$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa File: 458843d2-129b-355c-b517-0c8fef96f905.roa (raw, json) Hash identifier: mzhd33hWIDsp7+Y/3P1c0JrGnWOYYfvR4/sEacSFjrQ= Subject key identifier: A0:B8:8B:6B:EE:62:72:08:44:F8:1F:8A:AF:A4:83:97:03:6D:E7:F1 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584B44B1B66391548F4B294C8300 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 17015 IP address blocks: 129.19.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b6:63:91:54:8f:4b:29:4c:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=363b3e00-c6b5-4a24-ab4c-34694ae37f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:b3:f1:40:99:bc:b9:fd:f7:07:88:e8:bf: a4:1c:e3:c6:d5:52:e5:73:a2:4e:db:b9:aa:bf:1b: 0f:e1:b1:9e:47:69:86:a1:35:20:ae:a9:63:86:ed: 0e:57:90:82:be:10:18:fe:7f:b8:1b:6c:63:31:95: 42:b7:34:cf:8f:d2:39:18:7f:e6:64:eb:24:27:86: 3f:d7:40:41:8b:5d:88:2e:38:54:4b:ae:8d:95:7b: 45:bf:80:2d:2f:e9:52:1a:87:8f:2c:8c:0b:81:cf: e6:26:b8:a7:50:a8:84:72:28:9b:9e:4c:52:02:8c: 97:03:65:7d:e7:f2:6c:68:06:87:c9:b4:78:22:79: bf:fa:d5:af:b6:bd:ec:1d:71:fa:0d:5e:61:31:39: 27:60:53:11:78:4c:9e:f5:7b:29:9c:5c:dc:ca:7b: 26:9f:9d:f3:fc:01:01:56:21:7c:ca:c6:e3:09:15: 85:89:44:56:99:14:86:90:62:b7:6a:bb:29:ba:e6: 2d:dd:31:a1:49:af:44:6a:82:38:90:2f:63:c2:cb: 08:f6:26:ff:1c:2d:71:c4:7e:a0:ac:9a:be:11:ae: fc:15:d1:da:ee:52:63:46:04:41:22:0f:ee:c9:51: 56:96:c8:af:60:85:bb:f9:95:c2:6a:ac:e5:cc:33: bc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:8B:6B:EE:62:72:08:44:F8:1F:8A:AF:A4:83:97:03:6D:E7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f2:fa:b8:c2:55:f7:11:56:8a:f8:7d:e2:d4:0c:34:87:03: b6:1c:e9:8a:a6:4d:05:9c:9b:0a:8c:19:7f:09:15:86:eb:94: 0a:81:a7:17:1b:1b:f4:73:fd:9d:00:70:6e:f0:de:c1:b8:17: 6a:95:cf:d3:1f:e3:2b:0b:1c:c9:a6:e6:86:73:99:01:c3:6c: bf:11:52:c6:3f:78:f0:49:84:6c:50:03:58:61:fd:11:8a:ac: 7f:cc:e7:f9:2a:85:9d:3b:41:86:2b:67:cb:e2:a4:e3:97:b1: 0e:19:13:30:4b:53:be:81:52:52:9d:84:88:25:12:78:25:b8: c9:0d:b2:3d:14:9b:5c:e6:11:53:db:1a:24:49:22:39:a5:98: fc:2f:1a:4b:27:7f:10:85:ba:c2:32:93:a8:40:bb:aa:80:7c: 0a:08:0f:d2:56:5c:cc:d2:58:3a:18:75:80:14:aa:7d:51:69: 21:32:9a:53:bd:76:e7:e9:d2:9d:fb:03:72:76:52:04:cf:12: b6:88:5c:f5:40:b8:3b:e9:bf:5e:95:42:55:02:38:62:84:45: 75:fd:52:17:12:ea:84:8c:90:27:cf:9f:e6:39:b8:8e:ca:da: 12:22:c7:c5:bb:54:ca:cd:e5:8a:f0:89:04:ad:47:83:16:c9: d5:29:0d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbZjkVSPSylMgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MzYzYjNlMDAtYzZiNS00YTI0LWFiNGMtMzQ2OTRhZTM3ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghiz8UCZvLn99weI6L+kHOPG1VLlc6JO27mq vxsP4bGeR2mGoTUgrqljhu0OV5CCvhAY/n+4G2xjMZVCtzTPj9I5GH/mZOskJ4Y/ 10BBi12ILjhUS66NlXtFv4AtL+lSGoePLIwLgc/mJrinUKiEciibnkxSAoyXA2V9 5/JsaAaHybR4Inm/+tWvtr3sHXH6DV5hMTknYFMReEye9XspnFzcynsmn53z/AEB ViF8ysbjCRWFiURWmRSGkGK3arspuuYt3TGhSa9EaoI4kC9jwssI9ib/HC1xxH6g rJq+Ea78FdHa7lJjRgRBIg/uyVFWlsivYIW7+ZXCaqzlzDO8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC4i2vuYnIIRPgfiq+kg5cDbefxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNDU4ODQzZDItMTI5Yi0z NTVjLWI1MTctMGM4ZmVmOTZmOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgRORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/y+rjCVfcRVor4feLUDDSHA7Yc6YqmTQWcmwqMGX8JFYbrlAqBpxcb G/Rz/Z0AcG7w3sG4F2qVz9Mf4ysLHMmm5oZzmQHDbL8RUsY/ePBJhGxQA1hh/RGK rH/M5/kqhZ07QYYrZ8vipOOXsQ4ZEzBLU76BUlKdhIglEngluMkNsj0Um1zmEVPb GiRJIjmlmPwvGksnfxCFusIyk6hAu6qAfAoID9JWXMzSWDoYdYAUqn1RaSEymlO9 dufp0p37A3J2UgTPEraIXPVAuDvpv16VQlUCOGKERXX9UhcS6oSMkCfPn+Y5uI7K 2hIix8W7VMrN5YrwiQStR4MWydUpDTs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:24 2025 by rpki-client