$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa File: d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa (raw, json) Hash identifier: KUTGWF6Np5+eGdT/CzXB+h9yXa/TqgHmyOcoSa3TdnM= Subject key identifier: 49:5B:70:49:DA:E4:78:CF:2A:35:0F:22:4F:0D:E7:D1:66:F9:03:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B271967CC8BBA550BD4F82300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa Signing time: Wed 10 Sep 2025 22:35:25 +0000 ROA not before: Wed 10 Sep 2025 22:35:25 +0000 ROA not after: Tue 09 Dec 2025 23:35:25 +0000 asID: 54253 IP address blocks: 131.186.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:67:cc:8b:ba:55:0b:d4:f8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:35:25 2025 GMT Not After : Dec 9 23:35:25 2025 GMT Subject: CN=0ebf7f3a-db32-46ac-8f61-0733c53d79cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:7f:d5:1f:66:dd:bc:e1:55:f6:24:af:63: 62:68:71:f4:8b:79:4f:95:c5:06:16:8b:03:b2:ea: f0:c4:e4:a4:17:94:a7:57:15:f4:29:08:1c:65:84: d8:c5:6b:ea:ee:47:0d:03:5d:52:b7:6d:93:67:b9: 0c:08:38:53:09:23:04:aa:89:0a:17:56:d1:e5:ff: bc:fb:7a:3f:00:48:36:0f:7c:e9:0e:fc:1f:a4:78: 68:ab:c4:78:79:68:cd:86:c6:22:c1:e6:7a:64:b4: 25:b3:3c:44:5e:35:94:8b:cf:46:ca:b6:ac:25:f4: 46:18:63:48:25:da:d0:31:f3:66:7d:50:8d:05:cd: d6:56:d2:44:97:e0:07:32:a5:8f:63:4b:d4:8e:31: 12:60:42:88:11:14:0b:bc:b5:a6:25:14:c1:6d:c9: 68:f3:14:9a:f5:a6:85:68:27:11:dc:59:81:86:2b: bd:6f:c8:f3:fd:29:7c:24:74:8e:fa:d3:ef:9d:ee: 9a:d0:d3:2e:cd:cb:80:30:72:76:b1:c4:c9:e7:51: 42:eb:5e:b0:7c:d9:00:60:21:e6:0d:1e:87:9d:51: 04:34:53:cf:bb:c3:83:75:fe:fc:ef:3e:02:8d:2b: 05:19:fb:f4:53:27:3f:9f:48:d8:f6:44:f5:43:e2: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5B:70:49:DA:E4:78:CF:2A:35:0F:22:4F:0D:E7:D1:66:F9:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d9:75:af:57:bf:1a:d3:1b:8b:38:37:e0:84:96:b9:44:63: f5:06:7b:b6:04:d6:f0:c3:33:d7:c5:62:42:5b:1e:53:cb:3e: f6:20:0c:49:88:23:9d:9c:58:c0:57:ac:d8:19:96:6f:81:46: 98:7f:7d:fe:e9:5d:43:86:be:c7:c5:92:5c:42:91:29:02:8f: ce:96:bb:5c:4b:ab:88:79:cd:6b:4c:14:75:01:14:0e:11:13: e5:d2:32:1e:2b:ba:a6:12:f7:bc:c9:04:18:f1:17:56:b3:79: bb:c5:8d:b9:d4:e9:8a:6a:20:c0:cb:af:a5:87:ac:65:72:e5: 10:72:0c:3c:27:cd:33:bd:b4:7b:8d:a3:e2:8b:80:50:8c:2c: c6:9f:df:63:05:fa:3f:89:7b:2a:00:2d:2d:42:ce:63:2a:7e: ea:9e:bb:e0:33:f0:b7:54:6a:2e:a5:9e:35:5c:e3:97:38:31: 5e:ce:49:eb:11:d7:e7:0a:6c:a6:19:84:ca:db:70:4a:95:70: 48:3b:28:3d:68:e5:4c:3c:49:77:44:72:e7:18:24:5c:1a:f2: ea:29:3c:07:89:fd:0b:e9:8a:8f:fb:37:05:d7:1d:96:a8:76: d3:38:a6:08:08:6f:5c:28:94:ef:2b:e0:fe:0c:a3:38:f9:b9: 06:f5:6c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGWfMi7pVC9T4IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzUyNVoXDTI1MTIwOTIzMzUyNVowLzEtMCsGA1UEAxMk MGViZjdmM2EtZGIzMi00NmFjLThmNjEtMDczM2M1M2Q3OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12h/1R9m3bzhVfYkr2NiaHH0i3lPlcUGFosD surwxOSkF5SnVxX0KQgcZYTYxWvq7kcNA11St22TZ7kMCDhTCSMEqokKF1bR5f+8 +3o/AEg2D3zpDvwfpHhoq8R4eWjNhsYiweZ6ZLQlszxEXjWUi89GyrasJfRGGGNI JdrQMfNmfVCNBc3WVtJEl+AHMqWPY0vUjjESYEKIERQLvLWmJRTBbclo8xSa9aaF aCcR3FmBhiu9b8jz/Sl8JHSO+tPvne6a0NMuzcuAMHJ2scTJ51FC616wfNkAYCHm DR6HnVEENFPPu8ODdf787z4CjSsFGfv0Uyc/n0jY9kT1Q+Jt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElbcEna5HjPKjUPIk8N59Fm+QO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDlkYzViNWUtZjk2ZC0z ZjhkLWEwNDgtMjQ3ZjBmMjY5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg7psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTZda9XvxrTG4s4N+CElrlEY/UGe7YE1vDDM9fFYkJbHlPLPvYgDEmI I52cWMBXrNgZlm+BRph/ff7pXUOGvsfFklxCkSkCj86Wu1xLq4h5zWtMFHUBFA4R E+XSMh4ruqYS97zJBBjxF1azebvFjbnU6YpqIMDLr6WHrGVy5RByDDwnzTO9tHuN o+KLgFCMLMaf32MF+j+JeyoALS1CzmMqfuqeu+Az8LdUai6lnjVc45c4MV7OSesR 1+cKbKYZhMrbcEqVcEg7KD1o5Uw8SXdEcucYJFwa8uopPAeJ/Qvpio/7NwXXHZao dtM4pggIb1wolO8r4P4Mozj5uQb1bCo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:27 2025 by rpki-client