$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa File: 9a104f27-22d6-361b-bd0e-37ea580f7227.roa (raw, json) Hash identifier: b5vLHDLasp91zdQWihdmtioQ4HbI+TvZc4j86y2oCo0= Subject key identifier: 1A:67:37:D8:86:9E:13:9F:15:51:D5:8E:64:AC:1D:DE:B3:80:45:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26858BF83F9DD4F1944F8300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa Signing time: Wed 10 Sep 2025 17:37:30 +0000 ROA not before: Wed 10 Sep 2025 17:37:30 +0000 ROA not after: Tue 09 Dec 2025 18:37:30 +0000 asID: 54253 IP address blocks: 140.245.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:8b:f8:3f:9d:d4:f1:94:4f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:30 2025 GMT Not After : Dec 9 18:37:30 2025 GMT Subject: CN=91b60b0c-dacc-4291-9295-118fc3602933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:d2:9e:9c:bf:e4:c7:bc:9a:79:20:d4:98: 8f:f0:85:65:27:28:b8:6a:a3:57:12:3e:c8:5a:f2: 11:6d:11:81:47:80:90:dc:9d:be:2a:32:b6:21:d9: 71:d1:da:54:2c:4d:dc:e7:d0:08:ae:8b:a3:9f:08: 45:fd:8e:06:1f:24:ff:46:73:a5:fe:82:6c:65:13: 68:4c:3b:c0:01:d0:c1:c8:7a:c9:34:95:d5:cd:fc: 16:4a:04:5d:e7:c3:ed:05:a7:a5:9a:80:0f:d4:ed: 89:f3:98:8f:c7:ec:fd:50:35:b5:7c:60:ea:83:36: 1a:73:01:30:ad:c2:8e:b7:c5:7a:8f:ec:28:2a:f7: c6:6e:12:3a:fd:0d:8f:0a:7c:97:52:25:e2:fb:c7: b0:fe:55:4a:14:81:99:8e:a2:b8:76:05:02:40:02: 12:4c:b5:ff:c1:e2:48:79:7f:87:8d:7f:4d:6b:c7: e0:5f:e0:a5:92:83:cc:03:06:20:ab:56:38:c3:6b: c5:b0:12:8d:3c:b0:76:a9:18:7d:14:99:cc:c5:88: 11:8a:f5:7b:fa:50:13:c4:03:c9:43:12:7f:95:30: 6b:f1:f2:8d:d2:58:3d:a5:f1:3a:55:3b:35:6d:39: 64:f5:37:0f:52:e6:43:64:3b:b6:31:95:be:43:fb: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:67:37:D8:86:9E:13:9F:15:51:D5:8E:64:AC:1D:DE:B3:80:45:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d7:f8:94:2d:46:5e:15:9e:74:9e:7d:15:ab:76:af:90:f2: 62:72:47:41:d5:be:9a:e0:83:95:38:98:00:ed:77:42:e9:70: 1b:f0:15:20:31:0e:ac:50:3f:da:c0:35:ce:83:8b:0e:37:62: dc:ea:af:0b:1b:f8:9f:a0:95:a7:1c:f4:70:64:23:3b:94:a6: 46:29:ab:ab:46:5a:5a:2c:ef:b4:1f:04:98:65:4a:c9:14:d6: 49:1c:e9:20:78:c3:85:8f:a0:82:99:2e:d5:1c:5c:6a:a1:85: 5b:2b:58:c8:2e:90:22:cc:9d:a3:a0:ee:37:d3:df:1f:9a:09: fc:3d:91:89:19:ad:6c:95:da:1a:57:2c:00:b2:15:82:a4:04: c0:cb:12:d7:1b:d8:be:20:ce:76:93:03:63:7e:27:6d:f8:52: 7a:61:52:a4:46:26:78:67:43:dc:7e:23:eb:cc:5f:04:b5:99: 1b:3d:f1:4e:b9:d9:c3:ce:52:35:9a:f2:07:18:d5:17:49:af: e3:c3:ed:44:48:b0:bd:1f:7b:f9:6f:a4:1f:cf:4e:f0:ae:df: 61:9c:cb:98:df:a3:3d:fd:06:e0:80:1e:1b:4f:fb:c5:0c:4f: 02:20:90:b5:af:e0:15:14:55:51:e5:f9:80:78:41:a5:b3:af: ec:a1:4b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhYv4P53U8ZRPgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzczMFoXDTI1MTIwOTE4MzczMFowLzEtMCsGA1UEAxMk OTFiNjBiMGMtZGFjYy00MjkxLTkyOTUtMTE4ZmMzNjAyOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUTSnpy/5Me8mnkg1JiP8IVlJyi4aqNXEj7I WvIRbRGBR4CQ3J2+KjK2Idlx0dpULE3c59AIroujnwhF/Y4GHyT/RnOl/oJsZRNo TDvAAdDByHrJNJXVzfwWSgRd58PtBaelmoAP1O2J85iPx+z9UDW1fGDqgzYacwEw rcKOt8V6j+woKvfGbhI6/Q2PCnyXUiXi+8ew/lVKFIGZjqK4dgUCQAISTLX/weJI eX+HjX9Na8fgX+ClkoPMAwYgq1Y4w2vFsBKNPLB2qRh9FJnMxYgRivV7+lATxAPJ QxJ/lTBr8fKN0lg9pfE6VTs1bTlk9TcPUuZDZDu2MZW+Q/s/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpnN9iGnhOfFVHVjmSsHd6zgEWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWExMDRmMjctMjJkNi0z NjFiLWJkMGUtMzdlYTU4MGY3MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjPWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHX+JQtRl4VnnSefRWrdq+Q8mJyR0HVvprgg5U4mADtd0LpcBvwFSAx DqxQP9rANc6Diw43Ytzqrwsb+J+glacc9HBkIzuUpkYpq6tGWlos77QfBJhlSskU 1kkc6SB4w4WPoIKZLtUcXGqhhVsrWMgukCLMnaOg7jfT3x+aCfw9kYkZrWyV2hpX LACyFYKkBMDLEtcb2L4gznaTA2N+J234UnphUqRGJnhnQ9x+I+vMXwS1mRs98U65 2cPOUjWa8gcY1RdJr+PD7URIsL0fe/lvpB/PTvCu32Gcy5jfoz39BuCAHhtP+8UM TwIgkLWv4BUUVVHl+YB4QaWzr+yhS3I= -----END CERTIFICATE-----Generated at Thu Oct 9 03:14:04 2025 by rpki-client