$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa File: a6035598-470b-3423-9a02-720a630b0478.roa (raw, json) Hash identifier: kjPu75s/Ezr0rQb0MHB9R451DOT0yGg5tAZhuytEV/Q= Subject key identifier: EA:BB:51:B2:EA:4A:F3:26:D2:60:04:7E:C3:03:53:A7:7B:3A:CF:EE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF559073D1D12AA6C79D2940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa Signing time: Thu 21 Aug 2025 23:11:22 +0000 ROA not before: Thu 21 Aug 2025 23:11:22 +0000 ROA not after: Thu 20 Nov 2025 00:11:22 +0000 asID: 31898 IP address blocks: 132.145.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:90:73:d1:d1:2a:a6:c7:9d:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:22 2025 GMT Not After : Nov 20 00:11:22 2025 GMT Subject: CN=da556f3c-78fa-4121-aa61-746c3e375ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:38:27:91:1c:67:ac:a6:72:fd:01:1e:36: ae:7b:54:b9:ae:79:87:4d:e0:d0:bb:81:35:3b:8c: 98:58:46:31:c2:cc:22:06:41:4b:01:85:3b:0d:bb: 0d:3b:f9:43:c7:04:c4:39:33:15:7f:2e:66:ec:94: 5f:91:2a:22:55:65:2c:d3:4c:0b:0e:9e:67:8e:a6: 05:a3:37:71:1e:0f:66:2c:f8:ce:91:e5:69:be:a5: 22:61:cb:12:45:99:53:c4:4a:e8:c3:06:1f:fc:e1: 62:46:0f:91:af:47:29:ff:34:70:6d:4f:07:5e:f4: fe:cb:27:71:35:05:c5:cb:a0:bc:54:34:39:11:d4: c9:4b:f5:8d:ea:68:a4:47:ff:36:7a:b0:c6:f3:10: 20:a1:49:c6:e0:a6:1b:43:2e:d8:18:bb:82:99:da: 7e:f0:6e:c1:f8:33:dd:00:98:7b:20:78:1e:8e:97: a1:b9:36:a7:41:d0:cd:e3:c4:7b:ad:47:75:f8:99: 27:d6:0f:ff:d3:1c:1c:38:ea:da:d5:77:6b:1a:e3: e1:50:4c:e9:46:fb:b3:34:05:55:e9:8e:cf:d3:01: be:f1:41:9f:59:2a:05:9d:36:10:93:00:ea:88:65: bb:e9:25:64:c9:d2:6d:2f:0e:59:1f:d4:ca:83:64: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:51:B2:EA:4A:F3:26:D2:60:04:7E:C3:03:53:A7:7B:3A:CF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:3a:ab:51:f4:f4:8b:2b:0c:c5:73:5f:02:f2:3e:0f:09:82: 5c:29:dc:60:da:81:90:63:63:d3:da:1d:b6:14:8d:20:07:98: 99:5a:5a:73:69:51:09:79:85:98:23:ea:c4:6c:8d:82:76:70: 65:c8:a5:5b:0d:b1:b3:2b:de:61:20:bc:64:5e:0c:93:9a:e9: d3:be:14:45:aa:52:fd:35:5d:84:c0:50:90:de:50:17:07:d7: db:b8:06:01:cc:89:ed:0c:af:7d:87:1e:8c:a8:df:b2:e5:96: 32:45:56:89:87:c6:cc:7c:52:c1:9f:2c:52:14:79:01:eb:5a: 99:0c:36:0e:a7:cd:2b:c0:8c:82:81:51:91:88:ec:3c:58:39: 4e:9a:48:38:3c:4b:54:db:7d:bc:aa:69:4b:e0:45:26:fe:5e: fe:c4:2e:a9:39:ea:2e:10:64:48:a2:79:3f:e0:82:a7:aa:96: 81:b9:53:9a:40:e3:6b:22:27:8b:a1:9f:ee:1f:a3:f2:74:77: 3a:99:86:33:59:0d:d7:54:ae:d4:61:6a:81:ea:f8:d1:d9:e6: 96:29:3d:7f:b6:ff:ee:d2:b3:af:c6:54:1a:20:dc:6f:4f:eb: 04:0e:e5:61:17:5a:12:96:b5:56:ef:40:97:90:3d:b2:cd:59: 96:93:c9:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVZBz0dEqpsedKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEyMloXDTI1MTEyMDAwMTEyMlowLzEtMCsGA1UEAxMk ZGE1NTZmM2MtNzhmYS00MTIxLWFhNjEtNzQ2YzNlMzc1ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi04J5EcZ6ymcv0BHjaue1S5rnmHTeDQu4E1 O4yYWEYxwswiBkFLAYU7DbsNO/lDxwTEOTMVfy5m7JRfkSoiVWUs00wLDp5njqYF ozdxHg9mLPjOkeVpvqUiYcsSRZlTxErowwYf/OFiRg+Rr0cp/zRwbU8HXvT+yydx NQXFy6C8VDQ5EdTJS/WN6mikR/82erDG8xAgoUnG4KYbQy7YGLuCmdp+8G7B+DPd AJh7IHgejpehuTanQdDN48R7rUd1+Jkn1g//0xwcOOra1XdrGuPhUEzpRvuzNAVV 6Y7P0wG+8UGfWSoFnTYQkwDqiGW76SVkydJtLw5ZH9TKg2SsowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq7UbLqSvMm0mAEfsMDU6d7Os/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTYwMzU1OTgtNDcwYi0z NDIzLTlhMDItNzIwYTYzMGIwNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc6q1H09IsrDMVzXwLyPg8Jglwp3GDagZBjY9PaHbYUjSAHmJlaWnNp UQl5hZgj6sRsjYJ2cGXIpVsNsbMr3mEgvGReDJOa6dO+FEWqUv01XYTAUJDeUBcH 19u4BgHMie0Mr32HHoyo37LlljJFVomHxsx8UsGfLFIUeQHrWpkMNg6nzSvAjIKB UZGI7DxYOU6aSDg8S1TbfbyqaUvgRSb+Xv7ELqk56i4QZEiieT/ggqeqloG5U5pA 42siJ4uhn+4fo/J0dzqZhjNZDddUrtRhaoHq+NHZ5pYpPX+2/+7Ss6/GVBog3G9P 6wQO5WEXWhKWtVbvQJeQPbLNWZaTyXM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:30 2025 by rpki-client