$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa File: 431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa (raw, json) Hash identifier: npTR/mTXD6Fk9vxVpSKvJj6aqlLOymFp12Aggjlj4jw= Subject key identifier: 8A:A1:83:B0:EF:D5:16:AB:0A:E6:B1:CF:96:5C:B7:14:64:83:67:93 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB652D827D91BA7C705CDF40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa Signing time: Wed 20 Aug 2025 13:19:35 +0000 ROA not before: Wed 20 Aug 2025 13:19:35 +0000 ROA not after: Tue 18 Nov 2025 14:19:35 +0000 asID: 31898 IP address blocks: 164.152.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:2d:82:7d:91:ba:7c:70:5c:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:35 2025 GMT Not After : Nov 18 14:19:35 2025 GMT Subject: CN=97100168-61f1-4852-ba8a-5ab5a376a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:9b:6c:22:85:fd:44:f3:34:da:bb:9d:d4: 44:20:31:49:40:9c:ce:dd:03:90:a8:4e:e6:fd:ab: 46:40:07:2b:53:83:9f:5c:4f:16:9f:db:20:0a:b6: f0:ec:04:5c:d5:dd:e8:16:42:be:52:03:4d:87:b7: e3:4b:e2:f9:45:d4:56:40:47:57:22:52:26:4d:a3: c8:c0:84:0f:f9:af:98:ae:d1:37:1c:b8:79:51:e7: 68:53:9d:f2:fd:48:b5:fe:f7:45:82:b5:be:37:a2: 76:34:7c:b8:be:10:ec:e7:87:c6:57:67:8e:e5:52: 72:46:f6:98:af:cd:a3:b9:0a:6a:81:88:d5:91:42: 73:6d:38:d1:5e:ea:ef:5a:a5:08:b3:b8:7c:47:33: ec:04:87:05:53:46:76:a7:6b:fd:34:21:4f:c8:88: 6b:ae:2f:64:94:f5:ef:ff:33:c4:2b:b2:ad:f7:5a: 2a:2a:25:8c:59:31:4b:40:8e:c7:c5:bd:f3:64:10: c9:9c:16:08:10:d4:ea:c4:0f:95:f1:69:53:b4:bc: be:19:1a:2b:3d:f1:2a:b8:76:bd:65:ee:1e:1c:b0: a0:d5:cb:ca:49:0b:13:f2:ce:d5:a7:41:25:be:25: 04:80:3f:88:d7:ec:0e:52:e9:22:fe:76:01:04:e0: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:83:B0:EF:D5:16:AB:0A:E6:B1:CF:96:5C:B7:14:64:83:67:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/431050c2-e92e-3e4b-8752-f7e1e7a8444d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3a:af:f6:65:7d:f7:88:5b:bf:4c:4f:dd:60:8d:94:18:70: 9c:45:44:90:a7:ae:07:14:e9:f8:0c:fe:ab:31:7d:6c:65:b1: ab:3a:32:13:5e:6f:4e:77:76:3d:af:26:a1:3a:1c:f3:ab:96: e6:0e:66:05:96:4b:60:5a:6b:da:a1:3a:eb:aa:df:26:ed:ec: 31:77:3d:07:f9:d7:f1:0d:1d:eb:4a:89:b1:58:be:5f:d6:5a: c6:29:c7:74:59:7f:8e:be:98:43:5a:7b:a1:8d:c9:a5:5a:65: 9d:db:e6:ff:25:0a:88:18:04:d6:a3:6f:83:28:11:8e:a4:3c: 5d:f9:71:a3:0f:f6:5d:26:2f:80:40:78:c0:18:49:ce:98:43: ed:e6:f0:8a:1c:e5:2b:61:da:0a:56:94:89:32:1c:a0:30:4b: ce:b6:17:64:e2:08:44:ec:6a:b6:67:33:9d:b3:15:ac:ad:e6: 4b:30:8d:90:92:4c:f0:18:f5:60:94:5a:c7:52:26:df:52:75: 8e:07:7b:79:db:4b:27:a5:c2:13:56:9f:7a:75:55:db:cb:43: ee:d1:6e:6e:23:45:a9:e4:9a:90:97:b6:5e:8e:24:5a:6e:ad: 60:4c:fb:ca:93:f8:c9:5f:5b:58:4e:9b:17:40:f1:52:ac:a0: a7:fb:30:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZS2CfZG6fHBc30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTkzNVoXDTI1MTExODE0MTkzNVowLzEtMCsGA1UEAxMk OTcxMDAxNjgtNjFmMS00ODUyLWJhOGEtNWFiNWEzNzZhN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx+bbCKF/UTzNNq7ndREIDFJQJzO3QOQqE7m /atGQAcrU4OfXE8Wn9sgCrbw7ARc1d3oFkK+UgNNh7fjS+L5RdRWQEdXIlImTaPI wIQP+a+YrtE3HLh5UedoU53y/Ui1/vdFgrW+N6J2NHy4vhDs54fGV2eO5VJyRvaY r82juQpqgYjVkUJzbTjRXurvWqUIs7h8RzPsBIcFU0Z2p2v9NCFPyIhrri9klPXv /zPEK7Kt91oqKiWMWTFLQI7Hxb3zZBDJnBYIENTqxA+V8WlTtLy+GRorPfEquHa9 Ze4eHLCg1cvKSQsT8s7Vp0ElviUEgD+I1+wOUuki/nYBBOBpmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqhg7Dv1RarCuaxz5ZctxRkg2eTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDMxMDUwYzItZTkyZS0z ZTRiLTg3NTItZjdlMWU3YTg0NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI6r/ZlffeIW79MT91gjZQYcJxFRJCnrgcU6fgM/qsxfWxlsas6MhNe b053dj2vJqE6HPOrluYOZgWWS2Baa9qhOuuq3ybt7DF3PQf51/ENHetKibFYvl/W WsYpx3RZf46+mENae6GNyaVaZZ3b5v8lCogYBNajb4MoEY6kPF35caMP9l0mL4BA eMAYSc6YQ+3m8Ioc5Sth2gpWlIkyHKAwS862F2TiCETsarZnM52zFayt5kswjZCS TPAY9WCUWsdSJt9SdY4He3nbSyelwhNWn3p1VdvLQ+7Rbm4jRankmpCXtl6OJFpu rWBM+8qT+MlfW1hOmxdA8VKsoKf7MJ4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:49 2025 by rpki-client