$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa File: 8a5a1d32-c301-3d60-8011-0f2d37d60580.roa (raw, json) Hash identifier: ZJcAxHH7Fut34BcGa/6USqrS+JjyDXerhQZIeQK6sZ0= Subject key identifier: 6A:41:5F:70:42:D8:BD:9D:28:2C:99:4A:A2:55:FE:5B:EE:47:2A:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2685301A40B2B15905465EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa Signing time: Wed 10 Sep 2025 17:36:46 +0000 ROA not before: Wed 10 Sep 2025 17:36:46 +0000 ROA not after: Tue 09 Dec 2025 18:36:46 +0000 asID: 54253 IP address blocks: 134.185.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:30:1a:40:b2:b1:59:05:46:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:36:46 2025 GMT Not After : Dec 9 18:36:46 2025 GMT Subject: CN=8f06346e-aae1-45be-83bd-cd57018ea812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:98:6c:e9:f8:32:14:7f:9e:b5:a1:3f:b6: 27:10:24:9c:94:fd:8d:76:c9:be:6e:a9:86:50:0e: 68:5e:d6:59:ce:8f:a3:d2:81:50:d7:e3:7e:10:ad: 33:97:4b:dd:c2:78:81:ce:4e:3b:ef:be:34:59:74: f0:47:49:fd:fc:2b:fd:39:d5:28:03:fa:e9:16:52: 44:f9:f6:a6:85:f4:8b:c8:f7:2f:50:df:5a:88:8d: f3:ca:f6:d3:b4:a7:63:67:58:22:35:3e:2a:3d:d1: 6f:46:c0:0a:fe:dd:63:70:9d:14:40:3c:1b:46:0b: ae:34:48:df:8d:11:df:59:50:6f:75:97:f5:3e:17: ff:d0:e7:ac:97:ee:73:4a:f9:37:c0:87:17:71:a1: 4c:36:8d:76:d2:e9:7b:1d:78:72:3c:d4:0a:56:35: 48:64:0c:6e:22:a8:e2:76:26:2b:cf:f6:f3:75:65: 85:70:7b:6e:c1:fa:08:8e:64:fd:b0:79:56:4f:2f: 09:5b:69:29:66:4a:64:86:b2:8a:29:97:e5:c2:da: 21:64:d3:1f:9c:0f:93:a5:14:1c:a7:0f:25:35:51: 67:2c:c9:0b:e1:c4:ac:5b:7b:cc:5d:f5:14:34:13: e2:79:3d:94:50:d5:fe:60:52:bb:0a:45:02:8a:72: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:41:5F:70:42:D8:BD:9D:28:2C:99:4A:A2:55:FE:5B:EE:47:2A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a5a1d32-c301-3d60-8011-0f2d37d60580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7b:a6:35:9e:b4:9d:fd:19:47:f2:a2:52:4f:4c:cd:1a:c8: 9a:85:85:c8:30:cb:de:9e:ee:71:83:2d:69:ae:6f:80:20:00: a9:09:41:54:a8:a9:cc:57:14:da:9b:9d:69:28:ac:d6:03:84: 82:1f:2f:4b:ae:f4:37:aa:49:39:5f:4d:78:e7:9a:88:c1:d0: d9:90:a6:c4:96:48:bc:4f:1f:91:d1:5a:20:e8:9a:ee:5a:10: aa:03:f0:14:29:c9:75:2c:43:9d:fa:34:ca:40:a4:cd:12:23: a4:25:09:12:06:a4:9b:15:3f:33:b2:f2:75:ea:ae:77:9b:5e: b3:54:09:86:61:3e:88:6e:02:fb:e1:d5:09:b1:25:e2:a7:a8: 5c:f8:44:cb:7a:f7:13:14:f6:55:93:d7:ea:b6:a8:86:b7:c3: 91:57:97:f0:28:58:57:dc:f6:a9:4a:c5:a5:b1:7d:19:b9:87: d8:11:4d:06:fa:19:b1:08:89:02:d5:65:0b:f0:57:80:2e:37: c1:a8:57:d4:6d:38:6d:bb:4d:a8:26:c4:64:68:ac:1a:36:7d: 46:1a:dd:a6:d1:71:e4:34:5f:51:f4:ca:7b:d2:d1:18:e1:eb: ba:14:62:f8:4e:fd:f7:f6:77:01:9c:7d:32:3d:33:75:08:da: 97:95:b2:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhTAaQLKxWQVGXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzY0NloXDTI1MTIwOTE4MzY0NlowLzEtMCsGA1UEAxMk OGYwNjM0NmUtYWFlMS00NWJlLTgzYmQtY2Q1NzAxOGVhODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IuYbOn4MhR/nrWhP7YnECSclP2Ndsm+bqmG UA5oXtZZzo+j0oFQ1+N+EK0zl0vdwniBzk477740WXTwR0n9/Cv9OdUoA/rpFlJE +famhfSLyPcvUN9aiI3zyvbTtKdjZ1giNT4qPdFvRsAK/t1jcJ0UQDwbRguuNEjf jRHfWVBvdZf1Phf/0Oesl+5zSvk3wIcXcaFMNo120ul7HXhyPNQKVjVIZAxuIqji diYrz/bzdWWFcHtuwfoIjmT9sHlWTy8JW2kpZkpkhrKKKZflwtohZNMfnA+TpRQc pw8lNVFnLMkL4cSsW3vMXfUUNBPieT2UUNX+YFK7CkUCinJ92QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpBX3BC2L2dKCyZSqJV/lvuRypMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE1YTFkMzItYzMwMS0z ZDYwLTgwMTEtMGYyZDM3ZDYwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN7pjWetJ39GUfyolJPTM0ayJqFhcgwy96e7nGDLWmub4AgAKkJQVSo qcxXFNqbnWkorNYDhIIfL0uu9DeqSTlfTXjnmojB0NmQpsSWSLxPH5HRWiDomu5a EKoD8BQpyXUsQ536NMpApM0SI6QlCRIGpJsVPzOy8nXqrnebXrNUCYZhPohuAvvh 1QmxJeKnqFz4RMt69xMU9lWT1+q2qIa3w5FXl/AoWFfc9qlKxaWxfRm5h9gRTQb6 GbEIiQLVZQvwV4AuN8GoV9RtOG27TagmxGRorBo2fUYa3abRceQ0X1H0ynvS0Rjh 67oUYvhO/ff2dwGcfTI9M3UI2peVsqg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:52 2025 by rpki-client