$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: /VR5IR+Gb4dHdoE/WJpfc7R1q3nS/wPAVu+x8dWFCmU= Subject key identifier: 68:B1:42:B1:55:48:72:A6:FF:EA:99:7D:2E:9A:12:7C:ED:DB:33:7E Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584B38219C9E7F88E11BB9F743E0 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:9e:7f:88:e1:1b:b9:f7:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=f99b9753-806f-4c9d-bdda-9f95a43910fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3b:02:d0:04:75:78:f0:4e:8f:e1:10:96:0c: 75:55:a4:5b:37:f0:71:b7:e9:49:16:f8:e2:11:7f: ce:5a:a7:04:8e:95:2e:e3:b1:a9:f7:f9:8d:63:7b: c3:78:b8:70:89:7f:c4:6e:55:02:7f:b7:71:35:0c: 3b:af:15:8a:eb:e3:d7:7a:e6:f4:56:84:7c:c6:a6: 7c:97:6a:40:d1:f1:09:0c:29:3e:f8:6f:3e:86:9a: 17:78:32:49:12:c0:f2:f4:a8:a0:87:61:c9:a0:58: d2:d2:5c:54:52:2d:fc:d9:76:d1:d9:56:ca:4a:ae: 95:dc:ef:b6:b8:4d:a0:7b:4a:09:50:9e:b2:db:c3: 80:af:0a:c0:df:3f:f5:bd:b1:80:61:fa:1e:53:b9: 4e:bb:16:9c:7e:45:df:3a:16:d4:4a:de:c9:ec:db: 3d:56:97:e1:fe:51:4a:93:f4:49:e8:e2:4f:7a:14: 99:78:91:61:7f:1d:d1:99:0c:37:8d:be:f0:7e:1c: 87:36:fb:ca:33:97:b3:82:4e:01:00:d1:13:0b:63: 59:be:aa:36:06:c4:b2:29:42:51:f9:f1:ab:ff:f1: 63:57:77:0c:52:86:b1:eb:3c:8d:95:a8:65:12:08: e6:6a:53:3f:68:43:fc:af:80:b4:2b:6b:6a:b6:ca: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:42:B1:55:48:72:A6:FF:EA:99:7D:2E:9A:12:7C:ED:DB:33:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4d:e6:b2:b3:03:4d:1a:d7:75:50:86:5c:05:4b:b8:d1:61: bf:28:ca:a7:ae:45:d3:3f:a7:04:3d:12:39:58:50:0e:42:e0: 13:c6:0a:8f:dc:67:65:2a:a2:48:13:15:cf:d6:3d:59:41:c8: 61:da:26:67:d0:9e:7c:ae:3e:49:b3:59:1e:65:01:77:54:b1: 07:66:57:27:ff:e0:91:4a:d2:d0:be:38:1c:ef:78:b4:a1:6a: 28:ba:d9:c0:45:b0:46:9f:75:2e:7c:9b:29:78:ac:e9:b8:3a: f6:20:29:87:c5:97:ed:f2:d9:f6:b8:8c:e2:a1:2d:6a:11:6e: d8:91:f7:28:5b:b9:e3:6f:7f:19:f6:22:64:b5:50:ee:d0:ae: db:94:a6:33:cf:7f:90:5d:ce:62:3b:15:11:87:a2:ce:28:96: b4:cc:4f:f9:5d:82:a6:15:bb:ca:b2:05:a1:84:5d:0d:e9:0c: 0a:57:f0:43:2e:93:2c:1f:98:b1:6b:25:21:2d:91:7f:d5:b0: 62:ff:03:38:c3:97:7c:55:9c:13:fa:97:de:ef:4c:aa:05:f5: c1:99:7d:44:5d:b6:8f:8d:be:d7:a5:e7:3e:5f:6f:2f:35:21: 52:ea:bd:81:d0:5d:9a:78:e1:8d:5a:75:d6:ab:25:a3:e5:6f: 21:0a:8e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZyef4jhG7n3Q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk Zjk5Yjk3NTMtODA2Zi00YzlkLWJkZGEtOWY5NWE0MzkxMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zsC0AR1ePBOj+EQlgx1VaRbN/Bxt+lJFvji EX/OWqcEjpUu47Gp9/mNY3vDeLhwiX/EblUCf7dxNQw7rxWK6+PXeub0VoR8xqZ8 l2pA0fEJDCk++G8+hpoXeDJJEsDy9Kigh2HJoFjS0lxUUi382XbR2VbKSq6V3O+2 uE2ge0oJUJ6y28OArwrA3z/1vbGAYfoeU7lOuxacfkXfOhbUSt7J7Ns9Vpfh/lFK k/RJ6OJPehSZeJFhfx3RmQw3jb7wfhyHNvvKM5ezgk4BANETC2NZvqo2BsSyKUJR +fGr//FjV3cMUoax6zyNlahlEgjmalM/aEP8r4C0K2tqtsr9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGixQrFVSHKm/+qZfS6aEnzt2zN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBN5rKzA00a13VQhlwFS7jRYb8oyqeuRdM/pwQ9EjlYUA5C4BPGCo/c Z2UqokgTFc/WPVlByGHaJmfQnnyuPkmzWR5lAXdUsQdmVyf/4JFK0tC+OBzveLSh aii62cBFsEafdS58myl4rOm4OvYgKYfFl+3y2fa4jOKhLWoRbtiR9yhbueNvfxn2 ImS1UO7QrtuUpjPPf5BdzmI7FRGHos4olrTMT/ldgqYVu8qyBaGEXQ3pDApX8EMu kywfmLFrJSEtkX/VsGL/AzjDl3xVnBP6l97vTKoF9cGZfURdto+Nvtel5z5fby81 IVLqvYHQXZp44Y1addarJaPlbyEKjrc= -----END CERTIFICATE-----Generated at Wed Sep 17 09:08:04 2025 by rpki-client