$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa File: 0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa (raw, json) Hash identifier: VqMW82iwjIzf4ZNT0eY7fAQSbsTI1PMUbPj2zuj1hWc= Subject key identifier: D8:F9:AE:90:63:C1:60:23:86:31:3F:D7:6B:EC:3B:70:48:62:AF:D6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB311B96D9A16871853BFB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa Signing time: Wed 20 Aug 2025 11:34:40 +0000 ROA not before: Wed 20 Aug 2025 11:34:40 +0000 ROA not after: Tue 18 Nov 2025 12:34:40 +0000 asID: 31898 IP address blocks: 139.177.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:31:1b:96:d9:a1:68:71:85:3b:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 11:34:40 2025 GMT Not After : Nov 18 12:34:40 2025 GMT Subject: CN=aab3580a-d3e9-4403-a58f-61e686d9506b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:c3:64:2c:6f:bd:32:13:ee:4c:f0:d8:13: c2:cf:d1:c8:c6:f8:1b:5a:7f:9c:fa:a9:c5:17:18: 6a:5e:73:82:09:de:8e:b9:34:0b:44:29:98:64:35: dc:06:d7:0b:3c:75:72:f2:2e:77:d5:23:a0:ee:10: 23:cf:3b:08:f3:51:ff:72:4c:8a:6f:7d:66:7e:73: ee:47:28:23:d8:69:0d:64:64:63:47:ce:97:34:bd: dd:8d:13:96:68:62:ff:09:99:8c:21:f4:cd:fa:43: e8:50:14:c9:f3:aa:3e:f6:f4:f5:ba:57:e4:82:a2: ce:ef:08:2c:e7:9c:e0:e4:30:3e:4f:17:9c:6b:71: 84:3e:d2:88:6c:d5:8f:73:5a:34:52:fc:3f:bf:46: 47:3b:2b:99:82:7a:7d:17:1b:44:53:d4:3d:8f:5e: 6f:df:2d:ab:3b:eb:6c:a9:8f:24:95:2e:d9:4b:95: 16:37:a0:c9:95:70:e5:4e:68:59:7a:e8:8f:ae:c0: e0:5d:3b:26:2f:06:b6:7b:c6:4e:56:f0:5c:6f:df: 5d:40:b9:13:3a:63:63:55:de:d8:f0:fd:2c:02:a5: 25:5f:e3:84:6d:bc:71:09:b3:b0:42:34:e8:f8:1f: af:70:b1:3d:e9:f7:fe:64:2b:43:aa:d4:26:1c:d6: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:AE:90:63:C1:60:23:86:31:3F:D7:6B:EC:3B:70:48:62:AF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 139.177.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:08:ac:93:5f:b9:0a:06:ce:65:2f:dc:9b:a3:f7:ab:da:7e: bc:c9:6d:bd:83:f7:e2:a4:4f:87:be:a8:4e:83:06:27:da:81: 23:5d:84:31:8e:71:9b:0a:49:9a:8a:6f:c9:87:86:d5:d7:26: 17:dd:89:52:87:28:91:6f:7b:d7:f5:15:aa:4b:40:55:0f:7f: 9e:31:a8:85:71:96:d6:f6:55:9c:34:27:3b:28:95:e3:80:b7: 6c:50:c9:ef:16:2f:e4:f6:9d:85:e0:47:61:58:4a:80:cb:56: 2b:0f:da:93:0b:1f:6f:fb:2e:11:7b:49:b8:a2:13:6b:97:e7: fb:1a:76:b7:be:62:9e:2e:44:1f:38:4e:0f:18:f7:2b:8b:71: 7d:b7:de:bb:f7:64:68:2a:9b:ba:10:b8:70:6c:08:40:e2:e2: 50:ed:35:d3:0f:b8:bf:b9:a8:15:c1:cf:52:f8:47:26:d4:24: 45:c2:fb:9e:fe:0b:9f:18:6a:38:00:54:c6:8b:1e:24:fe:2e: 30:26:db:61:ab:06:79:de:f4:d8:9b:4d:50:76:d8:c6:e4:d7: 80:54:92:1b:31:a0:c9:09:6c:c3:fb:e8:e7:aa:cc:06:7b:6b: 57:a0:a1:35:e5:25:86:5d:4c:00:51:79:30:41:1c:3d:73:af: 20:0b:34:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrMRuW2aFocYU7+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDExMzQ0MFoXDTI1MTExODEyMzQ0MFowLzEtMCsGA1UEAxMk YWFiMzU4MGEtZDNlOS00NDAzLWE1OGYtNjFlNjg2ZDk1MDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/3DZCxvvTIT7kzw2BPCz9HIxvgbWn+c+qnF FxhqXnOCCd6OuTQLRCmYZDXcBtcLPHVy8i531SOg7hAjzzsI81H/ckyKb31mfnPu Rygj2GkNZGRjR86XNL3djROWaGL/CZmMIfTN+kPoUBTJ86o+9vT1ulfkgqLO7wgs 55zg5DA+Txeca3GEPtKIbNWPc1o0Uvw/v0ZHOyuZgnp9FxtEU9Q9j15v3y2rO+ts qY8klS7ZS5UWN6DJlXDlTmhZeuiPrsDgXTsmLwa2e8ZOVvBcb99dQLkTOmNjVd7Y 8P0sAqUlX+OEbbxxCbOwQjTo+B+vcLE96ff+ZCtDqtQmHNZpDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj5rpBjwWAjhjE/12vsO3BIYq/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGQ1Y2Q4YmYtYjljZS0z ZWY1LTk2MTEtYTZmY2NjN2RiNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi7FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoIrJNfuQoGzmUv3Juj96vafrzJbb2D9+KkT4e+qE6DBifagSNdhDGO cZsKSZqKb8mHhtXXJhfdiVKHKJFve9f1FapLQFUPf54xqIVxltb2VZw0JzsoleOA t2xQye8WL+T2nYXgR2FYSoDLVisP2pMLH2/7LhF7SbiiE2uX5/sadre+Yp4uRB84 Tg8Y9yuLcX233rv3ZGgqm7oQuHBsCEDi4lDtNdMPuL+5qBXBz1L4RybUJEXC+57+ C58YajgAVMaLHiT+LjAm22GrBnne9NibTVB22Mbk14BUkhsxoMkJbMP76OeqzAZ7 a1egoTXlJYZdTABReTBBHD1zryALND4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:07 2025 by rpki-client