$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa File: 309f7d80-d6dd-33b7-86a9-205b39986e85.roa (raw, json) Hash identifier: oy67280FVsXrk2M5ZIS9jSoS8/fL0HTapwEdPwOYzTM= Subject key identifier: 92:FA:16:AF:D1:E8:2F:38:57:1A:00:B9:31:3B:1B:9A:96:B8:77:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA2F5F7F7D6DFE94850680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa Signing time: Thu 21 Aug 2025 10:26:57 +0000 ROA not before: Thu 21 Aug 2025 10:26:57 +0000 ROA not after: Wed 19 Nov 2025 11:26:57 +0000 asID: 31898 IP address blocks: 132.226.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:2f:5f:7f:7d:6d:fe:94:85:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:26:57 2025 GMT Not After : Nov 19 11:26:57 2025 GMT Subject: CN=1f993cd0-b800-4286-a748-8c828a5f174a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:1f:60:c4:b6:05:e2:2d:89:2e:a9:b1:48: 25:87:d6:10:da:01:b9:ff:8f:2a:7b:bf:43:a2:11: 69:00:49:fa:9f:2b:07:1e:93:d3:1f:04:eb:4d:34: 29:5d:b8:88:7b:4e:bb:80:80:c3:93:47:1d:a4:62: 17:95:df:38:7c:4e:46:e6:d5:ba:5e:b0:70:f2:ae: 94:e8:ce:84:83:3f:3c:6b:74:53:ee:12:6d:ed:a5: e3:87:3a:00:45:c1:c3:c7:12:da:33:66:38:4d:f0: 0b:d4:af:6b:68:d4:ab:40:38:cc:ca:63:08:93:3c: 9e:7a:6b:f3:64:a8:dd:2f:ec:c2:2b:0b:01:39:ee: 6a:30:dc:99:de:f8:7c:79:86:ab:47:42:41:1f:b1: a0:71:ae:dd:c5:43:cd:a1:72:aa:51:5b:59:f8:b9: bd:0e:1e:b1:7c:b2:07:b2:4e:36:b6:4d:e5:b8:5d: 7f:c6:fe:b2:b0:60:46:65:75:eb:aa:0e:ea:49:2a: 0a:33:03:e6:bc:8e:ab:95:53:0f:a8:2d:88:d4:c6: 96:74:45:e4:f6:4f:33:46:d8:d4:c1:ed:ec:9a:b8: cf:a5:2d:67:d4:93:23:0d:ab:b5:56:00:2d:47:4c: 78:c6:00:46:f9:57:15:fb:8b:e8:bd:29:2e:ef:aa: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:16:AF:D1:E8:2F:38:57:1A:00:B9:31:3B:1B:9A:96:B8:77:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/309f7d80-d6dd-33b7-86a9-205b39986e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:69:7b:ed:22:d7:fa:2a:9b:b1:14:90:ad:fa:4e:1a:59:a8: ab:3e:33:ea:d5:4e:31:ff:bf:41:28:12:05:ab:44:8f:bd:ed: a0:28:c7:21:bf:3a:63:43:47:57:4d:91:d6:83:91:b1:66:8b: 99:91:72:7e:08:9a:07:88:2e:66:47:2a:dc:05:b9:43:db:83: 8d:c8:1d:4c:0b:39:27:25:c2:ff:c8:d6:48:01:63:b3:c0:b5: 66:2a:91:56:7f:bd:5c:71:06:ab:49:d1:1a:91:db:f4:31:26: 3e:37:03:67:29:a9:4e:0e:ef:9a:67:ee:a0:5d:e2:8d:35:60: a9:5b:0d:81:a1:9d:f9:61:28:b0:0d:5d:a1:f7:39:95:c6:5b: bb:91:27:66:a0:29:73:f9:bf:f0:a7:32:68:0c:31:67:41:fe: 3b:f3:3b:83:cc:eb:a4:65:e1:7b:9f:90:9a:35:f1:41:ed:b9: f6:94:5b:c6:1a:6a:d7:2e:6a:1f:44:7c:06:80:fc:1f:6d:cb: f3:b8:0a:59:d6:19:1c:35:d1:0e:07:af:f7:9d:90:39:0e:35: 66:b5:65:e8:60:b4:2c:5a:ab:6b:66:f7:35:66:af:7f:e1:4e: f6:b9:96:e2:4a:12:35:2f:10:7f:ef:92:3a:25:58:a5:6c:9a: 07:96:67:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2i9ff31t/pSFBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjY1N1oXDTI1MTExOTExMjY1N1owLzEtMCsGA1UEAxMk MWY5OTNjZDAtYjgwMC00Mjg2LWE3NDgtOGM4MjhhNWYxNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAQfYMS2BeItiS6psUglh9YQ2gG5/48qe79D ohFpAEn6nysHHpPTHwTrTTQpXbiIe067gIDDk0cdpGIXld84fE5G5tW6XrBw8q6U 6M6Egz88a3RT7hJt7aXjhzoARcHDxxLaM2Y4TfAL1K9raNSrQDjMymMIkzyeemvz ZKjdL+zCKwsBOe5qMNyZ3vh8eYarR0JBH7Ggca7dxUPNoXKqUVtZ+Lm9Dh6xfLIH sk42tk3luF1/xv6ysGBGZXXrqg7qSSoKMwPmvI6rlVMPqC2I1MaWdEXk9k8zRtjU we3smrjPpS1n1JMjDau1VgAtR0x4xgBG+VcV+4vovSku76oKgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL6Fq/R6C84VxoAuTE7G5qWuHctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzA5ZjdkODAtZDZkZC0z M2I3LTg2YTktMjA1YjM5OTg2ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhOLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdpe+0i1/oqm7EUkK36ThpZqKs+M+rVTjH/v0EoEgWrRI+97aAoxyG/ OmNDR1dNkdaDkbFmi5mRcn4ImgeILmZHKtwFuUPbg43IHUwLOSclwv/I1kgBY7PA tWYqkVZ/vVxxBqtJ0RqR2/QxJj43A2cpqU4O75pn7qBd4o01YKlbDYGhnflhKLAN XaH3OZXGW7uRJ2agKXP5v/CnMmgMMWdB/jvzO4PM66Rl4XufkJo18UHtufaUW8Ya atcuah9EfAaA/B9ty/O4ClnWGRw10Q4Hr/edkDkONWa1ZehgtCxaq2tm9zVmr3/h Tva5luJKEjUvEH/vkjolWKVsmgeWZxs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:16 2025 by rpki-client