9vW2Kcb3dUOLaD/zPoZiEjMXaaXAjVk1BV ftFDQpQYFpWQbH6VXoXm7YLssfLRi8jBID520c35SBwODmLy+lTmI3+eNYb1p7uu OvCfsM+7nCHxj150wMiUYXUBS3NzOcMrXtJvoR8JFBRyOGiRdcwmMLljDv9nOvyV cE450FUjKy90Y8AlMV1EwAwvE4zuSuQlyICEGSwg0vmkbBy30wCxrKYWUmwF5YSU TuiTHyNB7zXWu23ONzlmq6JgrOfY9Ac= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client