$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eaa6f87-40ce-37e5-ade7-8cabaf5be182.roa File: 9eaa6f87-40ce-37e5-ade7-8cabaf5be182.roa (raw, json) Hash identifier: 0K017TgpPp5MoHqMCHXFKnWD1Xs2JeH6WPOlubYvfng= Subject key identifier: 48:43:46:C0:C7:5A:EC:FE:24:A0:77:5F:01:8C:DF:E7:78:43:6C:6C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE66158C165576A3C2E016FB0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eaa6f87-40ce-37e5-ade7-8cabaf5be182.roa Signing time: Mon 18 Aug 2025 18:12:49 +0000 ROA not before: Mon 18 Aug 2025 18:12:49 +0000 ROA not after: Sun 16 Nov 2025 19:12:49 +0000 asID: 31898 IP address blocks: 132.145.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:61:58:c1:65:57:6a:3c:2e:01:6f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:12:49 2025 GMT Not After : Nov 16 19:12:49 2025 GMT Subject: CN=844d57f4-1f26-4a30-b0c6-7f927744bd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:e4:35:d7:7f:b6:f0:84:70:cb:e4:e3:45: c3:2c:39:e2:fc:3c:89:b4:2b:4f:f3:4c:ac:51:24: f2:a7:1d:b8:48:6f:73:b2:37:23:ba:99:94:a7:88: d7:00:e4:1b:18:39:5c:a4:4e:14:7d:d9:84:0e:cb: 6b:7d:4c:08:23:2f:3d:cf:64:c8:07:94:a7:97:37: 97:75:60:95:3f:25:ec:e8:a9:17:af:b2:86:91:51: 5e:99:10:ea:bc:bd:74:0c:0b:02:d1:25:b1:96:b1: ba:4c:36:f6:13:15:46:cb:55:55:5e:b5:7d:b6:08: 12:58:2d:e9:f6:16:23:be:d6:94:49:fc:2e:14:ce: 16:56:88:c0:e5:56:e9:a8:a1:5e:28:73:43:1e:df: 8e:3f:4b:72:7f:72:ae:8e:d0:8a:e3:c6:1a:0f:f9: 84:ed:35:0e:a0:3e:3c:91:71:67:c7:8b:f9:ef:2f: 2b:33:19:3a:08:24:0b:1f:c6:2e:a4:ce:eb:21:db: 93:6d:12:f8:50:bd:49:a0:f3:ff:bc:cd:b8:c5:b2: 9c:92:f7:e5:eb:db:00:d2:3a:db:20:b9:c2:c8:99: 51:47:b3:14:a4:ef:1f:6c:c7:95:f8:58:d9:32:43: 97:31:47:26:bb:34:fb:96:3b:65:21:f9:84:ff:d8: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:43:46:C0:C7:5A:EC:FE:24:A0:77:5F:01:8C:DF:E7:78:43:6C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eaa6f87-40ce-37e5-ade7-8cabaf5be182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:06:8b:88:59:ad:74:d1:84:69:1c:83:2c:df:c3:c2:8d:7b: 25:f7:45:88:90:93:30:7a:2f:55:78:48:d6:a7:85:5c:71:d1: 87:83:98:c3:92:8a:20:15:04:07:2d:20:9e:57:27:24:05:51: 39:ff:ab:0d:b2:7d:d5:7a:5e:fe:fa:3c:d1:83:3e:04:4c:7b: 05:1d:7d:34:f9:55:b0:de:49:02:44:b4:1d:60:dd:7a:1d:ed: 81:8b:4b:e0:92:ca:25:24:dd:c5:89:71:ff:5c:b7:e0:8a:41: 0f:cb:0b:22:26:b7:ae:82:2c:22:39:c7:47:2a:12:a3:88:a2: 86:e3:38:1f:1c:75:73:c5:d5:2e:53:ba:f8:56:00:13:26:01: 94:4b:80:8b:e4:59:08:22:fa:33:ba:cd:bf:10:f5:5c:cc:62: 80:4d:52:d9:7d:8f:20:de:be:ef:0d:e8:0d:cb:80:06:ac:dc: df:61:18:84:68:13:5c:46:1c:c1:31:cf:66:fd:33:ff:ed:c5: 33:e4:14:1c:66:26:9b:88:ad:f4:e9:18:d8:66:f9:d4:77:5f: 41:2e:5b:1d:77:8d:ae:1c:84:37:3a:a1:e9:05:73:f0:e3:24: 26:8d:3c:96:e5:64:2a:ab:a8:8f:ca:14:31:d5:37:97:54:8d: d7:09:a7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYVjBZVdqPC4Bb7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTI0OVoXDTI1MTExNjE5MTI0OVowLzEtMCsGA1UEAxMk ODQ0ZDU3ZjQtMWYyNi00YTMwLWIwYzYtN2Y5Mjc3NDRiZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzXkNdd/tvCEcMvk40XDLDni/DyJtCtP80ys USTypx24SG9zsjcjupmUp4jXAOQbGDlcpE4UfdmEDstrfUwIIy89z2TIB5SnlzeX dWCVPyXs6KkXr7KGkVFemRDqvL10DAsC0SWxlrG6TDb2ExVGy1VVXrV9tggSWC3p 9hYjvtaUSfwuFM4WVojA5VbpqKFeKHNDHt+OP0tyf3KujtCK48YaD/mE7TUOoD48 kXFnx4v57y8rMxk6CCQLH8YupM7rIduTbRL4UL1JoPP/vM24xbKckvfl69sA0jrb ILnCyJlRR7MUpO8fbMeV+FjZMkOXMUcmuzT7ljtlIfmE/9j7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhDRsDHWuz+JKB3XwGM3+d4Q2xsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWVhYTZmODctNDBjZS0z N2U1LWFkZTctOGNhYmFmNWJlMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsGi4hZrXTRhGkcgyzfw8KNeyX3RYiQkzB6L1V4SNanhVxx0YeDmMOS iiAVBActIJ5XJyQFUTn/qw2yfdV6Xv76PNGDPgRMewUdfTT5VbDeSQJEtB1g3Xod 7YGLS+CSyiUk3cWJcf9ct+CKQQ/LCyImt66CLCI5x0cqEqOIoobjOB8cdXPF1S5T uvhWABMmAZRLgIvkWQgi+jO6zb8Q9VzMYoBNUtl9jyDevu8N6A3LgAas3N9hGIRo E1xGHMExz2b9M//txTPkFBxmJpuIrfTpGNhm+dR3X0EuWx13ja4chDc6oekFc/Dj JCaNPJblZCqrqI/KFDHVN5dUjdcJp3c= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:42 2025 by rpki-client