$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa File: c545ee41-25d1-3f84-a10c-b4b80607c07d.roa (raw, json) Hash identifier: TH08ADQe3LEMKk8NEV89kXc9iZN261/ZNMkUw7WjT20= Subject key identifier: 62:06:B7:55:74:88:8C:2E:45:64:BF:CD:93:4E:AC:48:DB:CE:20:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2482499E719CB995EA045180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa Signing time: Wed 10 Sep 2025 00:19:19 +0000 ROA not before: Wed 10 Sep 2025 00:19:19 +0000 ROA not after: Tue 09 Dec 2025 01:19:19 +0000 asID: 54253 IP address blocks: 134.185.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:49:9e:71:9c:b9:95:ea:04:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:19:19 2025 GMT Not After : Dec 9 01:19:19 2025 GMT Subject: CN=d217e3fe-5555-46ad-a27f-4c4fcfb5e67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:4c:92:5d:b3:d0:cf:73:df:da:68:cd:f2: ac:49:5b:e9:8c:45:59:d1:4d:a2:81:b6:cf:9f:e6: 6e:ca:9b:a4:95:03:83:62:16:af:d8:2a:b2:fd:ac: 9b:f3:67:82:33:0c:21:e4:a3:64:ab:c4:28:76:e5: 7a:cf:21:d7:1c:e8:94:d6:22:9b:24:40:f7:21:93: 66:84:b9:32:c3:be:26:fb:e4:0d:a5:7b:36:31:38: 49:f8:49:5f:22:c7:00:5e:60:e1:a1:47:8f:76:75: e3:c2:24:3f:ed:5c:1d:88:09:eb:2b:49:12:63:4d: 5f:b3:f5:9a:69:9d:90:89:06:17:dd:3a:75:5c:4b: cd:2c:c8:5b:df:ee:8d:84:30:c3:e5:68:c1:78:df: 37:f4:87:83:58:2a:24:bc:b1:0d:25:3e:65:64:80: 9c:f3:71:f6:92:ea:36:ea:3f:ae:7c:95:f7:68:07: e7:15:17:b4:ef:83:1e:9e:66:ab:3f:fc:f9:d4:8f: df:c9:90:0c:89:42:79:8c:02:0c:d0:7d:54:48:2d: 3d:aa:ea:2f:42:45:7c:aa:a5:e0:e1:8c:d1:bf:6f: 6d:a4:df:2e:fe:9f:73:18:cc:b1:f7:61:6e:84:91: a1:4c:c7:21:b8:60:4b:3a:56:70:08:93:09:3f:0a: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:B7:55:74:88:8C:2E:45:64:BF:CD:93:4E:AC:48:DB:CE:20:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c545ee41-25d1-3f84-a10c-b4b80607c07d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d7:37:e6:71:9b:a3:44:21:07:3a:78:3c:67:39:2a:86:07: 3f:87:c8:a4:c1:63:e0:b4:0f:56:98:3d:27:6c:e9:eb:e8:c7: b2:bc:83:5e:e6:bc:5e:92:2d:3d:73:f2:18:1e:ab:f0:bf:85: 07:ee:30:c2:c2:c3:8e:85:5a:f3:31:ff:47:7e:b9:fe:90:72: 23:2e:1d:61:b3:0d:52:82:cc:5c:12:bd:9d:9e:18:87:87:a2: 96:19:0a:03:e1:05:9c:dc:73:30:24:2d:30:69:88:32:f3:b6: 54:bc:8f:53:21:98:f5:92:8a:be:79:cd:3d:76:51:60:d3:52: 5d:a8:7e:c4:63:44:8f:6b:58:50:5a:08:e2:da:fe:fb:24:c8: 2b:cf:2a:e1:79:4b:61:ba:d8:86:23:d7:28:fb:de:71:59:cf: 59:34:13:14:08:33:3a:40:a4:8a:29:5c:62:ea:ed:e6:f4:32: be:08:2c:89:1c:44:32:2e:d5:71:1e:9c:7f:96:25:6a:50:13: a6:31:02:c0:50:b8:5d:84:64:12:aa:d2:9c:21:0c:2e:f9:28: 5a:8d:42:40:be:69:1b:d6:82:32:21:cf:b8:d7:72:3f:80:8c: a0:07:93:b0:a4:f3:56:51:03:f7:8d:40:ff:1e:78:be:20:cf: 74:23:79:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskgkmecZy5leoEUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTkxOVoXDTI1MTIwOTAxMTkxOVowLzEtMCsGA1UEAxMk ZDIxN2UzZmUtNTU1NS00NmFkLWEyN2YtNGM0ZmNmYjVlNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDJMkl2z0M9z39pozfKsSVvpjEVZ0U2igbbP n+ZuypuklQODYhav2Cqy/ayb82eCMwwh5KNkq8QoduV6zyHXHOiU1iKbJED3IZNm hLkyw74m++QNpXs2MThJ+ElfIscAXmDhoUePdnXjwiQ/7VwdiAnrK0kSY01fs/Wa aZ2QiQYX3Tp1XEvNLMhb3+6NhDDD5WjBeN839IeDWCokvLENJT5lZICc83H2kuo2 6j+ufJX3aAfnFRe074MenmarP/z51I/fyZAMiUJ5jAIM0H1USC09quovQkV8qqXg 4YzRv29tpN8u/p9zGMyx92FuhJGhTMchuGBLOlZwCJMJPwr5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIGt1V0iIwuRWS/zZNOrEjbziAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzU0NWVlNDEtMjVkMS0z Zjg0LWExMGMtYjRiODA2MDdjMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChrmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXXN+Zxm6NEIQc6eDxnOSqGBz+HyKTBY+C0D1aYPSds6evox7K8g17m vF6SLT1z8hgeq/C/hQfuMMLCw46FWvMx/0d+uf6QciMuHWGzDVKCzFwSvZ2eGIeH opYZCgPhBZzcczAkLTBpiDLztlS8j1MhmPWSir55zT12UWDTUl2ofsRjRI9rWFBa COLa/vskyCvPKuF5S2G62IYj1yj73nFZz1k0ExQIMzpApIopXGLq7eb0Mr4ILIkc RDIu1XEenH+WJWpQE6YxAsBQuF2EZBKq0pwhDC75KFqNQkC+aRvWgjIhz7jXcj+A jKAHk7Ck81ZRA/eNQP8eeL4gz3QjeUg= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:17 2025 by rpki-client