$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa File: fc3c9a71-297c-3669-8a10-ecd6cc302677.roa (raw, json) Hash identifier: oDu07Nrxi9R423qdhXGmy7OhdsHMlJTft9jQ4Cg3VkU= Subject key identifier: DF:96:9F:16:F3:3A:B6:EF:A8:39:86:FB:2C:3A:EE:7E:68:D5:6A:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B27195C9DAEB41F1596653CC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa Signing time: Wed 10 Sep 2025 22:35:20 +0000 ROA not before: Wed 10 Sep 2025 22:35:20 +0000 ROA not after: Tue 09 Dec 2025 23:35:20 +0000 asID: 54253 IP address blocks: 131.186.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:5c:9d:ae:b4:1f:15:96:65:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:35:20 2025 GMT Not After : Dec 9 23:35:20 2025 GMT Subject: CN=e3e28c30-3572-48a6-9817-1286341c730f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:e4:a6:d2:a5:5d:81:b0:62:bc:6f:c0:0d: 66:b6:23:10:47:59:c8:0f:06:35:3f:64:18:80:55: c9:07:c4:d8:bc:0b:f2:79:5b:c9:8f:53:90:f3:9b: db:31:36:7a:08:82:c5:0b:11:8d:55:70:0a:0e:e0: 88:35:41:e6:b3:fc:02:6b:6b:e5:df:e0:51:b4:e6: 32:7c:26:f4:fe:9c:1e:af:05:fe:26:8f:35:83:11: 03:ec:b9:31:61:08:80:92:3d:ee:bf:cb:43:ad:1c: 9d:a0:32:bd:88:b8:5f:99:7d:de:72:e2:f0:92:bb: 52:7c:72:04:fc:40:14:4c:8c:d0:58:76:31:c6:e2: f9:24:fd:2f:1a:85:f7:f4:92:36:ea:99:83:78:60: 2f:d3:f5:d0:02:e3:67:39:56:c3:aa:ec:f1:86:52: 46:d9:3d:e0:c4:a1:a4:42:5f:a7:1d:08:fc:ad:0c: cf:67:37:34:ac:c8:97:b6:9c:dd:4f:38:ec:7d:ce: 99:0c:3c:32:14:05:2c:e7:34:16:53:92:05:8f:82: f1:c4:54:06:7e:9e:a7:dc:1d:03:e9:32:30:50:4d: f8:0c:6b:f5:04:c8:b0:d1:b6:2e:23:27:c6:ff:b7: 90:c2:2e:2e:21:bf:72:66:71:b8:12:7a:55:73:d8: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:96:9F:16:F3:3A:B6:EF:A8:39:86:FB:2C:3A:EE:7E:68:D5:6A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a8:f3:8d:29:6e:ff:56:bb:99:66:52:44:f5:1e:01:c3:95: 13:91:32:ab:af:30:04:2d:24:25:5d:bd:ef:af:57:96:b6:04: 34:b6:ee:d4:4e:94:ed:52:be:07:c3:bb:34:2f:e8:5a:e8:53: 63:0b:1d:e7:cc:d6:c3:2c:b7:86:26:ff:5e:f2:cc:38:9a:3b: cd:71:88:28:52:32:39:ee:9b:60:c1:c2:ee:64:87:b8:c1:f8: 53:8a:be:1c:9f:e0:9a:00:d2:b8:3d:26:d0:54:81:52:5d:01: fc:34:83:3f:5e:38:7c:f8:4a:9b:8a:6e:0f:86:5e:16:07:b0: 3f:83:ec:74:4f:c2:0a:6a:fe:c2:79:91:23:7e:52:fb:d4:c1: ef:1e:38:18:6f:2d:9c:95:aa:df:9a:91:6e:ba:64:64:e8:7d: 45:83:db:c5:27:de:ea:c5:d0:85:c2:f5:6c:f5:82:bc:0b:12: f5:22:f2:c1:c5:05:11:70:93:20:c4:93:d6:4f:3d:54:1b:d5: 6c:0c:62:ca:e1:16:7c:ce:55:56:7f:1f:ab:90:06:08:0e:60: 4f:3c:1c:17:ad:ad:77:cb:11:9f:0c:a1:65:fe:aa:95:02:db: d3:74:82:4c:35:d1:36:d2:54:f7:f7:d0:40:b5:10:18:e3:2d: 7a:6f:a1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGVydrrQfFZZlPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzUyMFoXDTI1MTIwOTIzMzUyMFowLzEtMCsGA1UEAxMk ZTNlMjhjMzAtMzU3Mi00OGE2LTk4MTctMTI4NjM0MWM3MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDkptKlXYGwYrxvwA1mtiMQR1nIDwY1P2QY gFXJB8TYvAvyeVvJj1OQ85vbMTZ6CILFCxGNVXAKDuCINUHms/wCa2vl3+BRtOYy fCb0/pwerwX+Jo81gxED7LkxYQiAkj3uv8tDrRydoDK9iLhfmX3ecuLwkrtSfHIE /EAUTIzQWHYxxuL5JP0vGoX39JI26pmDeGAv0/XQAuNnOVbDquzxhlJG2T3gxKGk Ql+nHQj8rQzPZzc0rMiXtpzdTzjsfc6ZDDwyFAUs5zQWU5IFj4LxxFQGfp6n3B0D 6TIwUE34DGv1BMiw0bYuIyfG/7eQwi4uIb9yZnG4EnpVc9htXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+WnxbzOrbvqDmG+yw67n5o1Wp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmMzYzlhNzEtMjk3Yy0z NjY5LThhMTAtZWNkNmNjMzAyNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg7pkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCo840pbv9Wu5lmUkT1HgHDlRORMquvMAQtJCVdve+vV5a2BDS27tRO lO1SvgfDuzQv6FroU2MLHefM1sMst4Ym/17yzDiaO81xiChSMjnum2DBwu5kh7jB +FOKvhyf4JoA0rg9JtBUgVJdAfw0gz9eOHz4SpuKbg+GXhYHsD+D7HRPwgpq/sJ5 kSN+UvvUwe8eOBhvLZyVqt+akW66ZGTofUWD28Un3urF0IXC9Wz1grwLEvUi8sHF BRFwkyDEk9ZPPVQb1WwMYsrhFnzOVVZ/H6uQBggOYE88HBetrXfLEZ8MoWX+qpUC 29N0gkw10TbSVPf30EC1EBjjLXpvoSg= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:16 2025 by rpki-client