$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3c0b56-2722-3c87-914e-380742aaea8e.roa File: 1a3c0b56-2722-3c87-914e-380742aaea8e.roa (raw, json) Hash identifier: r4ROY94+bw3nFWe7M+ns0TBNPON5boKdYXsdXZeD7fc= Subject key identifier: 12:02:4B:4F:B5:15:75:4B:28:30:0A:AC:8D:2B:95:8A:71:51:87:0B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF557C989185BC7A218EC280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3c0b56-2722-3c87-914e-380742aaea8e.roa Signing time: Thu 21 Aug 2025 23:11:12 +0000 ROA not before: Thu 21 Aug 2025 23:11:12 +0000 ROA not after: Thu 20 Nov 2025 00:11:12 +0000 asID: 31898 IP address blocks: 132.145.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:7c:98:91:85:bc:7a:21:8e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:12 2025 GMT Not After : Nov 20 00:11:12 2025 GMT Subject: CN=4447c3a0-fb42-456c-aa89-2ee9ceeeae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:69:3b:10:74:d1:d3:b6:36:f7:07:57:6a: 17:cd:2e:53:87:70:e7:31:ad:2d:6e:fa:7a:c5:07: 53:79:34:05:36:d5:7a:0c:8d:b9:1b:85:fd:69:93: 1f:18:09:c3:94:5a:18:e3:50:cf:d0:55:1a:fb:b7: d8:ea:e7:39:c3:23:72:10:3d:f9:85:0e:2e:11:5e: f7:ff:ba:ed:af:90:47:bb:d5:02:43:9e:dc:67:a9: 4e:f4:b3:89:fc:f1:f9:39:cb:bb:2d:37:43:f4:ab: 45:05:81:79:74:5c:ac:d0:f3:d7:cc:b5:ca:2c:2a: 0d:86:fc:69:68:de:e9:52:61:13:fb:b7:fd:84:97: c9:27:28:76:f8:a6:ba:2d:82:56:98:95:43:fd:93: bd:1d:e9:62:86:7b:07:06:62:9e:b4:0d:3f:b0:d4: a3:7e:d7:cd:b5:32:f5:4b:5b:82:ad:e2:2f:76:82: 8f:a1:4f:3f:d4:15:b9:74:80:f9:40:e7:88:4f:2a: 62:2e:40:bb:fd:8d:a7:eb:77:1d:d2:38:32:81:5e: 44:c8:91:f8:68:e0:63:18:b4:9c:b1:15:c5:0d:a6: 6a:ea:89:f0:ec:43:c6:88:c5:82:e9:65:33:0b:0d: 59:77:58:14:35:bb:ee:38:d2:0b:39:76:b2:73:c4: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:02:4B:4F:B5:15:75:4B:28:30:0A:AC:8D:2B:95:8A:71:51:87:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3c0b56-2722-3c87-914e-380742aaea8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:90:08:63:47:12:0c:f8:19:b2:37:9b:5d:72:a2:9c:80:d6: d1:2f:b6:c2:55:ab:63:ee:ed:67:b7:26:cd:09:65:b2:31:40: de:da:dc:cf:dc:45:f2:c6:97:55:8c:d5:60:7b:52:4f:98:86: 75:c5:a9:1b:62:43:c1:e8:45:cd:13:a7:c9:16:02:c0:5e:db: cf:88:27:5a:4c:ac:9f:52:38:1a:bf:4b:80:4b:32:14:e8:fe: 39:b5:dd:0a:ed:40:33:af:fb:f8:c2:fc:61:66:5b:5a:c0:61: b8:68:27:c4:6e:7b:24:c7:2f:f1:15:69:13:f2:df:dc:2c:9f: d9:2e:56:a5:25:ea:cd:2c:5a:a2:3e:dd:21:af:e4:af:02:43: 23:7a:c1:be:b6:b2:5d:c5:a2:19:eb:31:25:97:b3:63:30:34: 9b:7c:2c:80:e8:73:fe:c1:e8:d0:7b:10:eb:7a:6d:b6:ff:f7: 3c:61:5a:8f:46:66:6c:2e:05:e2:6b:17:6d:9c:d3:75:1f:c0: d9:58:67:a7:d3:66:10:51:e1:f7:d7:05:75:2f:c6:57:03:73: b3:74:2c:d3:33:86:55:0f:d6:3e:1c:54:40:37:c5:03:3a:56: 26:6b:7c:1b:f2:b4:fb:50:62:f0:ad:29:2b:d4:65:17:7d:7f: ca:9b:b8:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVXyYkYW8eiGOwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTExMloXDTI1MTEyMDAwMTExMlowLzEtMCsGA1UEAxMk NDQ0N2MzYTAtZmI0Mi00NTZjLWFhODktMmVlOWNlZWVhZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VppOxB00dO2NvcHV2oXzS5Th3DnMa0tbvp6 xQdTeTQFNtV6DI25G4X9aZMfGAnDlFoY41DP0FUa+7fY6uc5wyNyED35hQ4uEV73 /7rtr5BHu9UCQ57cZ6lO9LOJ/PH5Ocu7LTdD9KtFBYF5dFys0PPXzLXKLCoNhvxp aN7pUmET+7f9hJfJJyh2+Ka6LYJWmJVD/ZO9HelihnsHBmKetA0/sNSjftfNtTL1 S1uCreIvdoKPoU8/1BW5dID5QOeITypiLkC7/Y2n63cd0jgygV5EyJH4aOBjGLSc sRXFDaZq6onw7EPGiMWC6WUzCw1Zd1gUNbvuONILOXayc8RWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBICS0+1FXVLKDAKrI0rlYpxUYcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEzYzBiNTYtMjcyMi0z Yzg3LTkxNGUtMzgwNzQyYWFlYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCQCGNHEgz4GbI3m11yopyA1tEvtsJVq2Pu7We3Js0JZbIxQN7a3M/c RfLGl1WM1WB7Uk+YhnXFqRtiQ8HoRc0Tp8kWAsBe28+IJ1pMrJ9SOBq/S4BLMhTo /jm13QrtQDOv+/jC/GFmW1rAYbhoJ8RueyTHL/EVaRPy39wsn9kuVqUl6s0sWqI+ 3SGv5K8CQyN6wb62sl3FohnrMSWXs2MwNJt8LIDoc/7B6NB7EOt6bbb/9zxhWo9G ZmwuBeJrF22c03UfwNlYZ6fTZhBR4ffXBXUvxlcDc7N0LNMzhlUP1j4cVEA3xQM6 ViZrfBvytPtQYvCtKSvUZRd9f8qbuKg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:38 2025 by rpki-client