$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfc53683-1b53-3cd9-8db6-c996f6dffcb0.roa File: dfc53683-1b53-3cd9-8db6-c996f6dffcb0.roa (raw, json) Hash identifier: el/kFmDYrV/GiRisi95xpjweFlLTJNf/le2tHcEWO9M= Subject key identifier: 18:61:5A:67:DB:7A:EB:09:B4:4C:E4:04:38:7E:47:EC:2F:97:56:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26856261E3396A14F301C540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfc53683-1b53-3cd9-8db6-c996f6dffcb0.roa Signing time: Wed 10 Sep 2025 17:37:10 +0000 ROA not before: Wed 10 Sep 2025 17:37:10 +0000 ROA not after: Tue 09 Dec 2025 18:37:10 +0000 asID: 54253 IP address blocks: 136.248.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:62:61:e3:39:6a:14:f3:01:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:10 2025 GMT Not After : Dec 9 18:37:10 2025 GMT Subject: CN=b60f5ce1-1cc6-4cbf-91d3-2fd3d39ca5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:7c:15:bd:45:b1:b2:ed:47:f0:44:71:c6: 65:03:e0:ad:19:c1:37:61:6e:f6:8d:49:ce:a5:47: d5:f8:e1:c3:4f:30:75:f6:44:88:3d:bc:f6:4f:d5: f3:08:2b:1e:34:43:9b:bb:f7:cb:ac:3c:18:c0:7e: b4:97:2e:cf:ba:5a:20:6c:db:7e:32:b3:73:cc:a1: 9c:be:92:04:02:67:08:98:06:1d:c9:79:9e:44:60: 9c:84:e3:18:65:3e:e1:ad:d3:c2:26:30:8d:8b:82: a7:57:ef:1f:dc:6e:26:4f:fb:a5:24:b8:92:ba:2d: 1c:20:65:44:ea:2e:e9:de:5b:48:83:b4:d7:93:c3: 3e:c6:06:c3:19:5d:af:a3:65:0c:de:e1:bc:b6:13: d5:31:df:17:86:88:eb:0c:fe:67:a9:72:d2:e4:b2: ef:e6:cb:16:30:49:5c:f7:60:28:25:a1:48:1f:24: 39:51:6f:fc:e4:1f:cb:c3:00:ce:d5:ed:4c:c0:d8: 21:97:19:02:07:15:fa:50:be:a2:64:4e:db:4b:79: 74:95:03:6b:e0:31:c4:7c:d6:0b:66:2d:d8:6b:60: a8:de:27:48:b0:4c:72:31:60:b2:78:0d:80:79:07: 2b:6a:b7:3c:62:39:0e:16:2b:53:3e:1c:e8:81:d7: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:61:5A:67:DB:7A:EB:09:B4:4C:E4:04:38:7E:47:EC:2F:97:56:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfc53683-1b53-3cd9-8db6-c996f6dffcb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a0:5b:ef:ce:f9:b2:51:f4:21:8a:95:e7:a9:25:ef:84:a5: 23:ca:ab:03:d4:09:fe:0f:75:19:0e:ab:c6:d1:e3:92:7b:0b: 10:a9:2d:e9:cc:6b:09:cb:9e:ba:65:07:e1:78:ab:58:7a:47: 14:2f:36:c4:c5:8a:fa:4f:6c:0a:f5:f0:d1:02:c0:04:72:7a: e3:3d:e3:13:69:dc:79:39:c9:44:61:be:30:e6:d0:37:a0:c9: bd:9a:67:8e:0b:29:53:98:d7:88:bd:0d:11:db:76:8b:32:37: 79:ea:be:41:5f:18:d3:de:b9:7d:61:b5:88:a2:91:b6:f5:bd: dc:20:e7:08:03:ea:5a:04:8d:c0:c0:69:34:24:0d:b7:b5:3b: f2:fc:7e:65:a3:bf:9e:8d:08:77:50:39:b1:14:59:f3:0e:87: 56:b2:a8:08:81:15:ea:87:bc:18:9c:ff:8d:f6:7b:8d:83:6c: 59:f5:23:b7:dc:99:55:75:58:07:4e:c8:7e:49:1d:3b:2d:2b: 26:1e:fe:9d:67:c5:24:ae:83:7c:4d:d4:02:2d:cf:b5:ff:98: 45:be:ce:ce:8c:01:b4:ce:69:53:e6:dd:6b:db:4e:c5:fa:8d: 67:91:8b:8c:81:cf:90:43:a7:d8:76:35:07:1a:db:e7:c1:77: 5d:d7:e0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhWJh4zlqFPMBxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzcxMFoXDTI1MTIwOTE4MzcxMFowLzEtMCsGA1UEAxMk YjYwZjVjZTEtMWNjNi00Y2JmLTkxZDMtMmZkM2QzOWNhNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJ8Fb1FsbLtR/BEccZlA+CtGcE3YW72jUnO pUfV+OHDTzB19kSIPbz2T9XzCCseNEObu/fLrDwYwH60ly7PulogbNt+MrNzzKGc vpIEAmcImAYdyXmeRGCchOMYZT7hrdPCJjCNi4KnV+8f3G4mT/ulJLiSui0cIGVE 6i7p3ltIg7TXk8M+xgbDGV2vo2UM3uG8thPVMd8XhojrDP5nqXLS5LLv5ssWMElc 92AoJaFIHyQ5UW/85B/LwwDO1e1MwNghlxkCBxX6UL6iZE7bS3l0lQNr4DHEfNYL Zi3Ya2Co3idIsExyMWCyeA2AeQcrarc8YjkOFitTPhzogdfKEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhhWmfbeusJtEzkBDh+R+wvl1ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGZjNTM2ODMtMWI1My0z Y2Q5LThkYjYtYzk5NmY2ZGZmY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiPikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADagW+/O+bJR9CGKleepJe+EpSPKqwPUCf4PdRkOq8bR45J7CxCpLenM awnLnrplB+F4q1h6RxQvNsTFivpPbAr18NECwARyeuM94xNp3Hk5yURhvjDm0Deg yb2aZ44LKVOY14i9DRHbdosyN3nqvkFfGNPeuX1htYiikbb1vdwg5wgD6loEjcDA aTQkDbe1O/L8fmWjv56NCHdQObEUWfMOh1ayqAiBFeqHvBic/432e42DbFn1I7fc mVV1WAdOyH5JHTstKyYe/p1nxSSug3xN1AItz7X/mEW+zs6MAbTOaVPm3WvbTsX6 jWeRi4yBz5BDp9h2NQca2+fBd13X4Ao= -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:04 2025 by rpki-client