$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/614b5828-2b0b-3dfd-b7fb-76ee977b5df8.roa File: 614b5828-2b0b-3dfd-b7fb-76ee977b5df8.roa (raw, json) Hash identifier: 0WlUo+hMoKMa6ruRpG6Ml/FNyNL7nPebvpre8mqvdbM= Subject key identifier: D9:51:99:B5:86:F4:BC:E5:4D:80:74:94:1B:98:CF:08:84:7F:65:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A82737D5F3DE2075B4180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/614b5828-2b0b-3dfd-b7fb-76ee977b5df8.roa Signing time: Thu 21 Aug 2025 13:08:48 +0000 ROA not before: Thu 21 Aug 2025 13:08:48 +0000 ROA not after: Wed 19 Nov 2025 14:08:48 +0000 asID: 31898 IP address blocks: 192.9.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:82:73:7d:5f:3d:e2:07:5b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:48 2025 GMT Not After : Nov 19 14:08:48 2025 GMT Subject: CN=b738596e-b67c-4210-a994-dea2e04c04c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:1c:7b:47:6d:08:7f:e4:11:d0:47:3d:ab: 49:aa:ad:fb:c4:9d:c2:d3:3a:ec:27:ce:42:62:90: 33:f9:5b:5e:51:4d:8c:c6:85:28:ec:f6:dc:ae:1a: f7:d3:61:28:a0:65:0e:de:d3:1a:75:4b:1b:03:93: b9:26:b3:7a:be:ba:13:88:b7:a3:eb:94:55:e3:70: c4:32:a8:41:82:49:79:66:8b:98:ad:94:51:ac:38: f1:46:7b:03:25:15:94:a9:94:a6:91:58:32:43:78: c6:25:47:1e:65:c0:a6:1d:36:a8:53:37:cf:c8:8a: f8:c0:36:17:05:01:aa:7c:e7:b5:32:c2:42:e6:be: fd:4f:6f:b6:f0:4c:9e:32:d8:39:fa:9d:c1:18:c2: 07:e3:af:34:c6:c3:35:2c:96:97:67:15:f7:23:72: c2:e5:e7:21:a4:c5:55:54:b6:d2:53:dd:ed:ce:8f: b0:34:4d:8a:fe:41:75:6b:ad:ec:25:fa:e1:cc:0f: 9d:81:8b:5c:e4:01:39:31:fc:95:39:8d:de:95:65: 99:9a:6b:23:e2:e6:be:9a:ad:15:9f:d7:98:10:c5: 25:2d:0d:97:67:4a:e3:20:3f:70:b8:b4:02:6b:72: 4a:d9:c1:7e:8c:f6:01:40:16:26:bd:ae:54:52:59: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:51:99:B5:86:F4:BC:E5:4D:80:74:94:1B:98:CF:08:84:7F:65:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/614b5828-2b0b-3dfd-b7fb-76ee977b5df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.9.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:fc:75:04:5c:e7:cb:ef:a0:bd:d1:27:9b:50:33:5b:6d:da: e9:d9:ab:a4:63:9a:ed:60:2d:1b:91:29:b4:b2:d8:a9:76:ba: 9f:2b:e9:83:eb:62:99:4b:78:c0:b5:c3:cf:f8:1e:2b:d6:b4: 1b:53:12:6a:48:81:dc:4c:e2:b4:72:e3:48:93:8e:00:35:8f: cd:a7:5f:fe:72:06:ec:38:c3:c8:08:0e:ea:e4:b4:b1:4e:e1: 06:8b:0f:b9:88:8a:17:09:49:00:15:9a:53:c7:1b:1e:7f:c9: f5:ce:0c:ec:0f:ca:29:8b:c0:75:02:76:ca:98:25:2b:81:e4: e6:19:d4:94:2b:4f:47:ff:a1:dd:da:08:b0:06:43:ab:36:1a: e8:3b:0a:5c:4c:de:da:15:7e:45:52:50:d0:98:30:94:a8:ae: e3:b3:c7:de:12:28:75:b8:d4:0f:bc:d0:c5:cb:b2:41:3d:d3: 37:b6:3a:1d:d4:10:a8:5c:41:14:2d:ca:c5:7d:d1:31:b7:94: 7c:a6:fe:6d:6e:bd:56:7c:e7:be:dc:49:7c:75:b5:75:8f:21: 9d:4d:73:31:00:00:7e:e7:f3:ea:4f:a8:e2:86:ea:90:30:bd: d1:bf:be:ad:e3:6c:65:be:0a:fc:04:a3:e0:32:55:2d:ff:da: ca:2a:1b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKoJzfV894gdbQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDg0OFoXDTI1MTExOTE0MDg0OFowLzEtMCsGA1UEAxMk YjczODU5NmUtYjY3Yy00MjEwLWE5OTQtZGVhMmUwNGMwNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4ce0dtCH/kEdBHPatJqq37xJ3C0zrsJ85C YpAz+VteUU2MxoUo7Pbcrhr302EooGUO3tMadUsbA5O5JrN6vroTiLej65RV43DE MqhBgkl5ZouYrZRRrDjxRnsDJRWUqZSmkVgyQ3jGJUceZcCmHTaoUzfPyIr4wDYX BQGqfOe1MsJC5r79T2+28EyeMtg5+p3BGMIH4680xsM1LJaXZxX3I3LC5echpMVV VLbSU93tzo+wNE2K/kF1a63sJfrhzA+dgYtc5AE5MfyVOY3elWWZmmsj4ua+mq0V n9eYEMUlLQ2XZ0rjID9wuLQCa3JK2cF+jPYBQBYmva5UUlnSowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlRmbWG9LzlTYB0lBuYzwiEf2XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjE0YjU4MjgtMmIwYi0z ZGZkLWI3ZmItNzZlZTk3N2I1ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwAmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb8dQRc58vvoL3RJ5tQM1tt2unZq6Rjmu1gLRuRKbSy2Kl2up8r6YPr YplLeMC1w8/4HivWtBtTEmpIgdxM4rRy40iTjgA1j82nX/5yBuw4w8gIDurktLFO 4QaLD7mIihcJSQAVmlPHGx5/yfXODOwPyimLwHUCdsqYJSuB5OYZ1JQrT0f/od3a CLAGQ6s2Gug7ClxM3toVfkVSUNCYMJSoruOzx94SKHW41A+80MXLskE90ze2Oh3U EKhcQRQtysV90TG3lHym/m1uvVZ8577cSXx1tXWPIZ1NczEAAH7n8+pPqOKG6pAw vdG/vq3jbGW+CvwEo+AyVS3/2soqGx0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:34 2025 by rpki-client