$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa File: 025af09a-5e68-3038-a0f1-016ded11e627.roa (raw, json) Hash identifier: YpPTaBZmQaJLgspGy54Bs4dtQbGXNiFVYpgchRgt/Fc= Subject key identifier: B6:9C:39:4E:79:41:42:E6:66:E4:C1:2D:7B:DD:EA:DB:7B:83:37:14 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B268551F199DC879FD3A6D080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa Signing time: Wed 10 Sep 2025 17:37:02 +0000 ROA not before: Wed 10 Sep 2025 17:37:02 +0000 ROA not after: Tue 09 Dec 2025 18:37:02 +0000 asID: 54253 IP address blocks: 134.185.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:51:f1:99:dc:87:9f:d3:a6:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:02 2025 GMT Not After : Dec 9 18:37:02 2025 GMT Subject: CN=4dc4e0ea-bdb9-4685-82b0-37f220835a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:8d:1b:f3:32:16:07:18:d2:1a:89:dd:d0: 5d:28:6c:3e:ac:0a:49:ba:d9:6c:9d:4a:ca:c7:7d: 52:d4:5b:0e:73:ef:da:19:22:d9:86:c4:fb:68:e6: b3:3f:d5:6f:19:09:50:c4:38:79:00:4b:84:3b:fe: b1:a2:8c:23:d5:eb:aa:3a:13:c1:c4:89:7d:e4:75: 44:eb:78:58:1a:35:39:95:fb:27:02:ad:b2:88:b3: 41:f3:d7:2d:f5:a9:1e:ff:57:42:a5:d5:d2:22:e5: 78:86:b8:2c:0b:63:67:c2:63:a5:2a:7d:4a:6e:07: b7:c5:34:0c:d5:f6:22:82:0a:0e:84:74:69:14:ed: 3b:54:b3:09:78:d9:0e:d1:94:07:c8:35:b4:a7:ff: 20:38:a1:b0:4e:20:ed:d3:e3:08:cf:3a:47:b2:9e: 86:7d:50:92:ff:e4:91:06:68:27:d6:ef:2b:9a:bf: 80:4b:c3:6c:76:cc:a5:61:b2:1a:68:a6:9f:93:00: f4:a5:87:22:2c:d2:68:75:ff:c7:7b:66:13:d9:a5: 3b:cf:86:7e:39:07:16:c5:10:2d:5a:6d:18:e3:89: f1:3a:33:00:79:a6:de:5d:76:7f:69:e9:6b:db:7a: 97:e5:76:a0:48:ec:e4:fa:65:ad:43:2b:de:ca:59: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9C:39:4E:79:41:42:E6:66:E4:C1:2D:7B:DD:EA:DB:7B:83:37:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:e0:f4:44:c4:b3:10:14:af:99:37:18:2b:9c:80:e1:59: d9:ca:9e:b9:f2:a3:ef:0c:bb:b0:2d:d9:85:c1:05:ad:9e:f0: 91:93:19:e7:1a:29:79:7e:5a:93:68:40:a6:53:4b:34:eb:32: c7:12:76:88:77:ba:8c:ec:8b:9e:11:02:20:8b:6f:48:4e:64: f5:b3:e0:6f:4b:b1:39:1e:65:ff:77:9e:f0:84:21:21:6a:a1: e1:9c:78:a1:01:cc:9f:b0:59:2c:78:19:96:af:7d:7e:98:94: 71:4b:e0:77:64:f5:bc:e6:91:0c:8b:7d:f7:65:d7:4b:3a:65: 21:c2:1e:a1:6b:39:14:eb:fa:c4:a5:20:bf:51:f7:f8:c3:d2: f9:7d:04:6b:f4:f9:33:56:fb:fb:cc:81:bf:45:8c:37:be:3b: f2:3f:57:68:48:14:84:c5:79:8d:a2:5a:d8:af:e4:e9:d5:55: 51:6b:e5:68:ed:46:a4:91:af:5c:87:ac:e5:32:be:71:d6:7c: 2b:ae:50:f4:31:03:4e:e9:71:0a:a5:94:9a:32:ae:dc:46:7a: 1c:01:87:57:13:42:d7:5e:64:11:68:b5:33:46:ae:e7:ef:03: d4:84:33:63:a7:be:95:4a:a6:99:76:34:78:9b:0e:90:7a:a3: 72:ee:20:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhVHxmdyHn9Om0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzcwMloXDTI1MTIwOTE4MzcwMlowLzEtMCsGA1UEAxMk NGRjNGUwZWEtYmRiOS00Njg1LTgyYjAtMzdmMjIwODM1YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFeNG/MyFgcY0hqJ3dBdKGw+rApJutlsnUrK x31S1FsOc+/aGSLZhsT7aOazP9VvGQlQxDh5AEuEO/6xoowj1euqOhPBxIl95HVE 63hYGjU5lfsnAq2yiLNB89ct9ake/1dCpdXSIuV4hrgsC2NnwmOlKn1Kbge3xTQM 1fYiggoOhHRpFO07VLMJeNkO0ZQHyDW0p/8gOKGwTiDt0+MIzzpHsp6GfVCS/+SR Bmgn1u8rmr+AS8NsdsylYbIaaKafkwD0pYciLNJodf/He2YT2aU7z4Z+OQcWxRAt Wm0Y44nxOjMAeabeXXZ/aelr23qX5XagSOzk+mWtQyveylnUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLacOU55QULmZuTBLXvd6tt7gzcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDI1YWYwOWEtNWU2OC0z MDM4LWEwZjEtMDE2ZGVkMTFlNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhrnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdb4PRExLMQFK+ZNxgrnIDhWdnKnrnyo+8Mu7At2YXBBa2e8JGTGeca KXl+WpNoQKZTSzTrMscSdoh3uozsi54RAiCLb0hOZPWz4G9LsTkeZf93nvCEISFq oeGceKEBzJ+wWSx4GZavfX6YlHFL4Hdk9bzmkQyLffdl10s6ZSHCHqFrORTr+sSl IL9R9/jD0vl9BGv0+TNW+/vMgb9FjDe+O/I/V2hIFITFeY2iWtiv5OnVVVFr5Wjt RqSRr1yHrOUyvnHWfCuuUPQxA07pcQqllJoyrtxGehwBh1cTQtdeZBFotTNGrufv A9SEM2OnvpVKppl2NHibDpB6o3LuIP8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:21 2025 by rpki-client