$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa File: 21c8614b-c66f-38d2-959b-69f7c6b248de.roa (raw, json) Hash identifier: WbphzNMK4DUyxiD0kLfDJ+7LlMP82M3RMMzy74nWC1A= Subject key identifier: 3D:DF:14:89:37:49:5C:F0:58:A1:BB:63:FD:C9:F9:15:B2:7E:C6:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB312A124520C8DE16654980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa Signing time: Wed 20 Aug 2025 11:34:47 +0000 ROA not before: Wed 20 Aug 2025 11:34:47 +0000 ROA not after: Tue 18 Nov 2025 12:34:47 +0000 asID: 31898 IP address blocks: 40.233.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:31:2a:12:45:20:c8:de:16:65:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 11:34:47 2025 GMT Not After : Nov 18 12:34:47 2025 GMT Subject: CN=294b621d-ae1a-48e3-968c-61f46c1dcb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:ca:92:d9:57:36:0a:aa:07:71:a2:50:0b: 39:57:5c:d1:c1:80:9b:cb:b8:8c:a4:19:5b:53:4a: 07:9b:b8:70:68:63:8d:b1:95:b7:f4:5b:1e:1a:8a: 98:aa:31:f8:5f:86:fd:bb:dc:59:b4:5b:90:b0:cf: d3:55:44:96:6d:92:f0:27:da:7a:a4:93:ef:fd:dc: 92:80:62:d6:2f:e9:7e:88:ab:61:24:6c:6e:1d:4c: 8b:9c:cd:c3:4d:00:42:3a:9f:ee:37:b4:33:19:84: 14:11:a7:3d:8a:1b:55:1a:16:37:2f:67:1e:23:46: 06:65:40:16:62:f4:51:d1:27:3e:23:ea:80:d3:af: bb:41:c3:83:ab:84:8e:9d:8c:a4:e4:7a:90:72:34: b1:c0:4f:36:7f:8e:94:c9:83:c0:8a:bd:d5:79:87: 30:79:61:da:67:0d:71:48:c0:83:59:03:90:ed:dd: 4c:97:a7:49:13:70:e3:76:88:c4:60:36:fb:c3:70: 11:74:04:1f:1c:08:94:dd:86:05:bc:58:8f:6f:2b: 8d:5a:b8:c3:16:0e:90:c1:d8:57:a8:7b:a4:d4:4c: 86:68:90:97:64:6b:e6:fd:33:6f:2c:65:91:70:b0: 8c:99:62:66:43:0a:cb:79:4e:e0:f4:03:44:97:77: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:14:89:37:49:5C:F0:58:A1:BB:63:FD:C9:F9:15:B2:7E:C6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fc:89:3c:3a:c0:e9:58:4e:3e:7f:24:f3:5d:30:1a:ce:32: 41:98:6a:b9:b5:33:37:4f:72:93:8a:f0:a5:0c:6b:b7:ef:cf: 09:1f:84:ba:ea:57:f8:d1:fd:8b:26:ea:1a:58:7d:51:2f:b7: a9:22:cf:f5:99:1e:76:cd:db:c2:3b:a1:31:3d:fe:45:97:31: 1b:c9:57:44:85:eb:09:df:9e:49:87:17:97:36:f3:72:f0:b0: 8f:dd:23:41:e1:39:ce:f8:83:c4:ba:65:70:b8:d3:1b:14:91: fa:fc:00:7c:e9:94:46:1d:7c:c5:66:97:aa:9c:65:1a:16:d4: 0e:64:59:91:2b:da:05:19:1b:73:d8:30:6b:57:e7:bc:d8:b6: 2a:77:ba:a0:52:e5:45:24:b7:d4:c5:07:c5:8b:0c:17:cb:f8: 99:2d:9e:3c:9e:59:e9:d1:68:09:12:32:b3:d8:39:1a:5f:f6: 31:8c:e4:36:80:e9:32:24:2b:50:bc:f4:9f:13:36:49:69:d3: e9:03:68:59:3b:13:b7:85:b8:26:f8:64:12:20:c5:e0:44:d9: a6:72:bc:95:ee:61:e5:c4:c3:90:b9:12:00:a1:2b:b3:c5:1c: 28:07:a8:19:32:c4:8a:8c:cd:ec:a5:27:69:56:da:a3:6f:5a: cd:39:5e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrMSoSRSDI3hZlSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDExMzQ0N1oXDTI1MTExODEyMzQ0N1owLzEtMCsGA1UEAxMk Mjk0YjYyMWQtYWUxYS00OGUzLTk2OGMtNjFmNDZjMWRjYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvrKktlXNgqqB3GiUAs5V1zRwYCby7iMpBlb U0oHm7hwaGONsZW39FseGoqYqjH4X4b9u9xZtFuQsM/TVUSWbZLwJ9p6pJPv/dyS gGLWL+l+iKthJGxuHUyLnM3DTQBCOp/uN7QzGYQUEac9ihtVGhY3L2ceI0YGZUAW YvRR0Sc+I+qA06+7QcODq4SOnYyk5HqQcjSxwE82f46UyYPAir3VeYcweWHaZw1x SMCDWQOQ7d1Ml6dJE3DjdojEYDb7w3ARdAQfHAiU3YYFvFiPbyuNWrjDFg6QwdhX qHuk1EyGaJCXZGvm/TNvLGWRcLCMmWJmQwrLeU7g9ANEl3fIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3fFIk3SVzwWKG7Y/3J+RWyfsY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjFjODYxNGItYzY2Zi0z OGQyLTk1OWItNjlmN2M2YjI0OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKOkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID8iTw6wOlYTj5/JPNdMBrOMkGYarm1MzdPcpOK8KUMa7fvzwkfhLrq V/jR/Ysm6hpYfVEvt6kiz/WZHnbN28I7oTE9/kWXMRvJV0SF6wnfnkmHF5c283Lw sI/dI0HhOc74g8S6ZXC40xsUkfr8AHzplEYdfMVml6qcZRoW1A5kWZEr2gUZG3PY MGtX57zYtip3uqBS5UUkt9TFB8WLDBfL+JktnjyeWenRaAkSMrPYORpf9jGM5DaA 6TIkK1C89J8TNklp0+kDaFk7E7eFuCb4ZBIgxeBE2aZyvJXuYeXEw5C5EgChK7PF HCgHqBkyxIqMzeylJ2lW2qNvWs05Xuc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:49 2025 by rpki-client