$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa File: 1a245a68-6d5b-37bd-88fd-a2c716da367c.roa (raw, json) Hash identifier: dNBiA7pytdUArVys3J84DHO25TQmAwO4wkCyN8bm7uM= Subject key identifier: 12:9A:4B:AB:3D:CD:9D:F7:3C:72:26:92:D3:EC:31:DE:C2:FD:45:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B248246C0682D47F34A543A40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa Signing time: Wed 10 Sep 2025 00:19:17 +0000 ROA not before: Wed 10 Sep 2025 00:19:17 +0000 ROA not after: Tue 09 Dec 2025 01:19:17 +0000 asID: 54253 IP address blocks: 134.185.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:46:c0:68:2d:47:f3:4a:54:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:19:17 2025 GMT Not After : Dec 9 01:19:17 2025 GMT Subject: CN=3d8356c5-b9a1-4b51-85ae-210f63197336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:0d:a4:64:f6:ef:09:f9:9b:00:c3:37:48: 85:06:58:bc:85:26:8e:48:7d:86:3d:71:d7:90:be: ad:c4:82:17:ab:d7:03:de:1f:ee:95:6f:5d:20:38: e4:7c:84:5b:a6:08:6b:7a:ec:48:76:69:99:a9:fb: 96:0c:7a:0c:16:be:7c:a4:ff:68:6f:77:e5:78:13: b2:71:8d:56:ce:76:8c:f8:a8:3d:de:18:e7:d0:19: 9e:8f:cd:f7:54:d2:4b:d5:81:b5:5b:4e:15:34:47: 59:c3:f0:04:f4:14:44:3e:43:1e:6d:23:02:17:53: db:d6:a0:1b:c6:c5:51:e2:12:0e:6d:8b:99:f5:4d: a7:d6:eb:cd:73:b2:58:26:8b:0b:73:d5:3b:01:24: 7f:9f:b4:3d:b5:aa:86:c3:1a:46:0e:17:43:e4:cf: b3:6c:92:0d:d7:df:02:f8:01:29:73:08:88:24:8c: 44:67:1e:5a:91:60:20:b4:00:78:6d:21:88:04:07: 15:0f:af:7f:94:cb:65:2d:77:e8:9f:d5:28:80:d6: 94:63:3c:ef:5f:4a:9b:a8:e9:44:60:81:f9:bc:14: 4a:ab:57:4a:e4:24:b3:9d:cc:49:0e:4e:5c:c8:15: 2d:63:f1:25:10:e8:31:cc:e4:7b:c4:2b:38:d9:f1: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:4B:AB:3D:CD:9D:F7:3C:72:26:92:D3:EC:31:DE:C2:FD:45:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a245a68-6d5b-37bd-88fd-a2c716da367c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2e:de:8f:bb:43:f6:20:06:bf:a3:e3:2a:9d:58:9e:63:07: b2:db:39:51:e3:10:8d:98:a7:b2:6b:96:7d:e7:58:b4:2d:98: b8:ef:cd:87:69:49:d2:9f:03:a1:a4:57:a9:0d:c3:20:ec:bc: ca:e3:10:1e:bf:27:10:8e:9e:e9:b5:12:c4:93:55:6d:cf:6d: ba:95:40:40:c7:07:c8:ca:ef:20:a1:2e:7f:57:15:34:7c:6f: 26:b0:49:0d:c2:26:ed:45:a5:28:b3:02:7f:14:10:05:ba:ef: db:6d:bb:1a:56:aa:9b:87:56:d1:30:d9:32:cb:88:3c:bf:18: a1:19:78:2c:7e:c2:95:30:95:4e:77:08:8c:f2:34:b9:4f:a5: 23:6b:d0:6a:62:f1:7d:f8:b1:8a:e2:66:9d:c1:5c:e4:69:51: 01:6e:59:e9:12:74:38:b9:a8:c0:ec:72:da:9e:c6:2e:9a:19: 68:97:e7:e2:e3:06:57:1a:6b:c5:f3:88:aa:8b:ce:25:c4:c1: de:4e:8f:34:51:f1:97:fc:2a:1b:2f:78:58:8d:5e:de:af:9c: da:c2:11:c9:00:95:42:60:15:4a:4b:60:8f:36:44:f9:26:f6: f1:0f:b2:bf:98:34:b5:e2:20:a7:37:10:c0:d0:1c:bf:f0:56: 25:95:05:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskgkbAaC1H80pUOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTkxN1oXDTI1MTIwOTAxMTkxN1owLzEtMCsGA1UEAxMk M2Q4MzU2YzUtYjlhMS00YjUxLTg1YWUtMjEwZjYzMTk3MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRMNpGT27wn5mwDDN0iFBli8hSaOSH2GPXHX kL6txIIXq9cD3h/ulW9dIDjkfIRbpghreuxIdmmZqfuWDHoMFr58pP9ob3fleBOy cY1WznaM+Kg93hjn0Bmej833VNJL1YG1W04VNEdZw/AE9BREPkMebSMCF1Pb1qAb xsVR4hIObYuZ9U2n1uvNc7JYJosLc9U7ASR/n7Q9taqGwxpGDhdD5M+zbJIN198C +AEpcwiIJIxEZx5akWAgtAB4bSGIBAcVD69/lMtlLXfon9UogNaUYzzvX0qbqOlE YIH5vBRKq1dK5CSzncxJDk5cyBUtY/ElEOgxzOR7xCs42fHyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKaS6s9zZ33PHImktPsMd7C/UUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEyNDVhNjgtNmQ1Yi0z N2JkLTg4ZmQtYTJjNzE2ZGEzNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwu3o+7Q/YgBr+j4yqdWJ5jB7LbOVHjEI2Yp7Jrln3nWLQtmLjvzYdp SdKfA6GkV6kNwyDsvMrjEB6/JxCOnum1EsSTVW3PbbqVQEDHB8jK7yChLn9XFTR8 byawSQ3CJu1FpSizAn8UEAW679ttuxpWqpuHVtEw2TLLiDy/GKEZeCx+wpUwlU53 CIzyNLlPpSNr0Gpi8X34sYriZp3BXORpUQFuWekSdDi5qMDsctqexi6aGWiX5+Lj Blcaa8XziKqLziXEwd5OjzRR8Zf8KhsveFiNXt6vnNrCEckAlUJgFUpLYI82RPkm 9vEPsr+YNLXiIKc3EMDQHL/wViWVBdo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:21 2025 by rpki-client