$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa File: f81b5b09-ba5c-36a6-a17c-dd95da481955.roa (raw, json) Hash identifier: hiYMZiijizUsIOdMuzpwP7SkY36SUnIxTF+l4c9CdRI= Subject key identifier: AA:25:CB:0C:62:3A:BB:ED:6E:B4:C5:FA:BF:5B:8C:51:16:2D:BC:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD824D5E6747938CE4C558 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa Signing time: Thu 21 Aug 2025 17:32:45 +0000 ROA not before: Thu 21 Aug 2025 17:32:45 +0000 ROA not after: Wed 19 Nov 2025 18:32:45 +0000 asID: 31898 IP address blocks: 132.145.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:82:4d:5e:67:47:93:8c:e4:c5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:45 2025 GMT Not After : Nov 19 18:32:45 2025 GMT Subject: CN=9ad0b444-b2d6-4a94-867f-f188d1c6bf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:8e:5b:2a:40:72:d0:a3:c1:c5:64:0f:c9: 07:62:bb:c2:f3:e8:d4:55:54:46:15:e0:ab:b5:7e: 65:65:08:6d:1d:46:90:b9:51:92:e9:93:0d:8a:75: bb:1d:1d:77:3f:66:be:42:4a:3d:1a:34:53:16:63: df:53:93:43:0b:37:18:c4:22:5a:9c:a5:92:5a:03: 3f:ac:96:ae:44:4b:20:7f:01:2c:c6:50:64:db:91: 4e:e8:5c:16:66:18:8c:91:d8:96:9d:da:39:de:a5: 40:0c:49:5a:d5:5d:98:36:e7:d2:f2:a0:4f:ab:43: b7:e3:34:4d:53:13:a3:0a:58:d1:ca:80:61:b1:d8: de:8b:f5:cf:56:3b:a2:62:62:65:73:9e:37:14:ee: 44:09:e5:02:d6:7f:46:b6:f5:26:08:9b:73:ca:5e: 29:7d:66:c3:f3:4f:f0:f1:19:49:aa:6c:e5:8f:2c: 23:41:9e:44:62:9c:2e:11:9b:aa:8b:9f:e2:13:46: fc:e4:d8:13:fc:cd:68:9d:8c:b0:56:96:24:7e:69: ee:4e:90:d0:16:73:0f:14:0e:e8:55:ed:c6:4e:74: d5:f9:a3:60:9b:21:67:aa:e1:6a:a6:ad:98:15:1c: 14:00:96:94:b1:34:fc:d9:7e:08:63:b8:1c:ae:81: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:CB:0C:62:3A:BB:ED:6E:B4:C5:FA:BF:5B:8C:51:16:2D:BC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f81b5b09-ba5c-36a6-a17c-dd95da481955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e6:66:ae:a7:61:6f:d6:73:0f:01:a3:4b:ae:3a:c1:6b:c4: d3:1d:85:c1:c0:7a:3d:3e:c3:65:18:ce:87:27:3c:e7:50:18: b0:87:1d:d1:22:cd:ff:c5:29:34:e7:4b:e3:76:0c:57:ac:9d: 75:3a:0b:bb:2c:49:9e:a2:b5:28:7b:a1:a1:d3:b7:30:7a:24: 6c:09:04:f6:27:6b:71:97:78:15:22:2c:3f:0a:f6:e8:f7:6a: 22:d0:88:60:95:55:78:c2:e8:e6:94:dd:cd:a7:55:98:b9:20: 93:90:77:1e:5a:87:21:cf:92:95:7d:70:72:c9:0f:aa:8e:b1: 56:b6:26:a2:96:2a:70:00:ca:a2:71:4b:bb:61:22:2c:7a:11: 1e:e9:cd:69:dd:e5:ef:4c:f9:30:a7:97:88:38:32:1c:60:49: b7:44:e9:c3:76:0d:8e:de:29:6a:12:8f:c2:d4:6e:6a:e0:9d: 9e:b8:bc:ce:88:06:03:69:e0:67:c3:43:b7:c8:57:82:01:f8: 92:2d:80:22:00:8c:ba:0f:94:d2:04:ae:bc:a3:7e:f2:95:64: 61:72:d6:42:4d:46:4a:f0:8a:58:fb:a9:39:b6:67:e8:99:6f: a4:10:c6:90:a9:36:b4:a2:49:55:f1:0a:1e:4a:ad:5f:8e:39: 65:98:d9:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurYJNXmdHk4zkxVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzI0NVoXDTI1MTExOTE4MzI0NVowLzEtMCsGA1UEAxMk OWFkMGI0NDQtYjJkNi00YTk0LTg2N2YtZjE4OGQxYzZiZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1OOWypActCjwcVkD8kHYrvC8+jUVVRGFeCr tX5lZQhtHUaQuVGS6ZMNinW7HR13P2a+Qko9GjRTFmPfU5NDCzcYxCJanKWSWgM/ rJauREsgfwEsxlBk25FO6FwWZhiMkdiWndo53qVADEla1V2YNufS8qBPq0O34zRN UxOjCljRyoBhsdjei/XPVjuiYmJlc543FO5ECeUC1n9GtvUmCJtzyl4pfWbD80/w 8RlJqmzljywjQZ5EYpwuEZuqi5/iE0b85NgT/M1onYywVpYkfmnuTpDQFnMPFA7o Ve3GTnTV+aNgmyFnquFqpq2YFRwUAJaUsTT82X4IY7gcroHeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKolywxiOrvtbrTF+r9bjFEWLbyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjgxYjViMDktYmE1Yy0z NmE2LWExN2MtZGQ5NWRhNDgxOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXmZq6nYW/Wcw8Bo0uuOsFrxNMdhcHAej0+w2UYzocnPOdQGLCHHdEi zf/FKTTnS+N2DFesnXU6C7ssSZ6itSh7oaHTtzB6JGwJBPYna3GXeBUiLD8K9uj3 aiLQiGCVVXjC6OaU3c2nVZi5IJOQdx5ahyHPkpV9cHLJD6qOsVa2JqKWKnAAyqJx S7thIix6ER7pzWnd5e9M+TCnl4g4MhxgSbdE6cN2DY7eKWoSj8LUbmrgnZ64vM6I BgNp4GfDQ7fIV4IB+JItgCIAjLoPlNIErryjfvKVZGFy1kJNRkrwilj7qTm2Z+iZ b6QQxpCpNrSiSVXxCh5KrV+OOWWY2ac= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:49 2025 by rpki-client