$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa File: 028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa (raw, json) Hash identifier: yLp33FEs77Auvp/WzddRJc2EFrtpmQepobxb5+la+tQ= Subject key identifier: 36:B2:AD:2E:B4:62:6E:BD:1B:A3:BF:56:BF:53:A1:01:38:73:9A:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2482268F6686376789D09000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa Signing time: Wed 10 Sep 2025 00:19:02 +0000 ROA not before: Wed 10 Sep 2025 00:19:02 +0000 ROA not after: Tue 09 Dec 2025 01:19:02 +0000 asID: 54253 IP address blocks: 134.185.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:26:8f:66:86:37:67:89:d0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:19:02 2025 GMT Not After : Dec 9 01:19:02 2025 GMT Subject: CN=91278df5-55c2-4871-a962-e7f175daf42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:27:7d:6d:91:d7:36:c2:8c:3f:53:ef:1c: 1a:6e:f1:c2:9a:c7:88:4a:e6:22:6c:33:76:43:ca: 00:0f:51:7d:09:e2:06:76:bd:bc:28:06:d8:02:b3: fd:22:9d:2f:8f:36:33:db:6d:5c:f0:58:7c:0a:71: a9:ae:df:3e:40:5e:e6:b0:51:ee:fb:ee:b7:10:af: 39:dc:03:eb:47:13:47:1e:2f:24:3b:71:1f:01:48: 20:47:08:df:9f:6d:f7:06:7c:5b:ec:fc:ea:f6:1d: ce:56:13:1d:e9:9c:e6:01:15:e1:39:80:62:f5:76: c9:16:a8:c7:c6:70:b8:09:95:fe:ea:98:54:2f:82: e1:56:43:b4:b8:fd:92:14:de:b3:ae:19:1a:5c:78: bd:54:a4:9a:96:22:9c:d2:03:c5:0a:0c:e4:2f:68: ee:0d:2c:da:ca:6e:0c:55:a3:57:4b:6f:87:e7:5c: 84:2e:fe:86:63:5c:bc:3c:ab:6b:25:fa:cd:33:ea: a2:6e:25:3e:69:d9:65:db:5b:10:22:a4:8f:1d:ec: 12:a4:d8:26:51:bc:d0:4b:a3:4a:03:b6:1b:29:1d: b6:2c:b7:f7:26:5c:99:b5:21:5e:7b:58:48:1f:2a: f9:06:d3:2d:2a:f4:6b:8a:a1:f1:64:f6:a1:24:ed: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:AD:2E:B4:62:6E:BD:1B:A3:BF:56:BF:53:A1:01:38:73:9A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:eb:a8:c4:45:4c:73:d1:d6:cd:eb:d6:17:ca:06:36:1b:30: 84:b3:ac:50:ec:90:97:e0:5d:32:c4:67:5c:ec:c6:fd:76:ce: 5e:f6:64:cb:19:ac:9a:d6:4d:00:31:84:47:ae:b9:6d:9a:2f: ac:70:19:51:5f:9d:69:00:06:15:93:bc:8d:c8:31:44:14:76: 4d:23:74:49:f0:9b:6a:d6:3f:68:8a:39:64:a2:e5:df:72:36: c6:92:c4:77:a7:f4:da:5a:b5:23:a0:7d:ea:e0:ca:7e:29:77: 33:bc:85:1f:3d:a1:c2:98:00:6f:aa:83:71:f9:8b:40:58:cc: 76:e4:a0:e4:a6:75:ed:8a:bf:63:f3:df:28:03:9c:1b:93:7b: ec:06:62:80:a7:5e:45:0f:e8:ae:bf:0e:49:9b:50:2f:7a:51: 02:0b:7c:be:1b:d6:09:e8:3f:fb:6f:e6:58:de:02:ce:fa:f9: 33:57:92:a3:0c:1c:b4:3b:4f:bf:32:4a:d8:fb:52:93:f1:1b: c7:6b:f7:1c:9a:1b:a3:3b:8e:73:6c:3a:3c:bd:a2:f4:96:03: 4d:e6:53:e9:2c:3f:c3:2e:fd:98:83:53:62:26:d4:e6:de:52: a6:88:bd:9e:34:b8:3f:ff:25:fe:f4:2b:98:aa:24:c7:ff:d5: a5:c8:02:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskgiaPZoY3Z4nQkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTkwMloXDTI1MTIwOTAxMTkwMlowLzEtMCsGA1UEAxMk OTEyNzhkZjUtNTVjMi00ODcxLWE5NjItZTdmMTc1ZGFmNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAcnfW2R1zbCjD9T7xwabvHCmseISuYibDN2 Q8oAD1F9CeIGdr28KAbYArP9Ip0vjzYz221c8Fh8CnGprt8+QF7msFHu++63EK85 3APrRxNHHi8kO3EfAUggRwjfn233Bnxb7Pzq9h3OVhMd6ZzmARXhOYBi9XbJFqjH xnC4CZX+6phUL4LhVkO0uP2SFN6zrhkaXHi9VKSaliKc0gPFCgzkL2juDSzaym4M VaNXS2+H51yELv6GY1y8PKtrJfrNM+qibiU+adll21sQIqSPHewSpNgmUbzQS6NK A7YbKR22LLf3JlyZtSFee1hIHyr5BtMtKvRriqHxZPahJO1M9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDayrS60Ym69G6O/Vr9ToQE4c5r4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDI4ZTJkODgtYzhlYS0z YzllLTgxYzMtMDIwMGFhZTViNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbrqMRFTHPR1s3r1hfKBjYbMISzrFDskJfgXTLEZ1zsxv12zl72ZMsZ rJrWTQAxhEeuuW2aL6xwGVFfnWkABhWTvI3IMUQUdk0jdEnwm2rWP2iKOWSi5d9y NsaSxHen9NpatSOgfergyn4pdzO8hR89ocKYAG+qg3H5i0BYzHbkoOSmde2Kv2Pz 3ygDnBuTe+wGYoCnXkUP6K6/DkmbUC96UQILfL4b1gnoP/tv5ljeAs76+TNXkqMM HLQ7T78yStj7UpPxG8dr9xyaG6M7jnNsOjy9ovSWA03mU+ksP8Mu/ZiDU2Im1Obe UqaIvZ40uD//Jf70K5iqJMf/1aXIAug= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:45 2025 by rpki-client