$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa File: 7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa (raw, json) Hash identifier: T97or8QuwaahDiMwd9QpLr352U7h/zGZ2YOpmsE2ET0= Subject key identifier: 05:D5:EC:1B:56:8A:2A:EF:57:06:95:57:C3:9B:78:DF:51:96:35:67 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C76B1D87107746E4A0680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa Signing time: Wed 20 Aug 2025 21:05:36 +0000 ROA not before: Wed 20 Aug 2025 21:05:36 +0000 ROA not after: Tue 18 Nov 2025 22:05:36 +0000 asID: 31898 IP address blocks: 134.185.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:76:b1:d8:71:07:74:6e:4a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:36 2025 GMT Not After : Nov 18 22:05:36 2025 GMT Subject: CN=023f988d-b3bb-40a5-a7e3-6df977795414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:10:4f:3f:43:e1:85:52:1a:b5:03:05:98: 4b:be:b3:03:a5:a8:3e:ea:10:d0:76:ea:d6:cd:7e: 8f:02:dd:b4:c1:31:87:0d:65:3c:27:6c:a5:5d:b4: f3:15:14:fd:b2:53:8b:a7:d4:76:93:46:90:4b:7e: b3:a9:58:fb:f4:5a:ee:47:a1:b4:bb:91:4f:5f:1b: 0a:09:cf:8f:f1:30:d1:8a:06:ce:de:fd:a7:90:18: 7a:62:87:bc:d3:a3:b6:4f:96:a8:37:2f:22:f7:d5: 94:86:59:83:21:cf:9f:f4:74:7e:c5:0d:0a:70:77: c0:c4:61:e0:7e:83:ab:d6:a4:26:c6:df:77:2c:f0: d1:ed:ba:5a:0b:96:f9:ab:c4:9a:83:8c:e1:33:f1: dc:74:b4:5c:25:93:02:40:99:3f:41:cb:99:cb:05: f1:37:44:f6:49:6a:93:e0:8e:ec:84:95:ca:68:ba: df:5e:30:95:9f:62:1a:de:0f:c1:5f:97:49:f3:4b: fd:db:f8:41:60:3a:3f:04:74:9e:34:54:1a:0e:4d: 33:e7:b7:7a:aa:f1:34:9a:34:ae:b4:e8:ac:2d:b2: 4b:11:76:57:ac:fd:66:a2:ec:37:c5:e7:fe:0d:71: b0:ac:43:ec:dd:90:bb:4c:0a:d1:69:e3:9b:a9:f0: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:EC:1B:56:8A:2A:EF:57:06:95:57:C3:9B:78:DF:51:96:35:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c9bc0a8-2cbf-3693-811a-67896dbd8814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:65:d7:e7:f0:7f:e8:29:0c:e2:be:9f:22:4b:a8:ff:c0:4c: 8e:6b:df:db:e4:83:fa:15:79:52:16:45:a5:e2:d5:15:b3:f8: f9:cf:8c:5a:9b:16:e6:e1:4f:82:76:58:68:e7:0d:52:32:a9: ed:8e:94:68:82:87:76:9e:ad:93:a8:06:93:1f:57:03:93:8b: ee:ed:fd:9e:5f:d9:23:16:f0:28:97:76:15:b0:94:69:68:ed: 5d:d1:cb:ec:17:88:fc:04:5f:5c:04:3c:01:3e:27:47:45:92: 3f:26:68:db:04:59:26:ca:c5:e3:71:a6:91:14:84:33:81:e8: 1d:f8:f0:5c:85:c6:8b:0a:c3:34:5e:5d:d4:d6:a0:85:e5:3e: 97:67:ad:ea:8a:5a:a0:0b:cb:e0:d6:07:1e:ee:7f:c8:36:aa: c7:ba:3b:b8:90:82:91:f4:d3:48:48:77:30:3d:37:bc:cf:7e: 44:0b:8c:7c:29:31:f1:3f:7b:6c:6b:5e:54:cd:4f:ec:bb:a5: 7f:87:15:a7:94:be:60:17:b5:05:08:d2:81:05:c4:8f:26:ce: 74:a7:75:95:77:4e:88:32:e2:2c:0b:d3:cb:6e:8c:0d:f1:ee: 7e:25:45:76:a0:16:bd:3e:70:86:58:6e:f1:d8:b0:db:9e:11: c5:f9:34:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTHax2HEHdG5KBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDUzNloXDTI1MTExODIyMDUzNlowLzEtMCsGA1UEAxMk MDIzZjk4OGQtYjNiYi00MGE1LWE3ZTMtNmRmOTc3Nzk1NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEAQTz9D4YVSGrUDBZhLvrMDpag+6hDQdurW zX6PAt20wTGHDWU8J2ylXbTzFRT9slOLp9R2k0aQS36zqVj79FruR6G0u5FPXxsK Cc+P8TDRigbO3v2nkBh6Yoe806O2T5aoNy8i99WUhlmDIc+f9HR+xQ0KcHfAxGHg foOr1qQmxt93LPDR7bpaC5b5q8Sag4zhM/HcdLRcJZMCQJk/QcuZywXxN0T2SWqT 4I7shJXKaLrfXjCVn2Ia3g/BX5dJ80v92/hBYDo/BHSeNFQaDk0z57d6qvE0mjSu tOisLbJLEXZXrP1mouw3xef+DXGwrEPs3ZC7TArRaeObqfD6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXV7BtWiirvVwaVV8ObeN9RljVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2M5YmMwYTgtMmNiZi0z NjkzLTgxMWEtNjc4OTZkYmQ4ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhrlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRl1+fwf+gpDOK+nyJLqP/ATI5r39vkg/oVeVIWRaXi1RWz+PnPjFqb FubhT4J2WGjnDVIyqe2OlGiCh3aerZOoBpMfVwOTi+7t/Z5f2SMW8CiXdhWwlGlo 7V3Ry+wXiPwEX1wEPAE+J0dFkj8maNsEWSbKxeNxppEUhDOB6B348FyFxosKwzRe XdTWoIXlPpdnreqKWqALy+DWBx7uf8g2qse6O7iQgpH000hIdzA9N7zPfkQLjHwp MfE/e2xrXlTNT+y7pX+HFaeUvmAXtQUI0oEFxI8mznSndZV3Togy4iwL08tujA3x 7n4lRXagFr0+cIZYbvHYsNueEcX5NPk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:11 2025 by rpki-client