$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa File: b9f5a37a-e848-3f03-9df0-961bca4da222.roa (raw, json) Hash identifier: LZx/clTTZde/QDBGWPVALUST42s852PYMBSCDZ1biYE= Subject key identifier: F3:05:56:2F:A4:D8:91:AD:4C:6E:99:FB:0F:7F:9E:C4:5E:77:1C:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26857B1C9472381371F36B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa Signing time: Wed 10 Sep 2025 17:37:22 +0000 ROA not before: Wed 10 Sep 2025 17:37:22 +0000 ROA not after: Tue 09 Dec 2025 18:37:22 +0000 asID: 54253 IP address blocks: 137.131.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:7b:1c:94:72:38:13:71:f3:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:22 2025 GMT Not After : Dec 9 18:37:22 2025 GMT Subject: CN=830ab925-316f-42fe-a6a3-1ece97d83008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:13:a2:9a:21:c3:a6:bc:1d:2a:1d:9c:e0: d7:fd:ec:a6:1c:5f:65:aa:01:8d:ce:b0:ba:31:60: a2:d6:e7:56:d0:d7:6d:46:93:85:45:eb:90:8e:62: 87:ec:3f:fd:e2:7b:f7:00:91:3c:e8:90:fa:57:eb: 84:d3:9e:7b:4e:45:38:b7:55:a1:30:7b:3a:2b:68: 11:04:ce:e5:db:50:cc:8f:7a:d2:4d:f1:03:21:08: 18:73:11:1c:b8:07:a1:56:98:98:1d:98:a0:59:31: 11:69:e5:fb:0b:bf:6f:d6:c6:f2:a1:50:87:d9:72: e1:25:21:ca:05:83:24:3f:79:16:b2:6e:3f:46:87: b6:f9:26:75:03:29:1f:ad:b9:b9:b3:ab:4c:cc:f8: 72:30:e6:d5:b0:2a:be:53:3e:db:c2:d4:3b:0c:97: 1f:65:e7:2e:21:26:7e:c8:97:20:f7:09:75:dd:7d: 85:ed:19:74:51:cf:05:16:55:81:b0:c0:e4:9d:ba: af:24:b4:50:74:fd:ef:6a:f1:51:cb:92:a9:e7:2d: 82:bd:dd:07:71:96:c4:65:51:5a:bc:29:dd:9e:17: 6b:5a:cb:25:5a:f0:ed:f6:c5:ec:c2:29:58:38:36: 4b:c0:bf:7b:7d:3d:99:f7:e3:ec:3b:68:1f:66:6a: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:56:2F:A4:D8:91:AD:4C:6E:99:FB:0F:7F:9E:C4:5E:77:1C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f5a37a-e848-3f03-9df0-961bca4da222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 137.131.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f9:2d:05:6c:35:04:68:0a:02:c2:de:80:26:5f:8d:f2:70: 86:b1:dd:2b:07:43:b2:5f:c5:b5:3a:57:15:82:9a:c2:89:5c: e8:0e:a5:ad:14:a6:6e:d0:0a:a7:45:d6:65:84:9c:cd:ef:3e: 7c:bf:ed:91:7c:0f:fa:04:d0:46:f4:36:8d:4f:fa:ff:2e:48: 4c:bb:b4:71:90:2e:7a:cb:a4:6c:6f:bb:2e:06:9b:d3:8d:36: 7e:4c:cd:c2:3a:8b:a1:2a:a3:dc:d5:ff:89:4a:b4:77:27:eb: e0:01:b7:d2:e6:80:7d:b1:30:22:c0:77:69:76:15:0a:ad:1d: 0e:7c:a9:78:83:6a:32:f2:30:17:46:ed:4c:da:81:fc:85:03: d5:3d:1f:56:99:1a:80:a4:44:0f:79:d6:a0:0d:75:e0:19:16: 50:e7:fd:91:13:a4:1c:9f:59:67:a1:4e:88:93:45:04:ab:22: 2d:7b:d5:2d:bf:09:7e:7e:da:63:04:72:39:d9:d2:17:03:20: 6d:4b:2c:c4:30:49:58:58:db:82:9a:de:54:f1:e3:3b:92:b5: 68:59:09:88:36:90:eb:d1:87:53:28:c2:76:b8:75:0e:a5:55: ad:43:17:bd:de:34:cf:f0:a0:57:ba:c1:bb:67:7c:06:05:4d: 8a:52:9c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhXsclHI4E3HzawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzcyMloXDTI1MTIwOTE4MzcyMlowLzEtMCsGA1UEAxMk ODMwYWI5MjUtMzE2Zi00MmZlLWE2YTMtMWVjZTk3ZDgzMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWcTopohw6a8HSodnODX/eymHF9lqgGNzrC6 MWCi1udW0NdtRpOFReuQjmKH7D/94nv3AJE86JD6V+uE0557TkU4t1WhMHs6K2gR BM7l21DMj3rSTfEDIQgYcxEcuAehVpiYHZigWTERaeX7C79v1sbyoVCH2XLhJSHK BYMkP3kWsm4/Roe2+SZ1Aykfrbm5s6tMzPhyMObVsCq+Uz7bwtQ7DJcfZecuISZ+ yJcg9wl13X2F7Rl0Uc8FFlWBsMDknbqvJLRQdP3vavFRy5Kp5y2Cvd0HcZbEZVFa vCndnhdrWsslWvDt9sXswilYODZLwL97fT2Z9+PsO2gfZmrP2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMFVi+k2JGtTG6Z+w9/nsRedxxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmNWEzN2EtZTg0OC0z ZjAzLTlkZjAtOTYxYmNhNGRhMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiYNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj5LQVsNQRoCgLC3oAmX43ycIax3SsHQ7JfxbU6VxWCmsKJXOgOpa0U pm7QCqdF1mWEnM3vPny/7ZF8D/oE0Eb0No1P+v8uSEy7tHGQLnrLpGxvuy4Gm9ON Nn5MzcI6i6Eqo9zV/4lKtHcn6+ABt9LmgH2xMCLAd2l2FQqtHQ58qXiDajLyMBdG 7UzagfyFA9U9H1aZGoCkRA951qANdeAZFlDn/ZETpByfWWehToiTRQSrIi171S2/ CX5+2mMEcjnZ0hcDIG1LLMQwSVhY24Ka3lTx4zuStWhZCYg2kOvRh1Mowna4dQ6l Va1DF73eNM/woFe6wbtnfAYFTYpSnMs= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:11 2025 by rpki-client