$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4511a091-0c98-3410-bfcd-2eeb73e6ab9e.roa File: 4511a091-0c98-3410-bfcd-2eeb73e6ab9e.roa (raw, json) Hash identifier: 0urKA/4xJ5rd6AJsBrGw/6+YkJDeOPO5BsGu8X2nlvY= Subject key identifier: 92:FB:D5:E6:49:7D:FD:2F:D8:25:24:50:84:C3:68:20:60:C3:36:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDAF5F6D7C35334FD1EF400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4511a091-0c98-3410-bfcd-2eeb73e6ab9e.roa Signing time: Thu 21 Aug 2025 10:28:31 +0000 ROA not before: Thu 21 Aug 2025 10:28:31 +0000 ROA not after: Wed 19 Nov 2025 11:28:31 +0000 asID: 31898 IP address blocks: 167.234.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:f5:f6:d7:c3:53:34:fd:1e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:28:31 2025 GMT Not After : Nov 19 11:28:31 2025 GMT Subject: CN=10953bdc-e8df-47c6-a6db-1cd412672017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:98:37:cc:38:e1:81:06:72:ee:5a:0a:a0: c8:d8:5b:bb:00:6d:70:ea:b8:68:52:bd:c0:0f:35: 42:0f:58:55:ff:23:9d:13:5f:7c:2e:22:17:71:e9: 3e:0f:f8:af:d4:63:da:31:79:cd:36:ca:67:ba:59: 0a:1d:8c:72:a9:85:fa:b9:86:0c:92:a5:b6:6b:11: 5b:58:36:c9:6f:68:df:8b:c8:8f:dc:4d:c1:8f:fc: 4a:2e:28:6e:5d:96:0f:1b:41:ec:91:4b:b6:05:da: 06:00:27:c3:40:98:79:b1:6e:d3:17:8d:b2:80:dd: f3:7a:bd:cb:17:b1:ae:36:ab:8b:b7:60:76:ad:28: c3:1f:4d:1e:4e:76:49:ae:6a:58:9b:58:f1:47:40: ef:22:ce:4c:45:32:5d:b5:d3:9e:0e:38:87:aa:2f: 4e:eb:45:9f:2d:d6:93:1e:04:33:37:a8:58:6b:f7: 94:f4:be:1e:c8:1c:25:ea:7d:90:f3:de:c0:ea:c8: 3d:9b:90:d5:0f:4e:01:61:0c:2e:21:c1:e2:bb:c5: 6e:84:86:46:c8:f9:ff:bc:5a:ab:63:d0:f8:09:a0: c6:c7:e2:ae:4e:c5:eb:e1:ae:3b:e4:24:a6:26:35: 68:58:28:0f:d7:66:a9:9e:87:a0:08:63:0f:32:ca: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:D5:E6:49:7D:FD:2F:D8:25:24:50:84:C3:68:20:60:C3:36:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4511a091-0c98-3410-bfcd-2eeb73e6ab9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.234.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:29:76:b3:47:58:b9:d8:be:d0:24:70:82:7f:2c:00:1b:97: d1:87:9b:f6:5a:90:29:1f:0a:37:44:53:d8:4a:eb:4e:9b:78: b6:86:dc:2b:89:b9:7b:01:4f:1c:8a:12:a3:a0:69:73:66:51: 84:d5:bf:d9:e9:2b:b4:47:59:84:c0:4b:ae:a8:54:83:d1:b9: 2f:9b:d3:6a:1f:e2:ee:17:4c:77:e0:b4:7f:e4:c7:8f:a1:2a: a5:b3:50:5c:32:d5:d2:7c:b9:cb:8b:a9:3b:dd:90:6d:45:4e: 43:11:9f:94:43:43:7c:fb:65:9b:1b:6c:40:5b:37:9e:d6:bc: 70:cb:d4:93:02:d2:fd:67:ac:8a:b1:14:a1:68:25:f8:84:06: 14:9f:f9:1e:49:89:14:f4:f1:91:dd:89:0f:ab:28:78:74:63: 53:57:d0:b3:d9:13:76:40:89:75:61:c1:29:5e:f2:d3:3c:50: f3:74:80:d5:d7:9d:89:54:b2:54:33:75:b6:54:75:e0:ad:29: 90:69:0c:26:13:67:a5:85:85:e0:81:f7:c8:17:c8:81:33:99: 2c:94:6e:8e:30:b7:7b:6c:c1:95:b0:57:65:2a:32:d9:d5:66: c1:96:53:ac:07:67:19:6a:1e:3a:c6:a7:0b:75:36:da:30:55: 1e:d6:9d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2vX218NTNP0e9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjgzMVoXDTI1MTExOTExMjgzMVowLzEtMCsGA1UEAxMk MTA5NTNiZGMtZThkZi00N2M2LWE2ZGItMWNkNDEyNjcyMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzOYN8w44YEGcu5aCqDI2Fu7AG1w6rhoUr3A DzVCD1hV/yOdE198LiIXcek+D/iv1GPaMXnNNspnulkKHYxyqYX6uYYMkqW2axFb WDbJb2jfi8iP3E3Bj/xKLihuXZYPG0HskUu2BdoGACfDQJh5sW7TF42ygN3zer3L F7GuNquLt2B2rSjDH00eTnZJrmpYm1jxR0DvIs5MRTJdtdOeDjiHqi9O60WfLdaT HgQzN6hYa/eU9L4eyBwl6n2Q897A6sg9m5DVD04BYQwuIcHiu8VuhIZGyPn/vFqr Y9D4CaDGx+KuTsXr4a475CSmJjVoWCgP12apnoegCGMPMspYQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL71eZJff0v2CUkUITDaCBgwzYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDUxMWEwOTEtMGM5OC0z NDEwLWJmY2QtMmVlYjczZTZhYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFp+rgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAspdrNHWLnYvtAkcIJ/LAAbl9GHm/ZakCkfCjdEU9hK606beLaG3CuJ uXsBTxyKEqOgaXNmUYTVv9npK7RHWYTAS66oVIPRuS+b02of4u4XTHfgtH/kx4+h KqWzUFwy1dJ8ucuLqTvdkG1FTkMRn5RDQ3z7ZZsbbEBbN57WvHDL1JMC0v1nrIqx FKFoJfiEBhSf+R5JiRT08ZHdiQ+rKHh0Y1NX0LPZE3ZAiXVhwSle8tM8UPN0gNXX nYlUslQzdbZUdeCtKZBpDCYTZ6WFheCB98gXyIEzmSyUbo4wt3tswZWwV2UqMtnV ZsGWU6wHZxlqHjrGpwt1NtowVR7WnUo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:04 2025 by rpki-client