$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa File: 65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa (raw, json) Hash identifier: g8Ef0eNDlyAjTyufTDYcuPpAzKSG2/HP7MuIr2QkfME= Subject key identifier: BE:44:45:E9:C8:56:45:9B:83:40:89:55:01:30:12:73:51:17:81:9E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF559D73C97BEA2375EC4940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa Signing time: Thu 21 Aug 2025 23:11:28 +0000 ROA not before: Thu 21 Aug 2025 23:11:28 +0000 ROA not after: Thu 20 Nov 2025 00:11:28 +0000 asID: 31898 IP address blocks: 132.145.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:9d:73:c9:7b:ea:23:75:ec:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:28 2025 GMT Not After : Nov 20 00:11:28 2025 GMT Subject: CN=0f8439ef-786b-4064-8012-b6ba4fb23b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:14:51:53:0c:38:33:c0:f7:04:78:78:6a: d1:3e:05:f4:90:6d:26:ce:fa:ad:51:59:43:7b:f8: b5:35:98:af:e5:aa:00:cf:12:d3:41:3e:b2:dc:93: 9b:e2:20:54:d1:1e:17:5f:9b:0a:d0:22:c3:eb:04: d6:1d:57:d8:7f:49:85:f7:57:d4:0d:86:36:6a:4d: 3d:f4:f1:f1:43:a5:73:c0:b0:6d:a6:b5:6a:96:24: 6d:b9:01:b3:67:be:fa:2b:d4:8c:4a:9d:bf:11:5c: e7:0f:a2:ab:64:2e:d8:71:d8:8f:3e:de:08:7d:bd: 4f:77:3c:b5:36:ff:26:f9:b6:07:37:1b:e5:c7:c0: 93:7e:6d:e4:50:1d:ea:91:32:6a:2a:05:dd:d0:aa: df:52:c8:77:43:14:e4:64:0b:3e:c3:99:92:06:0d: a2:06:ac:a6:56:a8:7d:0b:f9:dc:71:44:9e:39:11: 91:7f:60:ad:ba:8d:fd:62:c6:79:8e:43:b1:b7:3f: 03:cb:5d:49:50:8a:5b:cc:80:4d:02:b1:6a:f3:25: cf:18:df:9c:25:a8:87:57:93:2f:ba:8a:98:cd:c5: b0:d6:fa:f4:fb:6b:8c:3c:52:07:76:01:81:43:93: ca:93:67:00:65:e5:bf:da:5f:96:25:4a:93:22:4d: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:45:E9:C8:56:45:9B:83:40:89:55:01:30:12:73:51:17:81:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/65d46364-fbf1-3a66-a0d0-8ced9efcbe66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d3:0c:aa:1d:9b:69:7e:bd:3e:2d:60:04:ea:96:bc:9d:89: 14:2c:12:28:53:c6:ee:ff:f2:5e:06:08:23:35:fe:78:17:f4: 07:e7:42:5b:9b:c1:6b:81:c1:c1:2a:11:c7:76:dd:f5:54:7a: bb:78:6f:61:12:05:08:16:0e:a0:60:2a:ef:71:56:f0:b9:49: 42:07:2d:56:c4:a3:af:cb:39:15:ea:81:4e:cd:d3:47:5f:20: 31:6c:18:ea:55:6c:57:04:d5:e8:55:c0:bc:57:94:9c:96:d7: 0d:ec:e9:a4:52:76:e7:69:7a:8f:e5:86:35:cd:24:a6:be:27: 34:b2:bf:9d:31:c2:c4:cc:2f:91:19:fa:6a:b1:0d:09:fd:5b: ca:b6:58:9d:71:84:6f:51:78:47:99:f0:41:34:b0:2c:f1:27: b7:e4:c2:3b:16:2d:e1:31:be:8f:f7:11:51:09:83:30:aa:27: 27:a3:f7:92:d8:2f:c7:d1:68:64:04:e7:83:43:f4:5d:2f:e8: 2f:3c:d5:e6:9e:cc:6c:43:5b:04:39:5f:48:91:5d:4b:de:d2: a3:d6:e7:27:ab:10:88:8f:25:d5:b3:da:8a:3d:90:ec:8f:7d: 9a:19:98:40:47:b9:fe:e6:93:88:5d:a1:84:f3:64:fc:bd:6d: 90:43:d1:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVZ1zyXvqI3XsSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEyOFoXDTI1MTEyMDAwMTEyOFowLzEtMCsGA1UEAxMk MGY4NDM5ZWYtNzg2Yi00MDY0LTgwMTItYjZiYTRmYjIzYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3IUUVMMODPA9wR4eGrRPgX0kG0mzvqtUVlD e/i1NZiv5aoAzxLTQT6y3JOb4iBU0R4XX5sK0CLD6wTWHVfYf0mF91fUDYY2ak09 9PHxQ6VzwLBtprVqliRtuQGzZ776K9SMSp2/EVznD6KrZC7YcdiPPt4Ifb1Pdzy1 Nv8m+bYHNxvlx8CTfm3kUB3qkTJqKgXd0KrfUsh3QxTkZAs+w5mSBg2iBqymVqh9 C/nccUSeORGRf2Ctuo39YsZ5jkOxtz8Dy11JUIpbzIBNArFq8yXPGN+cJaiHV5Mv uoqYzcWw1vr0+2uMPFIHdgGBQ5PKk2cAZeW/2l+WJUqTIk16QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ERenIVkWbg0CJVQEwEnNRF4GeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjVkNDYzNjQtZmJmMS0z YTY2LWEwZDAtOGNlZDllZmNiZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTTDKodm2l+vT4tYATqlrydiRQsEihTxu7/8l4GCCM1/ngX9AfnQlub wWuBwcEqEcd23fVUert4b2ESBQgWDqBgKu9xVvC5SUIHLVbEo6/LORXqgU7N00df IDFsGOpVbFcE1ehVwLxXlJyW1w3s6aRSdudpeo/lhjXNJKa+JzSyv50xwsTML5EZ +mqxDQn9W8q2WJ1xhG9ReEeZ8EE0sCzxJ7fkwjsWLeExvo/3EVEJgzCqJyej95LY L8fRaGQE54ND9F0v6C881eaezGxDWwQ5X0iRXUve0qPW5yerEIiPJdWz2oo9kOyP fZoZmEBHuf7mk4hdoYTzZPy9bZBD0Qs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:53 2025 by rpki-client