$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa File: 5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa (raw, json) Hash identifier: Ab9ZsXHy1jQ3gIe+MvpyDTn79WZu1tfhyVtTimfiOuQ= Subject key identifier: C4:79:82:2E:95:B6:C8:CB:47:BF:EF:18:0F:F3:64:32:AA:A4:9C:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C30B399B96EE47D6436360 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa Signing time: Mon 25 Aug 2025 08:14:13 +0000 ROA not before: Mon 25 Aug 2025 08:14:13 +0000 ROA not after: Sun 23 Nov 2025 09:14:13 +0000 asID: 31898 IP address blocks: 132.145.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c3:0b:39:9b:96:ee:47:d6:43:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:14:13 2025 GMT Not After : Nov 23 09:14:13 2025 GMT Subject: CN=f74fa37a-6236-42b2-ac78-df3ed49269e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:2c:42:c2:88:ef:1c:86:ae:f7:8e:ba:85: 7b:8f:5a:b5:00:1b:24:8d:c5:01:55:c8:3e:80:ad: 7e:d9:3a:b0:d7:7c:a1:33:a5:22:17:6b:1b:13:6b: 34:6a:27:6b:fb:bd:f3:84:2b:e6:9e:21:4f:4f:34: 96:48:87:4b:a9:bf:ad:c2:00:17:9f:c7:84:3e:1b: 0b:c0:ff:4a:23:77:e2:7a:dc:06:ed:ff:bf:e1:0a: fd:bd:c5:a8:c9:cb:27:ef:4f:c3:79:47:36:ba:bd: 80:b3:f5:52:8e:69:23:62:c6:12:51:8e:fe:ca:d5: 48:c8:41:21:ad:a8:7f:98:82:4a:f3:ce:16:00:8b: f5:21:53:2e:4e:3c:b5:d3:4f:8a:00:2e:d4:3a:9b: 56:6b:0f:92:90:d9:d4:17:c9:b7:01:38:0c:89:db: 02:60:6f:b2:f9:5f:89:69:e4:31:00:26:17:77:3d: f5:89:ca:47:9d:f7:f5:11:9c:5c:2f:67:7c:85:65: 00:2f:b2:48:e4:41:e4:bd:81:02:b3:02:ee:d9:be: 8b:76:a9:ab:15:a8:53:0a:d9:51:9a:6d:cc:ae:0d: be:5c:03:50:ea:03:64:f2:12:b8:58:52:5f:25:9f: ef:51:55:8b:a1:6a:95:45:32:1a:13:4c:6b:17:b3: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:82:2E:95:B6:C8:CB:47:BF:EF:18:0F:F3:64:32:AA:A4:9C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5571ddde-51ce-3e99-b6a4-31f9b3c65ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:37:6f:2e:f2:23:6b:27:0a:d1:b8:44:28:68:f7:12:03:6c: ca:1e:3c:81:9b:49:aa:ea:4f:b0:d0:43:17:2f:4a:7e:a3:79: 66:2f:df:8c:65:19:22:69:15:80:0d:cf:48:c1:4e:ee:d9:24: 90:4f:85:ca:d9:30:9f:d0:b3:2c:cc:73:ea:d7:d1:bb:b7:22: c0:3f:51:2a:12:f1:02:47:94:d4:09:07:81:54:0f:6c:c2:71: d1:67:3c:52:1c:27:ce:0b:eb:ee:40:10:a4:24:f4:ef:8b:ff: 77:12:53:0e:43:f6:aa:96:93:3a:24:c0:2c:9b:85:0d:a5:ca: ea:30:34:de:91:d3:7c:73:7e:b4:24:96:d7:c0:54:02:12:d3: 8e:3b:61:c0:01:c1:99:f7:91:57:33:0d:dd:eb:16:51:b5:c0: 2c:a7:c0:55:21:b1:58:9d:bb:06:3f:c9:04:7d:72:1f:13:ee: 8b:14:28:80:8f:fb:e6:59:7f:13:a6:00:ca:6b:8e:73:0b:17: 72:fc:16:d9:e6:dd:aa:31:0e:80:39:17:eb:6b:60:dd:72:53: 32:92:c7:93:7c:db:d9:34:88:b6:ec:c3:40:22:bd:7e:f4:ed: 98:56:91:3c:70:1b:59:49:ca:c2:97:fc:40:de:67:e6:e5:b3: ea:28:7d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wws5m5buR9ZDY2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTQxM1oXDTI1MTEyMzA5MTQxM1owLzEtMCsGA1UEAxMk Zjc0ZmEzN2EtNjIzNi00MmIyLWFjNzgtZGYzZWQ0OTI2OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qgsQsKI7xyGrveOuoV7j1q1ABskjcUBVcg+ gK1+2Tqw13yhM6UiF2sbE2s0aidr+73zhCvmniFPTzSWSIdLqb+twgAXn8eEPhsL wP9KI3fietwG7f+/4Qr9vcWoycsn70/DeUc2ur2As/VSjmkjYsYSUY7+ytVIyEEh rah/mIJK884WAIv1IVMuTjy100+KAC7UOptWaw+SkNnUF8m3ATgMidsCYG+y+V+J aeQxACYXdz31icpHnff1EZxcL2d8hWUAL7JI5EHkvYECswLu2b6LdqmrFahTCtlR mm3Mrg2+XANQ6gNk8hK4WFJfJZ/vUVWLoWqVRTIaE0xrF7OohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR5gi6VtsjLR7/vGA/zZDKqpJyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTU3MWRkZGUtNTFjZS0z ZTk5LWI2YTQtMzFmOWIzYzY1ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI43by7yI2snCtG4RCho9xIDbMoePIGbSarqT7DQQxcvSn6jeWYv34xl GSJpFYANz0jBTu7ZJJBPhcrZMJ/QsyzMc+rX0bu3IsA/USoS8QJHlNQJB4FUD2zC cdFnPFIcJ84L6+5AEKQk9O+L/3cSUw5D9qqWkzokwCybhQ2lyuowNN6R03xzfrQk ltfAVAIS0447YcABwZn3kVczDd3rFlG1wCynwFUhsViduwY/yQR9ch8T7osUKICP ++ZZfxOmAMprjnMLF3L8Ftnm3aoxDoA5F+trYN1yUzKSx5N829k0iLbsw0AivX70 7ZhWkTxwG1lJysKX/EDeZ+bls+oofVE= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:47 2025 by rpki-client