$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa File: 95214554-aa85-3bbc-abf0-3612bda2be04.roa (raw, json) Hash identifier: l2bqnRyuhzuksKV0LgEVWcY2c+vvGtN5qwy/pyezXQE= Subject key identifier: D8:05:2D:82:B0:56:50:63:15:5C:C5:9F:98:88:75:27:C7:CE:E8:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA527737F52D2D867FE500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa Signing time: Thu 21 Aug 2025 10:27:14 +0000 ROA not before: Thu 21 Aug 2025 10:27:14 +0000 ROA not after: Wed 19 Nov 2025 11:27:14 +0000 asID: 31898 IP address blocks: 137.131.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:52:77:37:f5:2d:2d:86:7f:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:14 2025 GMT Not After : Nov 19 11:27:14 2025 GMT Subject: CN=92b585e5-781b-43a2-83ac-c87f09c6ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:3e:3c:da:fa:16:6e:a6:cc:7e:15:e0:54: 02:11:c5:81:32:ee:af:2c:29:b3:b5:1f:b5:28:94: eb:65:bf:5e:a7:90:02:a8:2b:66:3a:7d:99:0c:d2: 39:73:5f:62:5b:4d:83:a1:6e:fb:06:dc:27:b6:da: 27:f6:87:9b:99:ba:fd:97:46:84:13:be:ea:82:e8: 68:f6:95:6a:87:97:f7:cc:3c:5a:c5:20:df:23:63: 05:5a:fe:b2:7d:c8:ac:aa:c1:50:1e:14:73:43:6f: a8:bb:18:04:74:3d:a1:3d:23:59:04:48:71:8f:44: 34:46:bb:45:01:ea:c0:a9:bf:85:da:69:63:83:1c: 22:8c:ae:8b:dd:b2:49:cd:cd:be:3f:68:68:5b:d1: 1e:a3:f6:66:3e:46:b4:fe:97:c8:f2:be:ba:b1:1a: 0c:b5:9d:58:1f:06:47:c4:25:99:2e:27:b0:ee:82: ec:27:1c:d2:35:6d:76:c9:70:75:f1:86:d5:9a:8a: 2f:0f:e1:43:a5:44:66:87:c3:8e:a3:7f:ce:6a:24: ed:41:9e:80:27:96:68:86:98:32:98:62:81:00:42: d5:9a:04:8e:0c:bc:16:d8:02:b6:15:07:b8:14:11: 13:63:22:6e:e7:26:c8:67:41:a7:d7:95:88:51:66: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:2D:82:B0:56:50:63:15:5C:C5:9F:98:88:75:27:C7:CE:E8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/95214554-aa85-3bbc-abf0-3612bda2be04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6f:69:c3:64:be:e0:f5:ab:d1:9f:91:97:82:ef:fb:71:a5: 96:26:4c:a7:5a:d6:1f:7b:04:8b:85:a5:dd:75:2c:80:24:4d: 6e:16:c7:f7:a0:aa:0a:3d:79:e1:e9:a0:20:7d:7a:6f:e5:58: 62:63:0c:a9:13:64:9f:27:bd:be:38:f6:e9:37:d2:df:80:23: 95:08:11:d9:03:c9:1c:7b:dc:6a:8c:e6:59:20:4b:a5:cf:e9: 15:13:12:0d:4e:a8:7f:49:1f:9e:15:22:5f:74:49:ba:de:a4: d3:c5:49:fa:60:a7:40:d2:67:c6:1e:13:b7:a9:f0:69:2c:24: 32:0e:b4:27:46:b0:cf:ad:37:12:3f:ed:4c:ac:e9:ef:a4:6f: 01:e9:99:56:a7:70:2d:15:6a:91:ae:69:84:17:fa:d7:69:76: 20:a3:d0:ee:27:c4:d5:9f:dd:fb:d6:02:50:57:98:a8:3e:0b: 7b:0b:c3:74:84:9d:a0:01:95:15:9a:b3:9b:b8:22:98:a3:4c: 90:22:8c:55:db:f7:21:34:c6:08:f5:5d:23:93:0a:df:96:31: 36:a5:df:fa:d9:90:b9:cd:b2:2f:ac:02:27:3e:c9:bc:8c:a9: 62:c5:11:a1:f8:e6:23:3d:3c:88:49:7a:f8:f7:70:cb:75:89: 33:6c:23:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2lJ3N/UtLYZ/5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjcxNFoXDTI1MTExOTExMjcxNFowLzEtMCsGA1UEAxMk OTJiNTg1ZTUtNzgxYi00M2EyLTgzYWMtYzg3ZjA5YzZhZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUk+PNr6Fm6mzH4V4FQCEcWBMu6vLCmztR+1 KJTrZb9ep5ACqCtmOn2ZDNI5c19iW02DoW77Btwntton9oebmbr9l0aEE77qguho 9pVqh5f3zDxaxSDfI2MFWv6yfcisqsFQHhRzQ2+ouxgEdD2hPSNZBEhxj0Q0RrtF AerAqb+F2mljgxwijK6L3bJJzc2+P2hoW9Eeo/ZmPka0/pfI8r66sRoMtZ1YHwZH xCWZLiew7oLsJxzSNW12yXB18YbVmoovD+FDpURmh8OOo3/OaiTtQZ6AJ5Zohpgy mGKBAELVmgSODLwW2AK2FQe4FBETYyJu5ybIZ0Gn15WIUWbiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgFLYKwVlBjFVzFn5iIdSfHzujUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTUyMTQ1NTQtYWE4NS0z YmJjLWFiZjAtMzYxMmJkYTJiZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiYOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBvacNkvuD1q9GfkZeC7/txpZYmTKda1h97BIuFpd11LIAkTW4Wx/eg qgo9eeHpoCB9em/lWGJjDKkTZJ8nvb449uk30t+AI5UIEdkDyRx73GqM5lkgS6XP 6RUTEg1OqH9JH54VIl90SbrepNPFSfpgp0DSZ8YeE7ep8GksJDIOtCdGsM+tNxI/ 7Uys6e+kbwHpmVancC0VapGuaYQX+tdpdiCj0O4nxNWf3fvWAlBXmKg+C3sLw3SE naABlRWas5u4IpijTJAijFXb9yE0xgj1XSOTCt+WMTal3/rZkLnNsi+sAic+ybyM qWLFEaH45iM9PIhJevj3cMt1iTNsI4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:02 2025 by rpki-client