$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa File: c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa (raw, json) Hash identifier: 21PMwzcuM5F6g/DtmBinmfNuvbjAx8MkNnxcO4QeahM= Subject key identifier: 31:BB:CE:93:3A:52:B3:8E:FE:8E:75:20:56:47:BE:20:7C:6F:D3:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B27195F49434F14F1950ABF70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa Signing time: Wed 10 Sep 2025 22:35:21 +0000 ROA not before: Wed 10 Sep 2025 22:35:21 +0000 ROA not after: Tue 09 Dec 2025 23:35:21 +0000 asID: 54253 IP address blocks: 131.186.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:5f:49:43:4f:14:f1:95:0a:bf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:35:21 2025 GMT Not After : Dec 9 23:35:21 2025 GMT Subject: CN=332e5c97-a070-4e32-878a-76aa514475b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:05:4c:c8:1d:c1:8e:df:2d:8c:ac:a2:2a: f8:8d:69:30:8a:ab:e1:82:26:4e:36:e4:b5:5b:82: 0d:e0:d0:17:69:8c:da:59:12:41:82:2c:0c:e6:b2: f6:6f:a3:75:d1:e9:5e:80:eb:d5:e1:00:19:3b:d4: 62:39:d9:ea:28:32:4b:2c:8b:02:8f:9d:a1:d7:22: 7f:85:96:2b:28:40:36:db:a8:4c:16:7c:b8:32:99: ee:48:92:51:c7:60:82:fb:34:d6:6e:2c:7d:c7:a6: 80:cd:0b:2f:52:10:dd:d8:f4:6b:20:94:b0:b9:23: e9:db:22:6a:cd:56:c1:10:6d:2c:01:6d:6b:bc:b6: 93:e9:51:78:70:30:67:88:cd:6b:d8:f4:5f:8b:c2: 23:71:37:4d:34:18:36:95:16:a6:59:9f:fe:c8:a3: 3f:18:e1:8d:c2:18:b0:fb:54:1c:92:40:65:d8:ee: 8d:e1:ae:64:b5:b5:44:91:91:81:9e:69:42:21:2b: 57:0a:fa:b6:6f:3a:49:b9:57:6a:1e:bb:d1:16:43: 90:77:23:b8:c0:e9:f8:ed:51:57:20:7d:92:a7:0c: 92:2b:b1:df:02:62:26:15:4b:02:5e:d0:19:3b:9f: 79:9b:bc:de:a5:31:f1:2c:44:59:32:8d:67:f2:fe: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:CE:93:3A:52:B3:8E:FE:8E:75:20:56:47:BE:20:7C:6F:D3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:15:95:12:d3:54:94:07:f9:29:86:35:36:b8:10:1e:2e:67: 18:d1:90:a2:61:43:54:36:c3:66:34:f1:b8:ce:78:63:2a:b6: cc:6f:b1:3d:9d:3f:1e:5a:6e:1a:bb:c7:8a:ab:52:4d:f3:af: 8d:23:4f:d3:2b:71:0a:33:5a:44:df:e6:b3:0c:b9:93:4a:bf: 68:ed:a9:a4:43:bd:63:7e:25:dc:29:a6:e8:6e:35:61:06:61: c2:2d:a8:b1:ce:1e:28:e9:94:1f:60:b0:05:d6:c1:37:64:01: 64:3d:fa:98:34:63:8b:ab:14:8b:ca:7b:6b:86:02:38:e3:0d: 99:4f:b8:1c:43:ee:ac:9f:d6:01:ff:4f:c8:96:32:41:25:9b: 52:9a:7a:2f:b0:e8:1f:e3:b0:97:10:de:99:09:5f:23:a8:9f: 08:06:f2:26:e6:f8:0b:b2:e5:cf:1a:75:61:90:c0:4f:96:35: 75:4a:a4:84:d4:5a:13:3b:e4:66:0d:9c:8b:75:04:e0:5b:4d: da:a1:85:6e:a0:ec:20:3e:02:07:55:10:0a:cd:f8:ef:35:9c: 22:fb:75:67:c8:56:e6:1c:76:36:e1:85:cb:d5:09:90:e6:c7: 66:99:3a:4f:14:9b:88:bf:5f:68:7a:f9:4a:9d:21:41:d8:f1: 4d:56:6a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGV9JQ08U8ZUKv3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzUyMVoXDTI1MTIwOTIzMzUyMVowLzEtMCsGA1UEAxMk MzMyZTVjOTctYTA3MC00ZTMyLTg3OGEtNzZhYTUxNDQ3NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HoFTMgdwY7fLYysoir4jWkwiqvhgiZONuS1 W4IN4NAXaYzaWRJBgiwM5rL2b6N10elegOvV4QAZO9RiOdnqKDJLLIsCj52h1yJ/ hZYrKEA226hMFny4MpnuSJJRx2CC+zTWbix9x6aAzQsvUhDd2PRrIJSwuSPp2yJq zVbBEG0sAW1rvLaT6VF4cDBniM1r2PRfi8IjcTdNNBg2lRamWZ/+yKM/GOGNwhiw +1QckkBl2O6N4a5ktbVEkZGBnmlCIStXCvq2bzpJuVdqHrvRFkOQdyO4wOn47VFX IH2SpwySK7HfAmImFUsCXtAZO595m7zepTHxLERZMo1n8v7OjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG7zpM6UrOO/o51IFZHviB8b9McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMzOTNlMzYtODQwYy0z NDIzLWI3ZjAtNzJiYjJhYjllMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg7poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0VlRLTVJQH+SmGNTa4EB4uZxjRkKJhQ1Q2w2Y08bjOeGMqtsxvsT2d Px5abhq7x4qrUk3zr40jT9MrcQozWkTf5rMMuZNKv2jtqaRDvWN+JdwppuhuNWEG YcItqLHOHijplB9gsAXWwTdkAWQ9+pg0Y4urFIvKe2uGAjjjDZlPuBxD7qyf1gH/ T8iWMkElm1Kaei+w6B/jsJcQ3pkJXyOonwgG8ibm+Auy5c8adWGQwE+WNXVKpITU WhM75GYNnIt1BOBbTdqhhW6g7CA+AgdVEArN+O81nCL7dWfIVuYcdjbhhcvVCZDm x2aZOk8Um4i/X2h6+UqdIUHY8U1Wakg= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:50 2025 by rpki-client