$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa File: 025af09a-5e68-3038-a0f1-016ded11e627.roa (raw, json) Hash identifier: oayoRN31PjrC93bs97x4qCFiuuvxRWhnXCLBvh3c9aM= Subject key identifier: 7A:11:EE:CE:96:B8:ED:2D:E2:85:EE:99:98:E0:FD:2E:73:1A:4C:7E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498ACEF73AC978E31EC8F380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 134.185.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ce:f7:3a:c9:78:e3:1e:c8:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=481604ef-d699-4aa3-85b7-45802b562aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:86:8f:76:c4:62:84:23:1a:a8:6c:2f:7a: 8b:06:0e:d6:26:ce:45:55:52:f0:91:19:a3:b9:74: b0:42:67:25:60:af:79:c8:b5:f1:0b:50:1c:ec:17: 28:a4:02:f5:51:85:02:d1:07:d8:31:6d:42:cd:5a: d4:12:cd:96:34:01:74:1e:0c:83:0a:56:13:79:cb: 35:8a:d5:65:c3:42:37:d7:21:b4:b5:f6:30:ec:ef: bc:7a:fa:89:2a:f8:5f:f2:4f:1c:a8:0f:c8:cc:42: 42:6f:d1:99:be:36:cc:37:80:0e:15:04:49:18:8c: 73:e2:de:83:ed:8a:44:9d:17:b8:93:5e:b6:c3:5e: 7d:d7:c5:0b:0f:e6:0b:10:1c:f5:7f:92:7a:26:2a: f6:8d:f0:ea:f2:82:0d:52:8c:3a:8d:41:38:fa:26: 12:a5:80:59:5d:56:ab:cf:1f:cb:c3:d1:89:33:32: 7a:4c:60:b1:df:cb:a5:a7:4b:0b:b9:5d:6b:29:60: b4:10:e8:49:e6:d8:3a:b9:b1:cb:4e:64:49:48:3b: 48:62:b9:d0:22:c4:76:1b:b2:3a:08:ba:1e:dd:c6: b1:9f:42:8f:7a:26:96:09:ad:09:ef:06:b2:9f:86: aa:2f:17:99:a8:27:49:63:c7:ea:d7:7e:ad:e8:31: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:EE:CE:96:B8:ED:2D:E2:85:EE:99:98:E0:FD:2E:73:1A:4C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/025af09a-5e68-3038-a0f1-016ded11e627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0a:0e:1d:36:56:78:85:df:ff:b6:3d:25:97:f4:e1:4e:c9: 6b:33:38:f6:c0:09:be:58:60:2c:9c:a0:a7:ba:91:37:ed:d0: 9d:a3:91:f8:40:c6:ff:2f:57:17:dd:df:fb:de:e8:c3:8e:b0: 55:5a:7e:c5:8c:72:e9:d3:0c:80:1c:0d:4a:cf:93:9f:59:56: 31:ac:22:0c:e8:6f:f1:ef:42:a9:72:c3:60:d4:b8:f0:83:1e: 4a:65:57:a8:31:8a:c4:e8:e2:7a:12:e7:4f:db:f5:8b:8a:aa: 99:78:69:d8:ae:82:bd:fc:71:2f:07:1f:53:2e:24:ad:c1:ef: 56:0e:67:d2:02:f1:dd:7b:54:1b:bb:34:0e:66:34:b3:7e:61: 66:43:e1:32:a4:ed:cb:44:22:95:a6:58:9f:99:8d:f2:36:ad: aa:04:3d:0f:c3:a7:e6:fc:20:4a:29:88:bb:f3:21:08:ed:1b: 7f:8f:f2:9c:3a:32:62:98:41:9c:5b:1a:e0:6d:30:8f:b7:94: 0a:23:22:40:3e:54:f1:48:fe:b5:34:23:39:4f:ed:f5:03:23: d9:7e:12:32:f4:c2:a8:af:37:62:8a:fe:23:31:53:14:69:72: 34:87:55:33:59:75:da:53:17:32:ee:23:f5:88:3a:d4:10:00: 28:5d:a6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jis73Osl44x7I84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDgxNjA0ZWYtZDY5OS00YWEzLTg1YjctNDU4MDJiNTYyYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSOGj3bEYoQjGqhsL3qLBg7WJs5FVVLwkRmj uXSwQmclYK95yLXxC1Ac7BcopAL1UYUC0QfYMW1CzVrUEs2WNAF0HgyDClYTecs1 itVlw0I31yG0tfYw7O+8evqJKvhf8k8cqA/IzEJCb9GZvjbMN4AOFQRJGIxz4t6D 7YpEnRe4k162w15918ULD+YLEBz1f5J6Jir2jfDq8oINUow6jUE4+iYSpYBZXVar zx/Lw9GJMzJ6TGCx38ulp0sLuV1rKWC0EOhJ5tg6ubHLTmRJSDtIYrnQIsR2G7I6 CLoe3caxn0KPeiaWCa0J7wayn4aqLxeZqCdJY8fq136t6DFJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoR7s6WuO0t4oXumZjg/S5zGkx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDI1YWYwOWEtNWU2OC0z MDM4LWEwZjEtMDE2ZGVkMTFlNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhrnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcKDh02VniF3/+2PSWX9OFOyWszOPbACb5YYCycoKe6kTft0J2jkfhA xv8vVxfd3/ve6MOOsFVafsWMcunTDIAcDUrPk59ZVjGsIgzob/HvQqlyw2DUuPCD HkplV6gxisTo4noS50/b9YuKqpl4adiugr38cS8HH1MuJK3B71YOZ9IC8d17VBu7 NA5mNLN+YWZD4TKk7ctEIpWmWJ+ZjfI2raoEPQ/Dp+b8IEopiLvzIQjtG3+P8pw6 MmKYQZxbGuBtMI+3lAojIkA+VPFI/rU0IzlP7fUDI9l+EjL0wqivN2KK/iMxUxRp cjSHVTNZddpTFzLuI/WIOtQQAChdpq0= -----END CERTIFICATE-----Generated at Sun Oct 4 21:54:09 2026 by rpki-client