$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da2f269b-7e2a-3e93-be8f-1211872b2b38.roa File: da2f269b-7e2a-3e93-be8f-1211872b2b38.roa (raw, json) Hash identifier: yys/GsjbTgnjvH+u7BADpbfxRImQMyJ88izJ4YCnKWg= Subject key identifier: 12:7B:9F:2E:3A:BC:A9:FC:7D:25:82:FE:46:FE:91:9B:03:20:11:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42B912110BC7E08A6B6C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da2f269b-7e2a-3e93-be8f-1211872b2b38.roa Signing time: Tue 26 Aug 2025 22:54:43 +0000 ROA not before: Tue 26 Aug 2025 22:54:43 +0000 ROA not after: Mon 24 Nov 2025 23:54:43 +0000 asID: 31898 IP address blocks: 134.185.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:b9:12:11:0b:c7:e0:8a:6b:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:43 2025 GMT Not After : Nov 24 23:54:43 2025 GMT Subject: CN=c67ca243-7cac-4cf4-a008-3e3dc161896d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:20:f4:3b:a3:b5:2b:6d:4d:61:a3:6e:88: 15:ae:14:56:72:46:15:cb:a3:87:c8:91:f8:41:76: 7e:2d:e4:4b:2b:5b:4e:ed:b9:1f:ba:3b:0c:88:db: ee:63:1a:c8:44:e3:35:41:2e:f5:8f:7d:da:36:62: 29:99:3d:d4:ab:7e:a6:ee:ba:3c:61:b5:e9:05:21: 16:c1:0b:2f:a0:ca:ed:d4:48:5c:98:8a:d8:f7:e5: eb:d0:c5:d0:59:dd:bf:c5:30:23:8e:7f:9a:cc:1f: 8b:f9:2a:d9:0c:90:af:81:04:23:49:72:37:af:30: f2:8e:47:b7:3c:96:d6:a3:e3:d7:a2:d8:78:da:d4: de:90:bc:c0:bd:b7:49:d1:44:b5:37:b1:fb:ef:27: 3f:1f:b6:7f:b7:71:d7:74:29:ba:d8:6d:99:b3:b4: fe:51:d6:64:bf:58:7b:b0:7a:9a:07:d0:dd:83:af: f4:80:3c:53:7a:03:96:6c:b1:af:c4:af:e1:a1:51: b1:87:b6:32:9e:f8:b7:c3:7e:0c:e6:e8:18:16:60: f9:8d:1a:89:a6:1a:11:40:c3:1c:3d:07:fd:bf:fb: 4f:85:cb:dc:80:13:ed:3c:24:c6:38:13:17:93:4b: d6:92:e7:8f:41:a7:e1:cf:8e:af:ad:04:80:0e:27: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:9F:2E:3A:BC:A9:FC:7D:25:82:FE:46:FE:91:9B:03:20:11:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da2f269b-7e2a-3e93-be8f-1211872b2b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:55:76:99:3a:19:f9:84:05:0a:03:fb:a8:cd:0b:33:3a:1e: c2:e0:77:23:0a:ad:31:62:27:0d:0f:ef:ac:56:8d:a0:58:91: 93:47:82:9c:34:df:4a:6a:30:36:57:18:fe:b7:65:c9:b4:fc: d8:ca:c9:7e:ce:7b:5a:94:6b:aa:6b:94:39:a0:22:1b:c4:78: 1f:08:c5:14:e2:4a:a8:48:ab:91:aa:a7:11:58:45:c8:98:8e: cf:d0:de:b0:9d:c4:b0:29:a1:98:9e:19:34:27:e8:d4:f9:90: 65:9c:82:92:dd:26:c6:5b:d3:34:c4:c9:64:c1:23:d9:a6:15: 7c:fb:18:4a:7d:2d:50:4b:ff:50:58:3a:d6:4e:65:11:6f:03: fc:f2:88:2d:3f:9b:82:6c:d6:97:7f:9b:b2:52:02:5b:ca:18: be:ca:f2:be:33:1b:92:02:e0:f7:e5:cf:6a:86:e3:56:e8:5e: c6:67:73:d8:01:89:46:7f:f8:99:dd:69:4e:04:96:f9:b9:1d: 13:85:f5:1d:30:ec:4a:71:3a:3f:05:b9:4e:bf:47:ab:5e:8e: 8c:2b:e4:bd:88:5f:ed:94:fa:c6:30:d4:02:59:e1:a6:aa:4a: a0:2c:27:98:4a:23:91:d4:00:76:5d:17:bb:52:29:af:8e:8b: 16:0f:ba:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QrkSEQvH4IprbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQ0M1oXDTI1MTEyNDIzNTQ0M1owLzEtMCsGA1UEAxMk YzY3Y2EyNDMtN2NhYy00Y2Y0LWEwMDgtM2UzZGMxNjE4OTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQg9DujtSttTWGjbogVrhRWckYVy6OHyJH4 QXZ+LeRLK1tO7bkfujsMiNvuYxrIROM1QS71j33aNmIpmT3Uq36m7ro8YbXpBSEW wQsvoMrt1EhcmIrY9+Xr0MXQWd2/xTAjjn+azB+L+SrZDJCvgQQjSXI3rzDyjke3 PJbWo+PXoth42tTekLzAvbdJ0US1N7H77yc/H7Z/t3HXdCm62G2Zs7T+UdZkv1h7 sHqaB9Ddg6/0gDxTegOWbLGvxK/hoVGxh7Yynvi3w34M5ugYFmD5jRqJphoRQMMc PQf9v/tPhcvcgBPtPCTGOBMXk0vWkuePQafhz46vrQSADidjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ7ny46vKn8fSWC/kb+kZsDIBGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGEyZjI2OWItN2UyYS0z ZTkzLWJlOGYtMTIxMTg3MmIyYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRVdpk6GfmEBQoD+6jNCzM6HsLgdyMKrTFiJw0P76xWjaBYkZNHgpw0 30pqMDZXGP63Zcm0/NjKyX7Oe1qUa6prlDmgIhvEeB8IxRTiSqhIq5GqpxFYRciY js/Q3rCdxLApoZieGTQn6NT5kGWcgpLdJsZb0zTEyWTBI9mmFXz7GEp9LVBL/1BY OtZOZRFvA/zyiC0/m4Js1pd/m7JSAlvKGL7K8r4zG5IC4Pflz2qG41boXsZnc9gB iUZ/+JndaU4Elvm5HROF9R0w7EpxOj8FuU6/R6tejowr5L2IX+2U+sYw1AJZ4aaq SqAsJ5hKI5HUAHZdF7tSKa+OixYPupc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:24 2025 by rpki-client