$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa File: 9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa (raw, json) Hash identifier: m/a3f1fslWX/W/Wg9OPg6NrnzsYpedtLcGJCtdNeFQk= Subject key identifier: 11:BF:95:2C:86:8E:3F:89:3A:32:9E:3E:1B:05:F5:4E:03:33:BC:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E5A27AD26DDB85E60BCEE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa Signing time: Wed 10 Sep 2025 20:51:06 +0000 ROA not before: Wed 10 Sep 2025 20:51:06 +0000 ROA not after: Tue 09 Dec 2025 21:51:06 +0000 asID: 54253 IP address blocks: 167.234.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:a2:7a:d2:6d:db:85:e6:0b:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:51:06 2025 GMT Not After : Dec 9 21:51:06 2025 GMT Subject: CN=bb289665-9a95-4a5f-9c23-d6d37de57fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:43:91:7d:ee:f1:56:b7:78:7a:59:77:0b: 91:2b:51:d4:03:07:4e:a9:28:ea:aa:d3:11:62:64: d2:3c:5e:67:6d:57:8f:b5:1b:b5:28:8b:66:cd:80: 1b:f8:ca:53:c5:6c:d0:d1:bd:be:08:4c:1a:e7:bc: a2:94:ae:f4:92:74:a7:bb:78:2b:c5:cc:55:fb:25: d9:f1:8c:89:a7:96:3f:78:2c:6d:57:20:e4:ba:7f: 13:84:7d:07:5d:b9:b8:55:37:df:5b:7b:a8:5a:24: e0:14:fc:b5:1e:d8:e9:fe:ca:02:43:57:f9:b8:7a: 95:f3:3b:32:22:93:ab:c4:46:7a:d1:0a:86:b8:09: 5b:64:7c:75:34:93:b8:c4:b3:d8:5c:45:2d:e6:3f: 52:5e:90:79:3a:22:fa:41:73:a4:de:d8:bc:0f:f8: 3d:34:c2:b0:ba:c2:70:81:44:20:f3:79:48:90:1a: 4e:0f:2b:5f:fa:43:5a:06:44:62:8b:44:5d:44:b0: 38:5f:c1:8e:8c:22:0e:c5:2c:3a:3f:07:bb:1d:4d: 6d:b1:9b:ef:61:21:9d:1a:6c:7c:4f:5a:8b:9c:f6: f3:53:b7:95:ab:91:de:2f:ef:00:97:cb:be:a4:69: e5:8f:90:d3:d9:a8:99:df:d0:3a:a3:8a:3e:2b:49: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BF:95:2C:86:8E:3F:89:3A:32:9E:3E:1B:05:F5:4E:03:33:BC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.234.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:44:53:0f:8c:95:42:27:0b:2a:49:c4:f2:f9:1d:24:d0:1b: d5:ad:f5:5a:76:1d:3f:de:af:1f:2e:3d:25:77:91:65:a8:f8: 3c:57:3d:ee:68:79:b0:26:0a:1b:c7:85:c0:a5:e9:74:cc:ea: 59:9b:0c:2f:53:38:c2:a7:2e:a1:7f:04:d4:81:7c:a5:b6:a4: c6:d9:5b:fb:71:93:bf:5c:db:20:74:f1:f1:92:0e:b2:1d:af: f2:e8:b6:69:b9:7e:fe:39:c1:1b:7e:ad:5b:90:03:7c:00:f9: 44:3b:8c:60:b0:97:25:2e:48:66:ce:2f:6e:77:85:08:97:e7: 6e:fc:d6:25:7d:ba:d7:ba:a5:e6:45:0f:91:a9:e2:85:7c:bb: d3:1d:3a:5a:94:0e:02:9a:d4:66:de:8e:66:de:c3:7b:20:3e: f1:d5:7a:80:e3:57:d1:ad:a4:4a:66:70:30:e4:7c:19:99:d8: d6:1d:0f:8d:33:5e:ce:6e:87:a7:05:a4:13:57:10:52:f4:1e: 08:46:9f:9b:60:e6:25:ff:ab:e6:ee:94:5d:eb:6c:49:99:bb: 90:a3:48:ce:85:a1:12:e6:09:9a:a3:f5:5c:40:68:26:02:c2: 8d:24:72:74:a8:01:ab:12:bc:83:33:90:46:e7:b1:cb:3f:59: b9:31:1e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5aJ60m3bheYLzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTEwNloXDTI1MTIwOTIxNTEwNlowLzEtMCsGA1UEAxMk YmIyODk2NjUtOWE5NS00YTVmLTljMjMtZDZkMzdkZTU3ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmJDkX3u8Va3eHpZdwuRK1HUAwdOqSjqqtMR YmTSPF5nbVePtRu1KItmzYAb+MpTxWzQ0b2+CEwa57yilK70knSnu3grxcxV+yXZ 8YyJp5Y/eCxtVyDkun8ThH0HXbm4VTffW3uoWiTgFPy1Htjp/soCQ1f5uHqV8zsy IpOrxEZ60QqGuAlbZHx1NJO4xLPYXEUt5j9SXpB5OiL6QXOk3ti8D/g9NMKwusJw gUQg83lIkBpODytf+kNaBkRii0RdRLA4X8GOjCIOxSw6Pwe7HU1tsZvvYSGdGmx8 T1qLnPbzU7eVq5HeL+8Al8u+pGnlj5DT2aiZ39A6o4o+K0mcvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG/lSyGjj+JOjKePhsF9U4DM7xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0ZGU1ZWMtZDE5Zi0z ZGMwLWEyYjQtYmFiOThjMmRjNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp+qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJEUw+MlUInCypJxPL5HSTQG9Wt9Vp2HT/erx8uPSV3kWWo+DxXPe5o ebAmChvHhcCl6XTM6lmbDC9TOMKnLqF/BNSBfKW2pMbZW/txk79c2yB08fGSDrId r/Lotmm5fv45wRt+rVuQA3wA+UQ7jGCwlyUuSGbOL253hQiX52781iV9ute6peZF D5Gp4oV8u9MdOlqUDgKa1Gbejmbew3sgPvHVeoDjV9GtpEpmcDDkfBmZ2NYdD40z Xs5uh6cFpBNXEFL0HghGn5tg5iX/q+bulF3rbEmZu5CjSM6FoRLmCZqj9VxAaCYC wo0kcnSoAasSvIMzkEbnscs/WbkxHsg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:08 2025 by rpki-client