$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa File: 26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa (raw, json) Hash identifier: VPxO7KcR7JzHMuGn4gnXUeyT5RCzIoQPYXO/wg4zFj4= Subject key identifier: 1C:98:CD:54:C8:D4:55:14:50:32:36:DB:30:A1:17:81:D0:B3:FB:82 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB64A0715FE0D33E4BDCEB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa Signing time: Wed 20 Aug 2025 13:18:28 +0000 ROA not before: Wed 20 Aug 2025 13:18:28 +0000 ROA not after: Tue 18 Nov 2025 14:18:28 +0000 asID: 31898 IP address blocks: 129.149.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:64:a0:71:5f:e0:d3:3e:4b:dc:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:18:28 2025 GMT Not After : Nov 18 14:18:28 2025 GMT Subject: CN=438d9a25-69fd-4b36-bd82-ed830ae0c3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:c0:00:cc:dc:72:25:3f:8c:1f:3d:57:5c: f2:ce:02:a5:b4:10:82:5a:d6:0e:30:4c:d6:e6:83: 06:e1:93:05:77:08:8b:22:ff:3f:7f:f8:0d:ea:13: f4:12:15:4d:4d:14:ec:0b:21:74:c3:c6:3f:cb:f8: c0:2d:89:72:f2:ab:58:f5:3b:b6:71:50:9d:53:e9: 93:97:2c:1a:46:54:f9:35:ba:7c:3a:e8:93:62:24: a8:71:7b:63:9e:50:86:ad:04:b9:4c:a5:9a:62:fb: c0:c3:ae:70:33:db:22:32:fd:2c:fb:97:f9:b3:de: b8:30:72:85:c0:4e:e7:60:cb:d8:ec:6e:86:dc:6e: 27:3f:b6:1c:cd:d3:7c:d8:eb:f5:19:c6:00:eb:78: 98:64:c2:65:57:71:d3:ef:b3:fb:3c:15:c9:97:71: 44:80:36:05:a5:2d:01:17:0f:f8:41:56:b8:cf:d2: ee:e4:99:c7:9f:1b:72:53:27:77:4c:8c:cf:c1:73: 3f:ee:2d:c8:a6:99:7c:6e:ae:1f:b8:c4:30:ce:f6: f9:83:79:3c:7a:0e:2f:e4:e7:d0:74:70:2c:f7:8b: 8f:e9:a3:6d:c6:2d:f2:aa:97:6f:e3:17:53:a1:09: 6c:da:94:82:20:70:d2:aa:73:a6:e6:77:65:89:0f: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:98:CD:54:C8:D4:55:14:50:32:36:DB:30:A1:17:81:D0:B3:FB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26529eb0-1c72-36cb-bb4a-3d8d168b37b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fa:18:4b:2e:2c:e7:51:96:71:e6:48:94:ee:33:96:df:da: 4f:09:2f:4b:9c:97:e5:a0:d5:1d:cb:db:1b:ea:86:60:63:89: 98:b2:b0:e4:5c:61:e5:f3:92:a1:66:b8:6d:f4:1b:83:1d:39: ce:54:5d:34:d8:aa:65:21:c3:ff:39:a5:aa:d1:73:42:87:1b: 8c:22:2c:fe:f8:4c:b9:3f:1d:81:ee:12:d6:7e:cb:ed:b8:58: 3e:6b:51:f1:90:91:99:da:10:d7:46:ab:c3:3c:7d:d7:de:6f: b3:5d:30:e7:ed:d7:3a:e2:a2:4a:89:a4:22:eb:03:6e:c4:2f: 90:ce:63:ea:0b:c2:55:0a:67:67:29:8d:c1:b0:b9:06:2a:ff: 55:1c:45:d5:b2:25:cf:64:12:a2:7a:97:3e:3f:07:ad:a5:9d: 3b:26:57:95:d5:42:4c:da:37:3e:b9:d6:01:80:b4:46:ad:0a: 2b:61:b8:5c:37:54:1c:8e:eb:00:2c:ea:c7:09:72:86:3c:f5: 6b:f1:43:03:33:65:fb:b7:f7:da:1b:61:9d:62:78:63:66:dd: ea:f8:0b:d4:81:e6:a3:d3:20:69:7b:63:be:f0:79:35:49:96: f0:dd:81:4f:3f:da:78:e5:96:43:f9:f5:a2:2c:8f:89:e2:7e: e0:22:fb:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZKBxX+DTPkvc6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTgyOFoXDTI1MTExODE0MTgyOFowLzEtMCsGA1UEAxMk NDM4ZDlhMjUtNjlmZC00YjM2LWJkODItZWQ4MzBhZTBjM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmarAAMzcciU/jB89V1zyzgKltBCCWtYOMEzW 5oMG4ZMFdwiLIv8/f/gN6hP0EhVNTRTsCyF0w8Y/y/jALYly8qtY9Tu2cVCdU+mT lywaRlT5Nbp8OuiTYiSocXtjnlCGrQS5TKWaYvvAw65wM9siMv0s+5f5s964MHKF wE7nYMvY7G6G3G4nP7YczdN82Ov1GcYA63iYZMJlV3HT77P7PBXJl3FEgDYFpS0B Fw/4QVa4z9Lu5JnHnxtyUyd3TIzPwXM/7i3Ippl8bq4fuMQwzvb5g3k8eg4v5OfQ dHAs94uP6aNtxi3yqpdv4xdToQls2pSCIHDSqnOm5ndliQ+zGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByYzVTI1FUUUDI22zChF4HQs/uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjY1MjllYjAtMWM3Mi0z NmNiLWJiNGEtM2Q4ZDE2OGIzN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/6GEsuLOdRlnHmSJTuM5bf2k8JL0ucl+Wg1R3L2xvqhmBjiZiysORc YeXzkqFmuG30G4MdOc5UXTTYqmUhw/85parRc0KHG4wiLP74TLk/HYHuEtZ+y+24 WD5rUfGQkZnaENdGq8M8fdfeb7NdMOft1zriokqJpCLrA27EL5DOY+oLwlUKZ2cp jcGwuQYq/1UcRdWyJc9kEqJ6lz4/B62lnTsmV5XVQkzaNz651gGAtEatCithuFw3 VByO6wAs6scJcoY89WvxQwMzZfu399obYZ1ieGNm3er4C9SB5qPTIGl7Y77weTVJ lvDdgU8/2njllkP59aIsj4nifuAi+2s= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:09 2025 by rpki-client