$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa File: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (raw, json) Hash identifier: Qbqyvf5xqr2qPgRQJDJCGjvOMMQr3AUfhX6E4cMt3qQ= Subject key identifier: FD:F0:29:B5:2C:45:85:B7:B2:6A:E8:5A:2E:F4:60:A6:76:F2:87:B6 Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584B1C36BF473DD58DA77DE48280 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 400692 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:bf:47:3d:d5:8d:a7:7d:e4:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cd5a3da2-a15a-4b8a-bd14-5b06bc2d3687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:ad:6f:a9:6d:3e:f4:3b:99:55:a8:4c:38: a0:8e:61:0e:9b:ba:0d:09:40:27:f3:59:b1:00:78: fc:24:45:f7:14:ac:45:44:c1:a9:4f:b4:a3:05:b6: 5f:29:27:32:61:7d:95:b7:f3:2d:06:c9:10:f7:ad: 27:27:d1:16:0b:9e:1a:2c:20:4e:95:a6:3a:4f:88: ef:f6:4e:25:a8:59:20:39:00:c8:43:5b:dd:53:5a: c8:52:d6:51:7f:d9:72:70:6d:1a:db:7d:0d:da:f5: 0a:3c:5d:89:24:cc:2a:89:d9:c9:3c:19:83:7d:86: b3:fb:95:3c:b7:27:8a:7f:70:cf:a4:0c:5c:1a:58: 95:8b:9b:36:60:55:22:c7:ca:9f:83:ef:ab:8b:f8: ee:b1:23:df:51:02:a7:1d:99:e3:d3:3b:bc:17:29: ee:71:1a:4b:85:88:34:b4:18:3e:c8:76:ec:d3:92: bc:2c:22:9a:e2:e7:7c:e6:78:57:c4:f4:9c:cf:a4: b1:b0:90:30:b6:0b:ec:ed:69:bb:70:c2:93:69:eb: ee:80:fc:93:a9:96:e3:51:d1:a6:a5:40:4e:3c:56: a7:70:49:6c:0e:2d:4a:75:5f:58:9d:c5:32:4a:93: 53:91:d8:c1:cc:2a:55:b4:f7:9b:22:5c:28:a5:b2: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F0:29:B5:2C:45:85:B7:B2:6A:E8:5A:2E:F4:60:A6:76:F2:87:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/079ec49d-80c7-36fb-a80a-15036883ce48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4c:d4:d9:01:09:29:ba:e1:71:63:3e:3a:32:23:1a:92:14: 35:58:67:2d:4b:e0:ea:e9:0c:e5:d3:1a:4b:b2:12:e1:23:71: 10:55:83:45:10:6c:aa:58:d0:96:7c:cc:c5:00:34:14:d8:23: e5:95:bd:5f:6e:d3:75:e5:44:07:6f:9c:a1:96:06:50:a0:73: e5:4f:ba:51:96:14:3e:0b:be:7d:d3:03:37:a1:49:b3:ce:11: bb:06:38:91:a6:85:66:f0:84:51:50:a7:06:1a:92:b2:2c:25: e3:58:81:e2:09:01:c2:39:d0:18:6c:92:86:a2:91:95:34:e0: e8:76:e7:93:fe:0e:0d:5b:39:0c:f1:54:05:ca:2d:c7:a9:91: f0:a2:b4:6c:db:30:76:f2:de:3b:c8:16:80:c9:d3:fc:1c:9a: bf:b6:c3:49:42:51:d1:03:13:fe:d8:6e:a0:05:30:c4:bc:a1: b4:83:e2:9b:6f:97:da:be:9d:29:6c:d5:a7:f8:65:4d:b2:7b: f2:6f:de:12:99:b3:50:f9:28:05:39:4d:86:1a:89:94:ef:fb: 26:b8:ea:d2:00:10:2d:98:cb:0b:ef:39:31:67:28:9f:25:b9: df:aa:35:b2:f7:5c:f5:73:38:89:20:1f:e9:9e:ab:b2:b0:80: f6:99:b5:40 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEscNr9HPdWNp33kgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q1YTNkYTItYTE1YS00YjhhLWJkMTQtNWIwNmJjMmQzNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOutb6ltPvQ7mVWoTDigjmEOm7oNCUAn81mx AHj8JEX3FKxFRMGpT7SjBbZfKScyYX2Vt/MtBskQ960nJ9EWC54aLCBOlaY6T4jv 9k4lqFkgOQDIQ1vdU1rIUtZRf9lycG0a230N2vUKPF2JJMwqidnJPBmDfYaz+5U8 tyeKf3DPpAxcGliVi5s2YFUix8qfg++ri/jusSPfUQKnHZnj0zu8FynucRpLhYg0 tBg+yHbs05K8LCKa4ud85nhXxPScz6SxsJAwtgvs7Wm7cMKTaevugPyTqZbjUdGm pUBOPFancElsDi1KdV9YncUySpNTkdjBzCpVtPebIlwopbLFhQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP3wKbUsRYW3smroWi70YKZ28oe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvMDc5ZWM0OWQtODBjNy0z NmZiLWE4MGEtMTUwMzY4ODNjZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUkzU2QEJKbrhcWM+OjIjGpIUNVhnLUvg6ukM5dMaS7IS4SNxEFWDRRBs qljQlnzMxQA0FNgj5ZW9X27TdeVEB2+coZYGUKBz5U+6UZYUPgu+fdMDN6FJs84R uwY4kaaFZvCEUVCnBhqSsiwl41iB4gkBwjnQGGyShqKRlTTg6Hbnk/4ODVs5DPFU Bcotx6mR8KK0bNswdvLeO8gWgMnT/Byav7bDSUJR0QMT/thuoAUwxLyhtIPim2+X 2r6dKWzVp/hlTbJ78m/eEpmzUPkoBTlNhhqJlO/7Jrjq0gAQLZjLC+85MWconyW5 36o1svdc9XM4iSAf6Z6rsrCA9pm1QA== -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:09 2025 by rpki-client