$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa File: 4a76ef17-2f01-37a9-a111-42a266f553f5.roa (raw, json) Hash identifier: mAUOZSk3wTjh0XMH1DpH5T9xp4Q4CFV0Gx78ir1YLCE= Subject key identifier: 86:E9:3C:A1:41:B9:9D:0B:1D:6F:DB:23:63:E8:08:D8:2F:59:D7:94 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42B6537670808A29284B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa Signing time: Tue 26 Aug 2025 22:54:41 +0000 ROA not before: Tue 26 Aug 2025 22:54:41 +0000 ROA not after: Mon 24 Nov 2025 23:54:41 +0000 asID: 31898 IP address blocks: 134.185.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:b6:53:76:70:80:8a:29:28:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:41 2025 GMT Not After : Nov 24 23:54:41 2025 GMT Subject: CN=97d983ae-e546-46ba-a6a0-d25276cc57b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:64:24:6b:42:1f:1c:6d:e0:54:84:fd:56: 97:a8:cb:2d:bd:f9:06:ba:ab:39:8a:a5:88:80:cf: 91:66:26:8b:d0:c4:2d:1a:f8:57:15:3a:91:ab:97: 3c:37:f7:63:1c:e5:c4:ec:55:61:b7:66:fb:b0:e9: cc:e6:56:d9:ed:c0:88:ea:6e:92:4f:be:47:68:60: ca:0a:23:95:11:37:ed:d7:6b:96:21:b6:49:47:e0: 5e:13:ef:68:56:b4:c5:9c:ba:72:8c:0b:a6:ec:e4: 4b:7d:0c:3b:ce:d1:7b:a1:1d:d3:e6:bc:61:c4:5e: fa:24:71:8d:14:04:ef:5a:43:82:57:3e:2e:00:d6: f9:93:96:d6:de:1e:e5:d3:81:57:67:63:94:14:8f: b8:e4:df:e9:24:3f:d0:ab:7f:33:1a:bd:3e:5e:1e: 52:81:41:06:0b:34:f1:c9:b4:81:b4:af:7f:0d:78: b6:23:ed:0e:3d:79:c4:1b:15:5c:33:3a:dd:e4:c1: 4c:a8:aa:7b:35:1d:42:f2:9c:f8:77:9e:d2:bb:ad: 93:31:83:04:e0:f8:e1:cf:4f:94:d8:50:da:e2:e2: e6:a6:62:1b:22:09:1d:96:b2:0e:a2:23:6d:f0:d7: 2a:d5:cb:5b:2f:99:3c:b4:fb:26:1e:19:26:38:54: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:3C:A1:41:B9:9D:0B:1D:6F:DB:23:63:E8:08:D8:2F:59:D7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a76ef17-2f01-37a9-a111-42a266f553f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:89:b1:54:d5:83:9e:47:e3:a9:38:74:28:98:04:c2:41: 91:33:3f:c5:da:e3:02:cb:42:4c:42:55:fc:06:8a:b9:6a:c6: 1d:eb:28:8d:da:3c:b8:c3:b6:58:a5:35:00:ff:e4:c5:26:43: 32:2d:d0:e5:08:ec:d6:1d:ec:85:01:9d:02:cc:fa:ee:75:54: 46:d7:e4:87:d0:25:02:6c:55:05:a6:2b:7f:61:da:a9:d0:f9: b6:71:ea:a8:4b:94:ea:22:49:ac:03:0a:f1:22:1f:b6:df:42: c1:18:2b:22:22:08:38:c8:0c:9c:45:f6:14:8d:7b:37:65:a8: 5a:ee:6d:32:c3:dd:6b:ed:37:70:82:77:17:b7:4f:70:34:bd: 4e:67:86:be:d3:71:f8:0b:9d:23:b7:32:8c:6d:d2:73:0b:f9: 7e:fc:88:f0:4a:59:84:1f:b1:7f:c5:3d:8e:ec:6a:80:51:1f: 7f:cd:08:46:ce:81:05:d6:0c:77:68:74:c5:b9:63:23:34:a5: 1e:d8:4b:03:d2:67:41:ed:bd:7b:cc:09:35:2f:d0:92:d2:c5: 8b:8b:20:e1:18:7a:06:c6:a3:c7:da:ab:5e:eb:ee:07:07:95: fd:a2:15:ec:37:e1:83:00:59:b8:41:0c:2a:09:14:82:96:66: 2a:9f:7e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QrZTdnCAiikoSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQ0MVoXDTI1MTEyNDIzNTQ0MVowLzEtMCsGA1UEAxMk OTdkOTgzYWUtZTU0Ni00NmJhLWE2YTAtZDI1Mjc2Y2M1N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfRkJGtCHxxt4FSE/VaXqMstvfkGuqs5iqWI gM+RZiaL0MQtGvhXFTqRq5c8N/djHOXE7FVht2b7sOnM5lbZ7cCI6m6ST75HaGDK CiOVETft12uWIbZJR+BeE+9oVrTFnLpyjAum7ORLfQw7ztF7oR3T5rxhxF76JHGN FATvWkOCVz4uANb5k5bW3h7l04FXZ2OUFI+45N/pJD/Qq38zGr0+Xh5SgUEGCzTx ybSBtK9/DXi2I+0OPXnEGxVcMzrd5MFMqKp7NR1C8pz4d57Su62TMYME4Pjhz0+U 2FDa4uLmpmIbIgkdlrIOoiNt8Ncq1ctbL5k8tPsmHhkmOFSiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbpPKFBuZ0LHW/bI2PoCNgvWdeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3NmVmMTctMmYwMS0z N2E5LWExMTEtNDJhMjY2ZjU1M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhrlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy6ibFU1YOeR+OpOHQomATCQZEzP8Xa4wLLQkxCVfwGirlqxh3rKI3a PLjDtlilNQD/5MUmQzIt0OUI7NYd7IUBnQLM+u51VEbX5IfQJQJsVQWmK39h2qnQ +bZx6qhLlOoiSawDCvEiH7bfQsEYKyIiCDjIDJxF9hSNezdlqFrubTLD3WvtN3CC dxe3T3A0vU5nhr7TcfgLnSO3Moxt0nML+X78iPBKWYQfsX/FPY7saoBRH3/NCEbO gQXWDHdodMW5YyM0pR7YSwPSZ0HtvXvMCTUv0JLSxYuLIOEYegbGo8faq17r7gcH lf2iFew34YMAWbhBDCoJFIKWZiqffsg= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:42 2025 by rpki-client