$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4fc3aa2-4e36-3241-ad42-86ab4fdac77c.roa File: a4fc3aa2-4e36-3241-ad42-86ab4fdac77c.roa (raw, json) Hash identifier: 1qWLDiaMCx77CQTar6KOjESBITHL5FudW3VCtHPGl3g= Subject key identifier: 12:01:71:58:E6:78:80:A7:36:26:DF:6C:BB:D4:A7:4B:E4:87:2C:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B248231984DB0E4C6FA3C7E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4fc3aa2-4e36-3241-ad42-86ab4fdac77c.roa Signing time: Wed 10 Sep 2025 00:19:07 +0000 ROA not before: Wed 10 Sep 2025 00:19:07 +0000 ROA not after: Tue 09 Dec 2025 01:19:07 +0000 asID: 54253 IP address blocks: 134.185.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:31:98:4d:b0:e4:c6:fa:3c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:19:07 2025 GMT Not After : Dec 9 01:19:07 2025 GMT Subject: CN=f1a447b9-afb4-46d8-9df8-f14a3227ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:35:46:4c:6a:67:21:60:2c:a3:7c:73:72: 87:be:20:49:71:b8:0e:75:c5:db:c1:7f:ae:48:1d: 41:f6:02:2d:57:1d:5b:1f:e5:03:e7:fe:69:7a:ab: d2:2b:78:8a:68:cd:9b:1d:56:b9:0f:aa:54:a7:2c: ac:41:f5:0e:76:6f:44:85:dd:79:53:b5:71:a5:b0: 2a:1b:06:cc:94:a4:f9:63:e4:93:cf:9f:0e:ee:3b: fb:99:a3:0e:ad:74:ab:ba:a9:d7:a6:14:46:c5:dc: e8:c4:7b:46:9c:a3:b1:93:97:35:6f:04:4c:8d:6d: 06:72:5c:ff:08:0b:8e:04:a5:4e:1e:98:d7:75:11: c1:7d:0d:8c:d1:74:d4:ce:a1:c2:29:3f:b3:06:9a: 43:32:f8:82:be:9f:d6:55:d0:c4:92:6f:71:e7:c0: 1c:af:c2:78:50:84:a0:24:c3:2a:c4:bf:c2:3a:d0: 8c:4d:60:56:9d:02:43:8e:16:ee:0f:98:dc:fa:f3: b9:da:f6:4d:67:e7:a0:c4:19:16:8a:70:70:95:b8: 3b:20:04:f5:58:11:03:7c:28:d2:09:50:c4:cf:7d: c1:05:cd:47:db:d4:5e:8a:a3:7e:a6:bd:ff:30:fd: a7:a3:46:3b:a5:4a:ca:cf:a0:5a:6f:69:e4:31:72: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:71:58:E6:78:80:A7:36:26:DF:6C:BB:D4:A7:4B:E4:87:2C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4fc3aa2-4e36-3241-ad42-86ab4fdac77c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:18:45:11:6d:ac:23:44:32:9f:85:35:c4:a3:dd:bd:1b:d4: e4:a8:1b:1c:65:6a:e5:8b:58:dd:31:10:fb:ce:6e:a5:d5:f2: 8b:5c:6a:85:25:56:8a:c8:d5:b6:b4:dc:56:01:6c:24:74:57: f0:bb:a2:52:85:e7:9d:d2:63:54:5c:67:1e:18:29:77:e7:02: 4a:31:06:3b:78:de:68:e0:6c:93:57:21:ad:01:dc:0c:75:27: 98:81:69:fa:bb:21:fb:7e:7e:37:cb:65:8d:86:8d:bf:6c:7f: be:cc:d1:1d:d9:ef:0b:34:8d:4c:9b:6d:13:ae:f0:84:ef:ba: c5:b4:17:15:7c:52:80:b7:ec:40:1d:85:dd:f5:d2:3e:f7:4a: 3c:0c:e1:88:ba:43:12:37:c3:68:1e:2d:db:f9:b2:b1:00:7e: e5:2b:83:49:c1:fc:a3:33:3f:26:02:9e:17:52:2a:e8:f8:d2: a0:b2:40:86:66:43:19:ff:02:65:52:3c:73:38:12:41:4c:0c: 3c:30:ee:1e:d1:75:1a:3e:3b:77:72:35:29:cd:19:1e:91:41: 4c:9f:ee:90:38:69:1b:02:92:fd:e6:65:3c:fe:b8:5b:2e:a9: 3d:2d:a1:92:43:5c:8b:c9:3c:fa:f7:8a:b1:aa:b6:c3:3d:b7: 45:48:1e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskgjGYTbDkxvo8fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTkwN1oXDTI1MTIwOTAxMTkwN1owLzEtMCsGA1UEAxMk ZjFhNDQ3YjktYWZiNC00NmQ4LTlkZjgtZjE0YTMyMjdlYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuU1RkxqZyFgLKN8c3KHviBJcbgOdcXbwX+u SB1B9gItVx1bH+UD5/5peqvSK3iKaM2bHVa5D6pUpyysQfUOdm9Ehd15U7VxpbAq GwbMlKT5Y+STz58O7jv7maMOrXSruqnXphRGxdzoxHtGnKOxk5c1bwRMjW0Gclz/ CAuOBKVOHpjXdRHBfQ2M0XTUzqHCKT+zBppDMviCvp/WVdDEkm9x58Acr8J4UISg JMMqxL/COtCMTWBWnQJDjhbuD5jc+vO52vZNZ+egxBkWinBwlbg7IAT1WBEDfCjS CVDEz33BBc1H29ReiqN+pr3/MP2no0Y7pUrKz6Bab2nkMXLdlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIBcVjmeICnNibfbLvUp0vkhyxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTRmYzNhYTItNGUzNi0z MjQxLWFkNDItODZhYjRmZGFjNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhrkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwYRRFtrCNEMp+FNcSj3b0b1OSoGxxlauWLWN0xEPvObqXV8otcaoUl VorI1ba03FYBbCR0V/C7olKF553SY1RcZx4YKXfnAkoxBjt43mjgbJNXIa0B3Ax1 J5iBafq7Ift+fjfLZY2Gjb9sf77M0R3Z7ws0jUybbROu8ITvusW0FxV8UoC37EAd hd310j73SjwM4Yi6QxI3w2geLdv5srEAfuUrg0nB/KMzPyYCnhdSKuj40qCyQIZm Qxn/AmVSPHM4EkFMDDww7h7RdRo+O3dyNSnNGR6RQUyf7pA4aRsCkv3mZTz+uFsu qT0toZJDXIvJPPr3irGqtsM9t0VIHqM= -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:02 2025 by rpki-client