$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa File: 8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa (raw, json) Hash identifier: l93f/u3HNFx/RaQnijDkk+TQ1bChqKM2bUn4Jz1tbKE= Subject key identifier: D9:D7:FC:C1:4E:4D:5E:B2:6E:2F:F7:CA:37:C1:35:25:31:A3:A0:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2685549B065486F027AFA480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa Signing time: Wed 10 Sep 2025 17:37:04 +0000 ROA not before: Wed 10 Sep 2025 17:37:04 +0000 ROA not after: Tue 09 Dec 2025 18:37:04 +0000 asID: 54253 IP address blocks: 134.185.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:54:9b:06:54:86:f0:27:af:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:04 2025 GMT Not After : Dec 9 18:37:04 2025 GMT Subject: CN=afc73aa7-c957-4eef-bb89-d0fc11efd8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:2e:01:4b:2e:0c:de:4b:99:26:76:dc:af: 0d:50:2b:b9:25:28:c2:eb:44:54:51:c8:7b:30:b0: b6:36:2e:ce:2f:2d:b0:24:93:71:e5:a1:a5:71:17: c5:18:7a:de:a1:a9:f6:c9:cc:4e:48:32:df:9b:48: a3:65:6a:d3:e1:97:7f:7e:43:0b:fb:f7:16:dd:39: 4c:6c:dc:1b:36:51:37:65:1e:52:36:35:8c:ed:6b: 46:7e:27:50:9a:98:6d:6b:b1:6e:6b:4a:3d:81:44: d7:e2:42:c6:f0:86:9d:98:c1:0f:45:10:91:9a:52: 0d:31:52:a2:a8:eb:a3:21:df:20:9a:3a:25:72:7d: 42:6c:fc:f8:d0:1d:da:b3:c3:60:54:7c:78:a8:7c: e7:b5:98:79:4d:c9:b0:87:17:15:67:a0:b5:06:a8: 14:f3:cb:b1:c4:d7:3b:96:13:0f:89:2d:0b:9b:10: f4:a4:8d:97:95:d4:5f:94:19:ed:77:59:d4:73:e3: 19:3f:7f:f6:57:38:aa:e3:74:c2:fc:5d:66:0e:4c: 6c:ff:33:b5:86:42:54:49:22:b9:f8:61:59:98:af: a4:f9:c7:c5:c7:4c:15:c6:bb:c0:93:8b:ff:a8:00: 0a:0f:81:a9:b7:60:bf:97:81:21:57:e4:52:3e:fd: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:FC:C1:4E:4D:5E:B2:6E:2F:F7:CA:37:C1:35:25:31:A3:A0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:53:c6:2b:97:b9:6d:0d:d4:f4:73:9b:e5:65:2a:bf:79:a8: 15:17:c1:ee:05:f7:b1:be:f6:dd:35:e5:38:24:40:42:5a:fc: 13:da:e9:6e:9e:9e:46:d0:c4:df:10:69:77:f3:a7:ba:8c:45: 2b:df:35:69:58:f3:52:b1:1c:f5:50:52:43:cf:99:a9:fc:ae: 41:f8:48:51:f8:d1:5b:04:7b:73:b6:8f:53:6c:eb:16:73:2b: 25:8a:fd:b1:d2:6d:a0:d9:9a:aa:74:0d:95:da:49:a7:6f:d0: 40:62:f6:00:87:7b:5e:41:4b:79:46:30:eb:06:f6:20:55:8f: 9d:4e:79:79:ee:30:5b:83:e3:d0:45:c8:24:14:0b:54:85:5d: f8:37:43:15:f1:cd:f0:46:42:65:03:28:bd:df:34:60:b8:a5: 9f:cb:3f:28:98:e0:7b:b8:be:47:21:f9:25:87:e8:d3:59:42: 65:6a:30:0e:d6:5f:19:93:08:9e:cd:92:a7:19:f2:5e:fb:26: 23:b0:ec:59:67:f0:5c:ba:23:4b:6c:e6:f3:ba:25:95:97:fc: fd:96:4a:3c:de:3d:eb:20:1e:52:f9:1f:9e:7e:64:79:50:1a: d5:7f:d6:24:66:34:75:42:dd:df:8e:07:4a:6c:68:7f:46:a1: 69:2d:a7:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhVSbBlSG8CevpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzcwNFoXDTI1MTIwOTE4MzcwNFowLzEtMCsGA1UEAxMk YWZjNzNhYTctYzk1Ny00ZWVmLWJiODktZDBmYzExZWZkOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvouAUsuDN5LmSZ23K8NUCu5JSjC60RUUch7 MLC2Ni7OLy2wJJNx5aGlcRfFGHreoan2ycxOSDLfm0ijZWrT4Zd/fkML+/cW3TlM bNwbNlE3ZR5SNjWM7WtGfidQmphta7Fua0o9gUTX4kLG8IadmMEPRRCRmlINMVKi qOujId8gmjolcn1CbPz40B3as8NgVHx4qHzntZh5TcmwhxcVZ6C1BqgU88uxxNc7 lhMPiS0LmxD0pI2XldRflBntd1nUc+MZP3/2Vziq43TC/F1mDkxs/zO1hkJUSSK5 +GFZmK+k+cfFx0wVxrvAk4v/qAAKD4Gpt2C/l4EhV+RSPv0urwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnX/MFOTV6ybi/3yjfBNSUxo6BMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJkNzc2MTktMDNkMi0z ZjA0LWFmNTgtY2EwY2EyZjRiNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNTxiuXuW0N1PRzm+VlKr95qBUXwe4F97G+9t015TgkQEJa/BPa6W6e nkbQxN8QaXfzp7qMRSvfNWlY81KxHPVQUkPPman8rkH4SFH40VsEe3O2j1Ns6xZz KyWK/bHSbaDZmqp0DZXaSadv0EBi9gCHe15BS3lGMOsG9iBVj51OeXnuMFuD49BF yCQUC1SFXfg3QxXxzfBGQmUDKL3fNGC4pZ/LPyiY4Hu4vkch+SWH6NNZQmVqMA7W XxmTCJ7NkqcZ8l77JiOw7Fln8Fy6I0ts5vO6JZWX/P2WSjzePesgHlL5H55+ZHlQ GtV/1iRmNHVC3d+OB0psaH9GoWktp/Y= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:48 2025 by rpki-client