$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa File: f0790413-eb94-394f-baab-4ac4a546e2d9.roa (raw, json) Hash identifier: YS+1ZlZGRH8goPEFcgRymt2dGj92z6HQZWcHZTJgnP8= Subject key identifier: 86:55:72:90:9C:D4:98:33:7A:1D:65:63:E3:D9:F9:EE:69:5D:DF:30 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013ADBA0DDAA9AC8A827BD0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa Signing time: Fri 22 Aug 2025 05:34:25 +0000 ROA not before: Fri 22 Aug 2025 05:34:25 +0000 ROA not after: Thu 20 Nov 2025 06:34:25 +0000 asID: 31898 IP address blocks: 129.149.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:ad:ba:0d:da:a9:ac:8a:82:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:34:25 2025 GMT Not After : Nov 20 06:34:25 2025 GMT Subject: CN=fb062a74-0ec1-474e-bac5-035e643d66af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:46:f4:ba:84:a9:90:30:b6:e6:bd:d1:f5: 4f:0f:57:f5:69:08:39:e9:41:ad:f4:97:bd:04:ff: a6:b1:01:30:eb:a5:7d:29:b7:33:7b:9a:a9:0c:e1: 73:f2:5e:33:aa:7c:d8:05:f8:59:47:2a:7a:b7:4a: ef:9a:a0:43:2c:f3:4b:96:1f:3d:96:8f:e9:a3:10: c6:ad:89:b9:5c:40:41:9f:29:a1:16:b7:fb:8d:af: a0:1c:ff:1e:ca:18:db:7f:73:89:ad:e9:d5:13:92: 76:4f:b2:f7:f6:45:ef:23:38:4c:ed:72:b8:4e:ac: ed:39:c0:51:a9:2e:2f:3e:5b:a4:cf:c2:60:92:59: 88:67:ab:c6:ff:47:da:87:26:59:ac:82:06:41:0c: e2:11:9e:0d:fc:95:8c:29:b0:c2:e2:46:69:58:71: 13:ae:3e:b8:1a:21:b8:e1:95:7e:64:55:4b:44:9e: e6:bc:c7:29:67:33:44:2e:22:4e:91:b3:08:4a:e9: 67:9f:96:10:2d:c4:d2:5d:35:49:f0:6b:c7:78:9d: 1c:ef:b5:a4:42:b6:2f:d4:25:ab:b7:e7:20:d9:d3: c5:1b:8a:96:dd:12:f2:90:5f:a0:29:8d:e9:f4:6e: 40:77:ba:29:f4:32:1c:74:ca:71:94:83:b2:eb:0f: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:72:90:9C:D4:98:33:7A:1D:65:63:E3:D9:F9:EE:69:5D:DF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0790413-eb94-394f-baab-4ac4a546e2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4e:75:24:e7:9e:60:5f:c1:c2:f8:42:eb:d9:7e:49:a1:a2: 48:c9:75:d9:30:b7:64:c5:24:5b:44:fa:3f:31:4d:30:e6:8b: 80:19:24:00:ed:b1:34:54:4d:e5:66:24:96:7e:f9:2c:36:ca: 67:a6:26:51:8a:4e:52:24:0d:3a:2b:2a:1c:59:81:b8:f8:74: 9d:83:3c:67:82:94:9d:64:7a:34:27:0e:3b:83:60:2a:73:fd: 42:5b:2f:d5:7a:f2:de:fe:3f:28:66:27:68:d8:2f:33:75:90: 41:49:d6:ee:28:8e:fe:0b:ee:ec:49:22:b4:3b:fa:e9:f4:e8: 48:60:55:19:2c:82:0e:ab:08:e3:08:39:24:01:22:ac:e9:b1: 28:82:aa:37:3c:67:1a:46:84:09:d8:4a:6e:89:42:71:88:91: bf:09:56:55:f3:7c:9a:75:3e:92:ea:bf:b5:bf:6b:4b:50:88: fd:2f:1e:08:1e:a0:93:d8:46:71:e0:87:4a:84:a3:3b:6b:3a: 61:79:23:2e:7f:f4:ec:ee:4a:a3:89:a1:76:dd:27:1e:5f:09: 2c:65:cd:6e:0b:96:6c:ff:03:63:9b:1a:72:52:ae:f0:ed:c4: ba:34:95:03:fa:b0:be:e4:e0:cb:72:ce:63:69:84:d6:c5:97: be:43:1d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE626DdqprIqCe9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzQyNVoXDTI1MTEyMDA2MzQyNVowLzEtMCsGA1UEAxMk ZmIwNjJhNzQtMGVjMS00NzRlLWJhYzUtMDM1ZTY0M2Q2NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt1G9LqEqZAwtua90fVPD1f1aQg56UGt9Je9 BP+msQEw66V9Kbcze5qpDOFz8l4zqnzYBfhZRyp6t0rvmqBDLPNLlh89lo/poxDG rYm5XEBBnymhFrf7ja+gHP8eyhjbf3OJrenVE5J2T7L39kXvIzhM7XK4TqztOcBR qS4vPlukz8JgklmIZ6vG/0fahyZZrIIGQQziEZ4N/JWMKbDC4kZpWHETrj64GiG4 4ZV+ZFVLRJ7mvMcpZzNELiJOkbMISulnn5YQLcTSXTVJ8GvHeJ0c77WkQrYv1CWr t+cg2dPFG4qW3RLykF+gKY3p9G5Ad7op9DIcdMpxlIOy6w8cIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZVcpCc1Jgzeh1lY+PZ+e5pXd8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA3OTA0MTMtZWI5NC0z OTRmLWJhYWItNGFjNGE1NDZlMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdOdSTnnmBfwcL4QuvZfkmhokjJddkwt2TFJFtE+j8xTTDmi4AZJADt sTRUTeVmJJZ++Sw2ymemJlGKTlIkDTorKhxZgbj4dJ2DPGeClJ1kejQnDjuDYCpz /UJbL9V68t7+PyhmJ2jYLzN1kEFJ1u4ojv4L7uxJIrQ7+un06EhgVRksgg6rCOMI OSQBIqzpsSiCqjc8ZxpGhAnYSm6JQnGIkb8JVlXzfJp1PpLqv7W/a0tQiP0vHgge oJPYRnHgh0qEoztrOmF5Iy5/9OzuSqOJoXbdJx5fCSxlzW4Llmz/A2ObGnJSrvDt xLo0lQP6sL7k4MtyzmNphNbFl75DHSs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:46 2025 by rpki-client