$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa File: 1f2ade06-7847-3459-9e0c-91ce8610a411.roa (raw, json) Hash identifier: 5ASF0kiv8k/2QC/hL6hg0hN+LwPuXewoXacmfgqqSbc= Subject key identifier: 26:01:EF:77:AC:EB:48:96:CC:21:90:DB:13:FF:54:80:1C:BB:E7:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF55A698952F5B4DA798A2C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa Signing time: Thu 21 Aug 2025 23:11:32 +0000 ROA not before: Thu 21 Aug 2025 23:11:32 +0000 ROA not after: Thu 20 Nov 2025 00:11:32 +0000 asID: 31898 IP address blocks: 132.226.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:a6:98:95:2f:5b:4d:a7:98:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:32 2025 GMT Not After : Nov 20 00:11:32 2025 GMT Subject: CN=4c4a690f-9a76-4c3d-a984-83b8b30bc979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:a2:b7:ca:18:4f:b8:48:cd:55:4d:68:d1: 52:dc:6b:bf:a4:64:e8:7c:41:9b:1b:5b:7a:2a:ca: fd:cd:94:cb:1e:51:0a:b7:fd:1a:90:8f:13:df:cf: 1f:d6:78:93:e9:1b:f7:b5:af:30:eb:3d:06:b0:4d: 76:61:13:c2:a4:6f:d2:3d:1a:a5:ad:8b:f6:1e:a4: 28:44:db:fe:cb:4b:2e:da:70:53:0a:fd:66:d3:2e: 88:d0:7f:e0:6b:8b:e3:f8:f8:1d:c7:3e:19:b0:95: 21:57:c2:67:5d:4e:21:59:01:ce:92:32:d3:37:d0: 63:c5:96:21:32:01:29:cc:06:ed:f2:10:bf:02:91: ba:d1:dd:05:f7:c0:56:f4:1d:fe:c9:07:22:f7:46: 86:9e:7a:d1:29:55:99:2d:6e:55:fd:e6:c1:07:75: 61:f0:10:be:47:89:65:95:f6:5f:5f:13:93:e5:8a: d0:bc:78:e9:61:08:18:a5:16:cd:ca:85:19:cb:fd: f0:9d:50:3f:35:4d:e2:c8:a2:4d:ce:53:25:ea:c6: 98:44:17:19:d8:8a:03:02:5b:8d:8b:64:d0:30:36: 94:bc:80:e1:80:6c:59:56:87:19:e5:d8:8c:e8:d6: c3:c3:8b:e6:62:ff:46:87:93:91:f8:e6:81:89:b3: a9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:EF:77:AC:EB:48:96:CC:21:90:DB:13:FF:54:80:1C:BB:E7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ca:f6:3e:7a:79:91:76:2a:04:52:37:df:56:67:db:de:5e: 1b:b7:fa:7b:da:fe:01:a9:0c:f1:73:b8:e2:7a:f8:68:6a:af: 3b:24:13:f5:89:ac:8c:e7:8e:61:76:33:78:d6:26:df:d8:0d: 62:f2:a3:1e:7f:b8:d4:55:e3:e0:3d:7e:a3:32:a6:74:99:09: 3e:ea:9d:eb:ed:36:c7:b8:95:2c:27:c0:55:17:0c:02:09:53: da:80:d0:e9:86:e2:fc:76:5b:ed:fc:f5:30:5d:35:87:d9:bc: 6b:43:15:9e:e8:c8:52:19:42:fb:d5:aa:88:8a:75:aa:c5:af: 52:c7:77:49:f8:dd:6f:7a:a0:2c:66:cd:6f:64:c2:0f:58:b6: 79:09:29:89:b5:ed:f7:b4:fb:03:95:7b:82:fe:e3:c9:fa:f0: 50:2c:61:4c:70:2c:5d:d1:b5:c4:9e:f9:39:96:7a:07:02:b9: 32:7b:33:9d:4a:5b:c4:7a:52:20:94:9e:34:88:e7:97:5e:d3: 8f:7c:8f:12:36:35:b5:d3:e6:83:43:1e:0e:c9:23:e1:e6:04: ac:f6:bf:d6:f8:74:08:1d:32:07:8d:45:a1:ab:b5:56:73:c3: a7:cb:a9:08:6c:03:5b:44:29:e3:49:d5:53:c7:c5:da:ed:50: a2:70:4b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVaaYlS9bTaeYosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEzMloXDTI1MTEyMDAwMTEzMlowLzEtMCsGA1UEAxMk NGM0YTY5MGYtOWE3Ni00YzNkLWE5ODQtODNiOGIzMGJjOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X6it8oYT7hIzVVNaNFS3Gu/pGTofEGbG1t6 Ksr9zZTLHlEKt/0akI8T388f1niT6Rv3ta8w6z0GsE12YRPCpG/SPRqlrYv2HqQo RNv+y0su2nBTCv1m0y6I0H/ga4vj+Pgdxz4ZsJUhV8JnXU4hWQHOkjLTN9BjxZYh MgEpzAbt8hC/ApG60d0F98BW9B3+yQci90aGnnrRKVWZLW5V/ebBB3Vh8BC+R4ll lfZfXxOT5YrQvHjpYQgYpRbNyoUZy/3wnVA/NU3iyKJNzlMl6saYRBcZ2IoDAluN i2TQMDaUvIDhgGxZVocZ5diM6NbDw4vmYv9Gh5OR+OaBibOpqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYB73es60iWzCGQ2xP/VIAcu+fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWYyYWRlMDYtNzg0Ny0z NDU5LTllMGMtOTFjZTg2MTBhNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhOLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvK9j56eZF2KgRSN99WZ9veXhu3+nva/gGpDPFzuOJ6+GhqrzskE/WJ rIznjmF2M3jWJt/YDWLyox5/uNRV4+A9fqMypnSZCT7qnevtNse4lSwnwFUXDAIJ U9qA0OmG4vx2W+389TBdNYfZvGtDFZ7oyFIZQvvVqoiKdarFr1LHd0n43W96oCxm zW9kwg9YtnkJKYm17fe0+wOVe4L+48n68FAsYUxwLF3RtcSe+TmWegcCuTJ7M51K W8R6UiCUnjSI55de0498jxI2NbXT5oNDHg7JI+HmBKz2v9b4dAgdMgeNRaGrtVZz w6fLqQhsA1tEKeNJ1VPHxdrtUKJwSyA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:55 2025 by rpki-client