$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/280ed90a-ff6a-3cd4-b017-40207fa4a29f.roa File: 280ed90a-ff6a-3cd4-b017-40207fa4a29f.roa (raw, json) Hash identifier: CgLPpsPs0cNgJyunXlv58t1YcbklcgaCwaVShk0rh5E= Subject key identifier: 36:D2:87:1E:1F:8A:3F:92:D7:38:F7:1D:ED:BD:64:68:FA:4F:DD:D7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B24824175B382839FBC4AC740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/280ed90a-ff6a-3cd4-b017-40207fa4a29f.roa Signing time: Wed 10 Sep 2025 00:19:15 +0000 ROA not before: Wed 10 Sep 2025 00:19:15 +0000 ROA not after: Tue 09 Dec 2025 01:19:15 +0000 asID: 54253 IP address blocks: 134.185.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:41:75:b3:82:83:9f:bc:4a:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:19:15 2025 GMT Not After : Dec 9 01:19:15 2025 GMT Subject: CN=0e518047-6be7-43e9-a0ed-e8ebb95c5caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:31:1c:e8:c4:45:62:7d:61:07:71:06:ac: ce:12:6e:d9:89:d7:42:33:98:8d:26:e8:6e:76:c2: 2e:27:06:93:ef:53:10:07:06:8c:af:c3:d4:1d:1c: c3:f1:f7:2a:ae:ae:b5:32:16:1e:98:16:b0:da:cc: 4e:41:26:a2:1c:48:61:52:22:01:aa:47:a0:fb:a0: 19:a8:ff:46:35:6c:4e:75:ea:d2:69:dc:42:2f:43: aa:a7:38:c9:3c:d0:74:e5:bc:35:38:6d:4c:60:be: dd:03:9a:d5:4c:4e:0b:34:7b:4e:dd:4d:03:d5:4c: 3f:9b:58:0c:c6:31:d5:f0:1b:9f:b4:35:75:1d:9a: f0:5c:e4:8b:07:b6:f1:3e:f3:7d:de:ac:28:21:2d: 5d:97:0b:41:58:48:b9:5f:33:b2:f3:d2:bd:db:ab: 62:69:2c:1c:1e:d3:31:25:94:3b:6e:89:0e:a5:af: cc:76:6b:b8:2a:3f:8a:18:1a:90:d7:15:08:bd:ae: d6:54:67:13:e3:38:48:6a:54:be:99:25:a5:4e:6c: f4:9f:bc:7c:e0:9b:db:d4:89:cb:26:2d:6b:c7:37: 9e:c4:33:32:2b:9f:0d:8e:fe:38:45:94:0a:fa:63: 75:d8:c7:5f:00:79:13:39:b3:de:a2:15:7a:05:2a: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D2:87:1E:1F:8A:3F:92:D7:38:F7:1D:ED:BD:64:68:FA:4F:DD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/280ed90a-ff6a-3cd4-b017-40207fa4a29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3f:1f:cc:8e:68:d6:2f:12:cd:b4:82:d1:b8:55:3e:80:3a: bb:15:13:0a:fe:f4:fe:68:65:5a:ee:02:de:43:18:a3:d6:9e: a3:05:30:5b:eb:05:c4:c4:e7:f1:9d:67:b0:16:19:7b:7b:f0: 2a:27:53:6f:76:7c:f2:3b:ba:01:0e:2a:40:f3:4a:cd:51:42: 2e:a5:4f:79:dd:4e:12:c0:8a:a8:b0:5f:17:d2:db:d5:1f:49: 54:06:e6:e9:02:5d:93:b7:70:6f:44:61:3e:c0:e0:8b:fe:07: 9a:07:f2:65:65:fb:66:70:c5:78:fb:4d:08:a5:ad:ee:38:82: b8:f3:d6:d5:f1:c4:2c:ee:b6:de:b8:45:6a:ad:ec:01:2c:01: 41:48:8e:40:a0:68:06:82:e0:b1:63:be:f4:29:70:86:0a:42: f3:d2:c4:03:c8:9c:9e:d0:cf:5a:ff:37:08:9b:8a:3c:59:b2: 94:4b:7f:3c:4c:a6:26:19:1e:cd:c3:a2:49:de:c8:2d:59:62: f6:ca:99:1a:df:ca:51:39:cc:b7:c7:ba:9e:71:45:05:d4:70: 48:26:bc:0e:5e:e5:25:c6:4d:14:47:53:0c:97:c6:b3:1c:47: 61:4a:3d:ab:2f:80:8b:61:c4:a3:f1:0c:ee:64:8a:9d:6e:bd: a0:37:ff:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskgkF1s4KDn7xKx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTkxNVoXDTI1MTIwOTAxMTkxNVowLzEtMCsGA1UEAxMk MGU1MTgwNDctNmJlNy00M2U5LWEwZWQtZThlYmI5NWM1Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNQxHOjERWJ9YQdxBqzOEm7ZiddCM5iNJuhu dsIuJwaT71MQBwaMr8PUHRzD8fcqrq61MhYemBaw2sxOQSaiHEhhUiIBqkeg+6AZ qP9GNWxOderSadxCL0OqpzjJPNB05bw1OG1MYL7dA5rVTE4LNHtO3U0D1Uw/m1gM xjHV8BuftDV1HZrwXOSLB7bxPvN93qwoIS1dlwtBWEi5XzOy89K926tiaSwcHtMx JZQ7bokOpa/Mdmu4Kj+KGBqQ1xUIva7WVGcT4zhIalS+mSWlTmz0n7x84Jvb1InL Ji1rxzeexDMyK58Njv44RZQK+mN12MdfAHkTObPeohV6BSr6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbShx4fij+S1zj3He29ZGj6T93XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjgwZWQ5MGEtZmY2YS0z Y2Q0LWIwMTctNDAyMDdmYTRhMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhrmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw/H8yOaNYvEs20gtG4VT6AOrsVEwr+9P5oZVruAt5DGKPWnqMFMFvr BcTE5/GdZ7AWGXt78ConU292fPI7ugEOKkDzSs1RQi6lT3ndThLAiqiwXxfS29Uf SVQG5ukCXZO3cG9EYT7A4Iv+B5oH8mVl+2ZwxXj7TQilre44grjz1tXxxCzutt64 RWqt7AEsAUFIjkCgaAaC4LFjvvQpcIYKQvPSxAPInJ7Qz1r/NwibijxZspRLfzxM piYZHs3DokneyC1ZYvbKmRrfylE5zLfHup5xRQXUcEgmvA5e5SXGTRRHUwyXxrMc R2FKPasvgIthxKPxDO5kip1uvaA3/5I= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:42 2025 by rpki-client