$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72b4c955-bde3-39cd-acea-d76a21205d1f.roa File: 72b4c955-bde3-39cd-acea-d76a21205d1f.roa (raw, json) Hash identifier: /HV/4jrIcW4BGGKFuA1nqc8PWxibKgkwtr3e2KVyRNs= Subject key identifier: 6C:EF:0C:07:6F:D4:3C:8F:26:31:12:99:02:62:A7:99:45:82:52:E4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26856FC59B0B123FCD38B900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72b4c955-bde3-39cd-acea-d76a21205d1f.roa Signing time: Wed 10 Sep 2025 17:37:17 +0000 ROA not before: Wed 10 Sep 2025 17:37:17 +0000 ROA not after: Tue 09 Dec 2025 18:37:17 +0000 asID: 54253 IP address blocks: 136.248.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:6f:c5:9b:0b:12:3f:cd:38:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:17 2025 GMT Not After : Dec 9 18:37:17 2025 GMT Subject: CN=41d68483-40d2-4a34-9eb4-c519620618ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:d8:73:83:4d:ca:06:33:f6:48:2f:dd:af: 9e:e2:51:b5:23:ab:6f:d8:d6:02:b4:24:c8:d8:23: bf:af:d3:59:5a:c4:eb:3d:d6:39:18:7a:22:ed:df: 55:2b:f0:f6:b8:7c:39:a9:19:88:d4:53:58:be:6f: b7:70:8e:c5:48:80:17:b2:98:6d:57:d0:e0:81:f3: 57:34:a2:94:72:1d:d4:fd:b6:d3:62:37:2f:bf:58: 0f:3f:63:20:d3:96:9a:45:00:75:66:6e:3b:50:ab: f9:fd:5c:1b:eb:57:a7:03:e5:c4:eb:75:40:41:37: ab:c9:24:c7:09:1f:60:5f:65:ff:8d:b0:5b:bc:08: 09:d5:45:3b:1f:0f:1a:8d:07:2b:31:5d:0d:ed:b8: 45:c0:73:05:da:00:45:57:4e:72:6f:13:cd:86:bb: 33:55:19:a5:2f:c6:84:4a:bd:6e:8b:02:65:2b:7e: 3d:ba:11:7e:65:92:2b:88:57:f5:f3:ff:90:2c:a8: 36:f5:fb:c5:9d:94:2f:e0:33:99:f4:be:3f:03:bf: 31:89:13:cf:aa:f1:76:ec:06:bb:ab:d2:30:34:c4: 02:96:1e:98:8c:e6:1d:7d:9c:4d:2f:6e:8c:47:f5: 48:b6:b4:15:6a:8e:43:d6:46:39:2d:7e:f3:03:14: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:0C:07:6F:D4:3C:8F:26:31:12:99:02:62:A7:99:45:82:52:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72b4c955-bde3-39cd-acea-d76a21205d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9f:81:df:4b:27:60:36:a5:8a:de:5e:be:06:59:da:66:65: 1b:be:76:a8:00:ae:4b:8d:ac:3c:76:c6:5d:19:ca:80:6a:73: df:f7:84:9a:79:ec:a4:54:7c:3f:3e:6f:cb:e3:b2:23:f2:9b: 50:be:07:8c:59:cc:fc:03:39:dd:78:63:04:7f:0e:d1:10:ae: 45:d3:dc:8d:19:59:ef:ad:9c:51:71:13:61:51:94:30:e0:77: 70:37:cf:00:06:87:e9:b1:14:ac:07:e3:3b:fb:3d:82:b0:50: b5:42:c9:96:d1:7a:89:5f:5d:aa:75:a4:2d:69:53:55:b3:92: 6e:79:b8:b0:35:1f:a6:74:02:25:6f:4f:b4:f3:fa:11:99:3d: d9:a4:34:92:39:87:be:b0:c1:e9:ab:2d:ec:63:45:0d:4f:db: 31:36:27:c7:0c:22:df:71:bb:83:eb:86:7e:9e:4d:6f:07:bb: f4:f8:33:d9:99:55:45:c4:b6:4a:a8:ee:e4:22:09:34:0a:13: 07:06:f0:dd:2d:39:cb:26:e3:4d:de:a9:08:b7:bc:3d:dd:1d: 11:26:f2:ba:5e:03:cd:c3:c7:31:33:d7:d9:33:70:42:ce:98: 21:bd:bf:95:64:32:ae:a4:18:05:aa:0e:67:e1:5a:83:a3:f6: 75:de:dc:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhW/FmwsSP804uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzcxN1oXDTI1MTIwOTE4MzcxN1owLzEtMCsGA1UEAxMk NDFkNjg0ODMtNDBkMi00YTM0LTllYjQtYzUxOTYyMDYxOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jYc4NNygYz9kgv3a+e4lG1I6tv2NYCtCTI 2CO/r9NZWsTrPdY5GHoi7d9VK/D2uHw5qRmI1FNYvm+3cI7FSIAXsphtV9DggfNX NKKUch3U/bbTYjcvv1gPP2Mg05aaRQB1Zm47UKv5/Vwb61enA+XE63VAQTerySTH CR9gX2X/jbBbvAgJ1UU7Hw8ajQcrMV0N7bhFwHMF2gBFV05ybxPNhrszVRmlL8aE Sr1uiwJlK349uhF+ZZIriFf18/+QLKg29fvFnZQv4DOZ9L4/A78xiRPPqvF27Aa7 q9IwNMQClh6YjOYdfZxNL26MR/VItrQVao5D1kY5LX7zAxRlcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzvDAdv1DyPJjESmQJip5lFglLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzJiNGM5NTUtYmRlMy0z OWNkLWFjZWEtZDc2YTIxMjA1ZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFufgd9LJ2A2pYreXr4GWdpmZRu+dqgArkuNrDx2xl0ZyoBqc9/3hJp5 7KRUfD8+b8vjsiPym1C+B4xZzPwDOd14YwR/DtEQrkXT3I0ZWe+tnFFxE2FRlDDg d3A3zwAGh+mxFKwH4zv7PYKwULVCyZbReolfXap1pC1pU1Wzkm55uLA1H6Z0AiVv T7Tz+hGZPdmkNJI5h76wwemrLexjRQ1P2zE2J8cMIt9xu4Prhn6eTW8Hu/T4M9mZ VUXEtkqo7uQiCTQKEwcG8N0tOcsm403eqQi3vD3dHREm8rpeA83DxzEz19kzcELO mCG9v5VkMq6kGAWqDmfhWoOj9nXe3CA= -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:00 2025 by rpki-client