$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a54eb9c-df9e-3c23-9d46-f8f8b00e8b42.roa File: 4a54eb9c-df9e-3c23-9d46-f8f8b00e8b42.roa (raw, json) Hash identifier: rqf5JfdpLusF6BK/veRnp0ffhPUli1HDLeqiPU4sqNE= Subject key identifier: A1:BB:62:35:D7:BA:0C:67:A0:98:96:3C:0A:D1:71:65:49:83:78:1B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B64AEF0B5750165DBABC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a54eb9c-df9e-3c23-9d46-f8f8b00e8b42.roa Signing time: Tue 19 Aug 2025 17:39:18 +0000 ROA not before: Tue 19 Aug 2025 17:39:18 +0000 ROA not after: Mon 17 Nov 2025 18:39:18 +0000 asID: 31898 IP address blocks: 132.145.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:64:ae:f0:b5:75:01:65:db:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:18 2025 GMT Not After : Nov 17 18:39:18 2025 GMT Subject: CN=9f5540b3-0938-40b4-8811-cf5d3823ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:27:cf:45:7f:3c:97:99:b0:5f:bd:ec:7b: 91:34:b2:bb:9b:94:8e:8e:6c:38:7d:9e:47:ff:3d: c7:ea:1d:99:40:e8:30:9c:cb:86:b5:1e:67:0f:73: ff:34:db:31:24:43:fc:31:0b:66:06:ca:cb:61:af: 84:ca:b9:fa:24:df:42:20:56:85:a2:09:88:7f:c7: 27:cd:ee:10:6c:fc:e1:ff:13:ca:5b:13:85:ec:bb: b5:5f:45:38:f7:9a:20:2d:81:4f:88:23:db:aa:8d: d6:aa:60:e6:f7:a3:6f:0d:f9:c1:7a:db:ff:a0:25: 9f:da:48:a3:ba:c6:2b:cd:ce:3b:37:4d:6b:e8:46: 6a:2b:50:bc:88:81:50:9a:bd:f8:7e:b7:e6:5f:3b: 01:08:90:f6:7c:ab:c8:f6:e7:55:67:46:0f:60:b5: 0a:da:24:b9:b5:08:fd:ba:94:ea:11:5a:df:c7:92: 14:98:36:70:7c:da:2a:4e:52:fb:b7:da:67:ec:66: b9:81:df:67:43:41:5f:f9:1f:f8:24:cb:08:d9:6a: 29:5d:b9:6b:06:3a:1e:59:0a:4b:59:fc:4e:ee:cf: 92:a6:74:58:fa:6f:54:b3:ff:62:86:d6:43:84:e7: c5:9e:3d:b4:76:f4:ed:01:05:a7:9a:b3:3c:1c:92: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BB:62:35:D7:BA:0C:67:A0:98:96:3C:0A:D1:71:65:49:83:78:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a54eb9c-df9e-3c23-9d46-f8f8b00e8b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:ab:8e:9a:34:78:b5:78:cb:29:c5:3d:6f:22:48:bc:40: 26:44:03:8e:30:08:aa:69:4e:6f:34:98:4f:d4:c2:fb:46:cf: 2c:b3:49:8e:fb:a7:3a:46:cf:62:bf:61:d5:b8:97:59:24:39: 8f:f6:28:c4:bf:26:b8:72:0f:d5:37:b1:dd:88:3c:05:18:0a: 6f:fe:d7:ea:8a:60:4f:fd:61:9f:d4:59:4b:3b:99:84:31:53: db:01:d4:2c:d6:27:bf:1e:e5:b5:96:7b:d7:a6:87:fe:d2:3d: 00:c5:35:32:8a:59:ad:48:70:ec:eb:c5:95:df:04:14:01:ff: 79:8b:c0:a8:28:cd:45:2c:28:d8:9c:27:26:a6:35:15:39:dc: 43:38:c7:d0:02:8e:41:20:b4:cf:ed:fd:23:93:a5:1f:a3:67: 0b:fa:99:67:3f:7b:d1:fc:96:54:94:4f:3f:b9:e8:78:48:81: 61:be:68:e1:46:21:31:b0:9a:a8:f1:9f:58:04:9b:8c:19:e0: 3a:09:9d:23:dc:1f:d7:de:bd:8e:71:9b:9b:9d:05:77:d9:a7: de:db:35:04:49:a5:87:d3:2d:c8:47:90:25:3a:ff:dc:f0:57: 5d:0d:44:8f:8a:37:08:a9:01:89:3f:c6:6e:ad:2a:2c:74:f3: eb:5a:6c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG2Su8LV1AWXbq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkxOFoXDTI1MTExNzE4MzkxOFowLzEtMCsGA1UEAxMk OWY1NTQwYjMtMDkzOC00MGI0LTg4MTEtY2Y1ZDM4MjNhYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiswnz0V/PJeZsF+97HuRNLK7m5SOjmw4fZ5H /z3H6h2ZQOgwnMuGtR5nD3P/NNsxJEP8MQtmBsrLYa+Eyrn6JN9CIFaFogmIf8cn ze4QbPzh/xPKWxOF7Lu1X0U495ogLYFPiCPbqo3WqmDm96NvDfnBetv/oCWf2kij usYrzc47N01r6EZqK1C8iIFQmr34frfmXzsBCJD2fKvI9udVZ0YPYLUK2iS5tQj9 upTqEVrfx5IUmDZwfNoqTlL7t9pn7Ga5gd9nQ0Ff+R/4JMsI2WopXblrBjoeWQpL WfxO7s+SpnRY+m9Us/9ihtZDhOfFnj20dvTtAQWnmrM8HJIRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG7YjXXugxnoJiWPArRcWVJg3gbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE1NGViOWMtZGY5ZS0z YzIzLTlkNDYtZjhmOGIwMGU4YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8Xq46aNHi1eMspxT1vIki8QCZEA44wCKppTm80mE/UwvtGzyyzSY77 pzpGz2K/YdW4l1kkOY/2KMS/JrhyD9U3sd2IPAUYCm/+1+qKYE/9YZ/UWUs7mYQx U9sB1CzWJ78e5bWWe9emh/7SPQDFNTKKWa1IcOzrxZXfBBQB/3mLwKgozUUsKNic JyamNRU53EM4x9ACjkEgtM/t/SOTpR+jZwv6mWc/e9H8llSUTz+56HhIgWG+aOFG ITGwmqjxn1gEm4wZ4DoJnSPcH9fevY5xm5udBXfZp97bNQRJpYfTLchHkCU6/9zw V10NRI+KNwipAYk/xm6tKix08+tabOo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:39 2025 by rpki-client