$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d93b319-7320-309e-a780-e3cd64399887.roa File: 3d93b319-7320-309e-a780-e3cd64399887.roa (raw, json) Hash identifier: 3MZqNbtT2zgzbT+l1jUi/YUftLCR4qLmPHWzA/U3+vk= Subject key identifier: 42:2A:80:B0:A4:A2:99:EB:17:A2:4E:B3:5F:4D:1C:55:34:C3:56:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B268549D89CDE571FE698A900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d93b319-7320-309e-a780-e3cd64399887.roa Signing time: Wed 10 Sep 2025 17:36:59 +0000 ROA not before: Wed 10 Sep 2025 17:36:59 +0000 ROA not after: Tue 09 Dec 2025 18:36:59 +0000 asID: 54253 IP address blocks: 134.185.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:49:d8:9c:de:57:1f:e6:98:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:36:59 2025 GMT Not After : Dec 9 18:36:59 2025 GMT Subject: CN=0befb1ac-4cb8-429f-9160-23b75c9c8381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:62:04:8b:4f:60:71:c5:be:12:b6:22:08: ff:ea:0a:9b:98:66:48:73:18:92:a9:60:ba:e9:76: 20:31:bd:a3:b9:4b:b3:d0:79:0c:12:48:52:c6:1c: 60:72:c7:f7:18:97:33:44:f4:24:a6:34:ed:05:1f: 4e:7c:a1:81:0d:f0:64:09:00:1f:e2:ab:ab:f4:bb: 95:c1:b7:8c:3b:d6:04:81:d9:c6:dd:d4:65:48:5e: df:97:f4:ca:28:f1:cb:1c:9e:0e:50:1d:d2:0b:c3: ad:84:5f:ba:42:2c:5d:76:a4:5c:b9:0a:2c:a4:87: 42:22:05:ab:26:7b:a2:59:0c:de:58:1a:61:1a:19: 74:1d:ff:d8:56:59:ed:13:bf:73:b9:02:26:d9:75: a4:7d:e8:cb:80:a7:cc:47:d4:b8:0a:be:1a:a4:1a: 2c:1c:da:7d:fe:04:df:21:bd:84:3e:45:1d:96:31: 86:70:a4:f7:8f:ec:ae:d6:70:74:3f:e3:82:23:73: 7e:ed:d4:ff:5e:9c:4d:68:88:b0:66:45:79:c4:c7: c7:83:c7:c0:43:f7:ba:f8:11:d6:68:91:a2:49:53: 14:22:4e:31:1d:f6:f4:7b:99:84:1f:a9:bb:4e:aa: a5:62:80:bd:13:34:0a:2c:e8:70:76:75:24:c3:ad: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:80:B0:A4:A2:99:EB:17:A2:4E:B3:5F:4D:1C:55:34:C3:56:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d93b319-7320-309e-a780-e3cd64399887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:00:1a:75:07:d5:87:d9:12:4e:f0:95:5f:8e:8a:ca:39:4a: b8:28:66:0f:d8:82:eb:b0:aa:60:a5:37:b4:e4:72:62:7d:e7: a1:be:c6:44:19:ba:9f:6c:03:68:68:a7:19:8a:93:c8:c1:1c: 97:6a:29:b2:e3:18:42:bb:f6:4e:2b:40:02:1c:f4:76:46:07: 98:f5:88:d8:f3:a2:08:15:47:e0:d3:3a:4f:af:3b:93:d7:39: 9c:67:da:c3:82:c6:08:ac:ef:96:de:ba:47:a0:e1:7c:2b:31: 46:6e:6d:1e:e7:f5:44:d7:66:83:70:f9:85:93:96:08:5a:11: e0:0a:32:03:02:87:83:38:67:3b:a9:3e:77:0b:09:fb:a8:fc: 0b:e1:2e:55:9f:58:2c:c2:3f:48:7c:96:12:32:92:18:49:5d: be:ef:f4:70:2b:78:b7:a1:93:c4:73:b1:a3:49:a2:34:f7:b2: 29:8e:29:aa:17:3b:c2:8f:ac:e5:64:c4:fd:40:42:fe:51:18: b6:f8:c4:16:23:a2:fa:0a:9e:79:9e:fc:f4:dc:35:1b:e5:3a: 6a:45:f4:b1:74:b8:99:d8:db:62:5b:fc:72:fc:57:aa:ea:9d: a1:4a:7c:96:b5:e9:00:0c:03:29:17:c8:6d:cf:06:8b:69:59: 96:20:e3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhUnYnN5XH+aYqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzY1OVoXDTI1MTIwOTE4MzY1OVowLzEtMCsGA1UEAxMk MGJlZmIxYWMtNGNiOC00MjlmLTkxNjAtMjNiNzVjOWM4MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfRiBItPYHHFvhK2Igj/6gqbmGZIcxiSqWC6 6XYgMb2juUuz0HkMEkhSxhxgcsf3GJczRPQkpjTtBR9OfKGBDfBkCQAf4qur9LuV wbeMO9YEgdnG3dRlSF7fl/TKKPHLHJ4OUB3SC8OthF+6QixddqRcuQospIdCIgWr JnuiWQzeWBphGhl0Hf/YVlntE79zuQIm2XWkfejLgKfMR9S4Cr4apBosHNp9/gTf Ib2EPkUdljGGcKT3j+yu1nB0P+OCI3N+7dT/XpxNaIiwZkV5xMfHg8fAQ/e6+BHW aJGiSVMUIk4xHfb0e5mEH6m7TqqlYoC9EzQKLOhwdnUkw63r2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIqgLCkopnrF6JOs19NHFU0w1YlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2Q5M2IzMTktNzMyMC0z MDllLWE3ODAtZTNjZDY0Mzk5ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUAGnUH1YfZEk7wlV+Oiso5SrgoZg/YguuwqmClN7TkcmJ956G+xkQZ up9sA2hopxmKk8jBHJdqKbLjGEK79k4rQAIc9HZGB5j1iNjzoggVR+DTOk+vO5PX OZxn2sOCxgis75beukeg4XwrMUZubR7n9UTXZoNw+YWTlghaEeAKMgMCh4M4Zzup PncLCfuo/AvhLlWfWCzCP0h8lhIykhhJXb7v9HAreLehk8RzsaNJojT3simOKaoX O8KPrOVkxP1AQv5RGLb4xBYjovoKnnme/PTcNRvlOmpF9LF0uJnY22Jb/HL8V6rq naFKfJa16QAMAykXyG3PBotpWZYg42k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:47 2025 by rpki-client