$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e318d1a0-8a38-392c-ba29-9a7cc99870fd.roa File: e318d1a0-8a38-392c-ba29-9a7cc99870fd.roa (raw, json) Hash identifier: AM1wPw0O3fM5iiB382rUpjuIyRLZBV8yHfj7Bya45nw= Subject key identifier: DC:D2:C7:29:62:E0:29:7C:D5:F1:DF:FF:B1:FF:86:C8:0D:07:3E:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42BEC8A22FDE285184BAC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e318d1a0-8a38-392c-ba29-9a7cc99870fd.roa Signing time: Tue 26 Aug 2025 22:54:45 +0000 ROA not before: Tue 26 Aug 2025 22:54:45 +0000 ROA not after: Mon 24 Nov 2025 23:54:45 +0000 asID: 31898 IP address blocks: 136.248.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:be:c8:a2:2f:de:28:51:84:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:45 2025 GMT Not After : Nov 24 23:54:45 2025 GMT Subject: CN=5ad12d68-a2d0-4793-a378-de8d75b6c74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:0c:90:2c:b2:67:5a:8b:9d:08:ee:a2:1e: ff:83:3b:d1:92:52:83:87:68:b2:3b:14:99:ec:51: bc:6a:87:4c:af:87:5f:a2:86:4e:10:c5:b1:fb:38: a3:45:3d:0c:92:65:af:4f:31:6c:43:6c:45:94:42: 97:00:24:5a:06:e3:59:e4:fb:3e:72:70:17:c8:8e: e0:f3:fd:10:6e:88:3a:04:9e:c5:65:cf:fa:33:cb: b9:87:2b:02:2d:76:6d:fe:47:39:32:9d:ad:8c:24: 4a:76:65:72:e4:2f:21:1f:6f:48:9f:35:c2:1b:ee: c8:46:60:c6:68:03:6b:75:3a:78:05:e7:17:62:72: 4a:49:7b:7e:0a:a6:0d:e5:1f:bd:a7:14:d1:1a:08: 03:54:ff:09:7f:bb:d9:6b:8e:5a:58:16:cd:71:57: a2:a6:c1:32:84:1b:77:a2:2f:a6:88:73:c2:1d:82: 73:7a:86:8f:3e:7d:ad:5d:81:70:a4:38:1e:3a:a1: 8e:12:79:c3:f4:39:c2:83:f5:a2:45:bf:59:7e:fa: f6:4d:fd:98:d0:ea:2d:3a:1a:5a:59:0d:b8:42:c0: 67:cf:6f:10:fc:76:4c:76:16:21:a0:2f:67:58:fc: 09:ed:6f:15:b8:65:fd:8c:e2:11:66:ac:a9:4a:43: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:C7:29:62:E0:29:7C:D5:F1:DF:FF:B1:FF:86:C8:0D:07:3E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e318d1a0-8a38-392c-ba29-9a7cc99870fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 136.248.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:af:64:81:70:16:95:af:54:0e:df:d0:f7:cd:4b:eb:be:67: 78:99:3f:4c:eb:e7:09:3a:90:14:91:2e:63:56:33:73:5f:11: a5:f4:f1:ff:46:10:d8:89:d0:f5:36:7f:d1:f8:2a:87:bd:11: 1f:d0:f1:d0:53:67:70:a7:aa:fc:b3:f8:b8:c2:bc:7a:3f:5b: 58:6e:c9:24:fb:db:7b:38:2e:9a:18:e3:07:3b:85:c3:fb:12: c7:17:34:4d:b9:9f:10:ee:88:e7:5b:11:2c:9a:79:51:39:9b: 1e:63:2f:9d:17:81:c4:c8:c4:5e:46:c2:7c:94:72:1e:19:35: 23:3e:00:24:eb:0c:0b:45:2b:5f:f4:67:01:0c:9f:18:45:9b: 3a:54:dd:72:8e:61:fa:35:71:32:aa:6a:bf:94:e0:60:3a:e6: ad:c8:b4:2b:e6:1f:6a:ee:29:6b:9c:53:a3:0b:49:7c:94:79: 58:e2:50:1f:ab:7d:c1:6c:16:35:88:8c:d1:8d:af:a7:91:99: 26:40:f3:ce:4a:71:9a:d6:4f:1f:2b:54:77:ad:f4:32:6a:e4: 62:55:ae:7c:8a:90:0a:fe:9b:8b:5d:7a:90:9a:75:7a:74:14: 04:e0:4e:65:76:99:c3:b9:c2:19:9b:66:f2:74:68:a1:5e:76: 58:69:fd:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qr7Ioi/eKFGEusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQ0NVoXDTI1MTEyNDIzNTQ0NVowLzEtMCsGA1UEAxMk NWFkMTJkNjgtYTJkMC00NzkzLWEzNzgtZGU4ZDc1YjZjNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbcMkCyyZ1qLnQjuoh7/gzvRklKDh2iyOxSZ 7FG8aodMr4dfooZOEMWx+zijRT0MkmWvTzFsQ2xFlEKXACRaBuNZ5Ps+cnAXyI7g 8/0Qbog6BJ7FZc/6M8u5hysCLXZt/kc5Mp2tjCRKdmVy5C8hH29InzXCG+7IRmDG aANrdTp4BecXYnJKSXt+CqYN5R+9pxTRGggDVP8Jf7vZa45aWBbNcVeipsEyhBt3 oi+miHPCHYJzeoaPPn2tXYFwpDgeOqGOEnnD9DnCg/WiRb9Zfvr2Tf2Y0OotOhpa WQ24QsBnz28Q/HZMdhYhoC9nWPwJ7W8VuGX9jOIRZqypSkMN1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzSxyli4Cl81fHf/7H/hsgNBz7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTMxOGQxYTAtOGEzOC0z OTJjLWJhMjktOWE3Y2M5OTg3MGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuvZIFwFpWvVA7f0PfNS+u+Z3iZP0zr5wk6kBSRLmNWM3NfEaX08f9G ENiJ0PU2f9H4Koe9ER/Q8dBTZ3Cnqvyz+LjCvHo/W1huyST723s4LpoY4wc7hcP7 EscXNE25nxDuiOdbESyaeVE5mx5jL50XgcTIxF5GwnyUch4ZNSM+ACTrDAtFK1/0 ZwEMnxhFmzpU3XKOYfo1cTKqar+U4GA65q3ItCvmH2ruKWucU6MLSXyUeVjiUB+r fcFsFjWIjNGNr6eRmSZA885KcZrWTx8rVHet9DJq5GJVrnyKkAr+m4tdepCadXp0 FATgTmV2mcO5whmbZvJ0aKFedlhp/bQ= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:30 2025 by rpki-client