$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa File: 13ae36b0-98f9-32ca-923c-5567474290df.roa (raw, json) Hash identifier: QrkFVxryZmVoLTASt1O4KsmaPFrQQC69jf2GLxWWAuA= Subject key identifier: F5:B9:3D:67:5C:15:67:C4:32:31:23:75:DC:29:AD:9A:70:63:CA:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA03545789C5FA31E90600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa Signing time: Thu 21 Aug 2025 10:26:37 +0000 ROA not before: Thu 21 Aug 2025 10:26:37 +0000 ROA not after: Wed 19 Nov 2025 11:26:37 +0000 asID: 31898 IP address blocks: 129.148.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:03:54:57:89:c5:fa:31:e9:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:26:37 2025 GMT Not After : Nov 19 11:26:37 2025 GMT Subject: CN=f3c5ac8f-40b6-47e1-8e1f-a79d344c65b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:c8:24:0f:ee:9d:0b:ab:9e:55:26:e2:5e: fd:e5:53:74:a3:a1:9e:1b:5c:0b:d1:ef:6e:a7:a4: 20:52:ca:10:bd:17:51:13:c2:43:68:43:94:a0:09: b9:74:85:3b:1b:dc:ce:8a:63:64:fc:1c:75:2d:c0: 1b:8d:96:a5:4c:dd:7a:14:75:5e:6f:62:07:f9:66: f4:31:5a:26:9a:af:83:c0:a4:28:a4:49:57:9d:4f: ee:62:05:a7:6f:62:bf:53:48:4c:42:66:df:82:65: 7b:80:b0:b0:dd:f9:71:f5:69:e7:12:66:0a:0a:00: 3c:a7:7a:a0:f2:94:53:d7:9b:0c:f0:01:e5:b7:a1: a2:cc:a5:e5:ba:38:2a:a6:d6:d7:e6:1c:01:18:b5: fb:49:ab:ce:4f:8c:5d:5f:62:e6:0d:1f:df:60:ba: 34:07:c3:31:53:c7:8b:6f:68:df:a9:8d:a7:2d:66: f2:f2:c8:84:c0:24:5b:6d:9f:6f:28:b6:9d:37:dd: 93:e8:d9:a4:e2:a4:f0:12:7a:11:b4:e3:4b:37:33: 73:df:f2:83:16:c0:99:16:97:42:a4:57:28:49:2a: 77:e5:0e:d2:c5:8b:48:fb:2f:88:4a:26:dd:33:d7: 10:d3:0a:cc:55:af:e3:86:b2:db:53:26:63:ea:6d: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B9:3D:67:5C:15:67:C4:32:31:23:75:DC:29:AD:9A:70:63:CA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:be:5d:ac:88:cf:4f:f2:ef:7e:74:62:c2:20:9c:fe:6b:b2: c7:90:28:0a:26:df:e8:c7:1a:97:3d:4b:83:33:53:45:3d:f5: 6a:d4:67:df:ac:c4:e1:b3:c0:16:06:37:49:33:2d:91:8b:9a: 30:4e:f6:53:e2:7a:ed:66:d5:00:d6:72:9d:6e:0b:35:4f:96: 6d:b5:29:dd:5c:68:b3:20:ec:79:62:1d:8d:c6:17:6d:46:a1: 56:c4:b1:66:e6:c8:1f:5e:d6:aa:00:f7:25:34:94:e1:53:14: 67:d4:72:2c:8a:f8:f5:05:51:0e:f5:59:46:cd:13:e6:ec:22: f7:6f:a6:9e:ed:de:3b:7c:52:d9:34:0e:0a:ec:8f:47:3c:82: 9b:c9:e6:dc:10:a4:d3:d8:e1:e6:ea:93:b0:13:1c:7d:e7:00: 31:6f:19:a1:5e:fd:da:30:9f:37:9b:0a:5f:96:b9:60:0c:86: 9e:93:f8:64:86:16:30:25:f5:fe:69:1d:cb:8e:2c:da:d4:e1: 54:12:a9:d0:a2:89:97:53:b3:81:69:d7:ae:3e:f2:93:6d:75: 97:ae:b9:3a:8a:eb:96:84:f6:39:68:c7:1e:fa:44:7b:4b:6b: d6:3f:ed:8a:eb:42:c6:ac:5d:5b:bf:21:60:d1:74:d8:6d:9f: 78:bd:7b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2gNUV4nF+jHpBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjYzN1oXDTI1MTExOTExMjYzN1owLzEtMCsGA1UEAxMk ZjNjNWFjOGYtNDBiNi00N2UxLThlMWYtYTc5ZDM0NGM2NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PrIJA/unQurnlUm4l795VN0o6GeG1wL0e9u p6QgUsoQvRdRE8JDaEOUoAm5dIU7G9zOimNk/Bx1LcAbjZalTN16FHVeb2IH+Wb0 MVommq+DwKQopElXnU/uYgWnb2K/U0hMQmbfgmV7gLCw3flx9WnnEmYKCgA8p3qg 8pRT15sM8AHlt6GizKXlujgqptbX5hwBGLX7SavOT4xdX2LmDR/fYLo0B8MxU8eL b2jfqY2nLWby8siEwCRbbZ9vKLadN92T6Nmk4qTwEnoRtONLNzNz3/KDFsCZFpdC pFcoSSp35Q7SxYtI+y+ISibdM9cQ0wrMVa/jhrLbUyZj6m0Z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW5PWdcFWfEMjEjddwprZpwY8r9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTNhZTM2YjAtOThmOS0z MmNhLTkyM2MtNTU2NzQ3NDI5MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG+XayIz0/y7350YsIgnP5rsseQKAom3+jHGpc9S4MzU0U99WrUZ9+s xOGzwBYGN0kzLZGLmjBO9lPieu1m1QDWcp1uCzVPlm21Kd1caLMg7HliHY3GF21G oVbEsWbmyB9e1qoA9yU0lOFTFGfUciyK+PUFUQ71WUbNE+bsIvdvpp7t3jt8Utk0 Dgrsj0c8gpvJ5twQpNPY4ebqk7ATHH3nADFvGaFe/downzebCl+WuWAMhp6T+GSG FjAl9f5pHcuOLNrU4VQSqdCiiZdTs4Fp164+8pNtdZeuuTqK65aE9jloxx76RHtL a9Y/7YrrQsasXVu/IWDRdNhtn3i9e/A= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:12 2025 by rpki-client