$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa File: 55a24569-124a-3fe2-9189-dc3d8ac17018.roa (raw, json) Hash identifier: Hz0jDWdOd5CCW0MuX1VojGJm1ieMT2pbOjAyiaDxP48= Subject key identifier: 49:C7:ED:E8:CE:FC:99:D4:FC:6C:E6:EC:8B:97:58:2D:FA:B0:97:F1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDB481E38D9A38219693E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa Signing time: Thu 21 Aug 2025 10:29:10 +0000 ROA not before: Thu 21 Aug 2025 10:29:10 +0000 ROA not after: Wed 19 Nov 2025 11:29:10 +0000 asID: 31898 IP address blocks: 168.138.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:db:48:1e:38:d9:a3:82:19:69:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:29:10 2025 GMT Not After : Nov 19 11:29:10 2025 GMT Subject: CN=c353abb8-bc26-4b1b-9bf0-553a0b567459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:4e:19:31:56:e3:41:01:00:fa:3d:6a:42: 03:45:f6:3e:11:6f:d9:56:e6:f0:af:d3:67:ff:57: ff:c0:15:b9:c1:56:a6:3b:5e:b6:ab:44:f2:15:8e: c6:fe:d3:74:93:e3:09:c8:3d:5e:b1:d2:ea:92:ad: d1:af:70:a0:c8:94:78:8c:27:4c:ef:63:21:e1:68: 24:a5:45:a9:df:59:1a:f4:30:42:ef:39:ab:3f:42: d7:6a:2b:40:f7:de:b2:46:0f:f1:0e:54:76:7a:81: 3e:b1:5d:f2:34:51:bc:1f:8b:d6:68:c6:42:1c:ae: c5:c4:4a:0e:34:1b:5a:a1:c0:db:ea:31:f2:6c:87: 83:4c:e3:0f:60:77:48:b1:6a:6a:83:d0:ce:3d:b1: 96:d6:e3:53:9d:28:9f:9b:8c:90:3f:00:3e:55:b2: c2:96:89:a5:ef:94:ad:7d:2e:b5:8c:4d:7c:58:95: 73:57:fd:28:02:35:63:ac:4a:80:ad:aa:e3:db:44: 95:17:53:47:ee:a1:0c:c3:89:68:a8:07:a5:18:2b: 4a:74:44:c5:93:5e:23:63:8f:21:6a:ba:6a:17:4a: b4:b1:e7:83:24:57:b3:fb:e2:bc:4d:fa:ec:a4:b2: e1:0c:56:ad:86:1e:49:2c:72:c3:b3:69:54:5d:b4: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:ED:E8:CE:FC:99:D4:FC:6C:E6:EC:8B:97:58:2D:FA:B0:97:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/55a24569-124a-3fe2-9189-dc3d8ac17018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4a:52:0f:31:88:8a:39:4e:e4:f5:41:ee:5e:c9:61:34:0d: 17:24:e2:d5:1f:71:58:9d:c2:2d:ac:71:69:a6:5e:15:59:d2: 72:9b:a0:c7:d9:8e:f6:4f:70:0d:fa:0c:41:4a:e2:46:56:2f: 63:10:97:20:80:cb:db:ff:18:ed:49:08:68:75:d0:e0:8c:a8: ff:a1:3d:a0:97:85:17:ae:30:ce:64:ed:9f:60:a1:57:22:13: 74:2b:eb:97:46:d6:a8:2d:07:4e:a2:8d:ed:c2:da:eb:94:a0: e9:9c:60:d6:ae:20:b8:90:1e:ac:ca:c3:20:50:0a:a0:82:03: 30:14:f1:08:60:1f:cd:87:a8:0e:89:6e:bc:f8:ae:73:67:43: 33:81:97:01:b7:0a:84:fc:4d:f6:89:d7:8f:56:fe:f7:0d:a5: 3a:07:08:74:65:4d:6c:e1:49:22:23:48:81:7c:11:ad:2d:45: 21:fb:0d:40:45:67:fd:74:c8:d3:d3:b4:5d:71:12:80:89:a3: 51:b3:80:e0:bc:18:36:18:61:ca:82:3a:8e:40:66:47:04:63: 4f:b5:46:8b:97:f1:bc:54:21:b4:dc:ca:79:3d:4f:e3:08:92: db:84:72:11:c1:25:d0:82:d8:e0:7a:79:ed:0c:85:89:a7:00: db:d0:66:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt20geONmjghlpPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjkxMFoXDTI1MTExOTExMjkxMFowLzEtMCsGA1UEAxMk YzM1M2FiYjgtYmMyNi00YjFiLTliZjAtNTUzYTBiNTY3NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RdOGTFW40EBAPo9akIDRfY+EW/ZVubwr9Nn /1f/wBW5wVamO162q0TyFY7G/tN0k+MJyD1esdLqkq3Rr3CgyJR4jCdM72Mh4Wgk pUWp31ka9DBC7zmrP0LXaitA996yRg/xDlR2eoE+sV3yNFG8H4vWaMZCHK7FxEoO NBtaocDb6jHybIeDTOMPYHdIsWpqg9DOPbGW1uNTnSifm4yQPwA+VbLCloml75St fS61jE18WJVzV/0oAjVjrEqArarj20SVF1NH7qEMw4loqAelGCtKdETFk14jY48h arpqF0q0seeDJFez++K8TfrspLLhDFathh5JLHLDs2lUXbR7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnH7ejO/JnU/Gzm7IuXWC36sJfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTVhMjQ1NjktMTI0YS0z ZmUyLTkxODktZGMzZDhhYzE3MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhKUg8xiIo5TuT1Qe5eyWE0DRck4tUfcVidwi2scWmmXhVZ0nKboMfZ jvZPcA36DEFK4kZWL2MQlyCAy9v/GO1JCGh10OCMqP+hPaCXhReuMM5k7Z9goVci E3Qr65dG1qgtB06ije3C2uuUoOmcYNauILiQHqzKwyBQCqCCAzAU8QhgH82HqA6J brz4rnNnQzOBlwG3CoT8TfaJ149W/vcNpToHCHRlTWzhSSIjSIF8Ea0tRSH7DUBF Z/10yNPTtF1xEoCJo1GzgOC8GDYYYcqCOo5AZkcEY0+1RouX8bxUIbTcynk9T+MI ktuEchHBJdCC2OB6ee0MhYmnANvQZlk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:30 2025 by rpki-client