$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa File: 63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa (raw, json) Hash identifier: wop3Oz6m3HwXNx+aE1HR9E+3uJJ8PP9Ac5lNpxDI9Is= Subject key identifier: D0:0C:E8:9C:57:D3:A8:30:07:91:D8:F0:CC:A2:46:EC:76:FA:80:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC005068C5E8933E1C9B8200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa Signing time: Wed 20 Aug 2025 18:32:10 +0000 ROA not before: Wed 20 Aug 2025 18:32:10 +0000 ROA not after: Tue 18 Nov 2025 19:32:10 +0000 asID: 31898 IP address blocks: 168.138.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:50:68:c5:e8:93:3e:1c:9b:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:32:10 2025 GMT Not After : Nov 18 19:32:10 2025 GMT Subject: CN=7f680ca0-8907-4715-9b07-290992c93761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:a4:17:1c:97:e3:62:b6:47:e0:27:98:3b: 45:07:ac:9b:85:3a:64:cb:e9:7b:14:34:79:1b:1c: c5:3c:e5:b9:c1:28:8b:3f:8e:76:06:aa:49:1d:60: a0:db:c0:15:5f:63:e4:35:90:35:9f:cf:14:3c:a4: 4d:f5:ca:6a:94:99:0b:6b:c6:9d:05:e2:32:7f:e7: 89:8f:38:97:79:af:c8:30:21:fc:6d:ab:88:63:5c: 9b:e8:f4:ff:a6:53:26:72:16:1f:a0:61:5e:15:bc: 10:99:25:e6:1a:12:a2:b7:f7:09:44:ac:14:97:c5: d1:43:7c:e0:f8:35:39:08:a2:da:ad:ad:10:84:41: ce:1f:92:e0:34:5c:42:e6:83:af:06:fb:6b:98:82: 20:70:32:4c:1e:46:52:e8:fc:3c:09:bb:fb:87:99: aa:7d:6f:f3:9c:cf:60:b7:06:43:c8:1e:11:40:77: 3e:c6:5b:ed:16:09:8a:d1:9f:df:06:8f:68:13:1c: be:8e:eb:ab:f6:17:1d:40:fa:1c:d2:b7:d5:94:bb: 6a:08:97:30:14:51:31:83:37:01:0f:6b:c9:24:73: ba:9a:c8:16:dc:be:e2:7c:6b:a7:8c:67:e7:83:74: f9:71:de:e5:af:ea:c2:cc:5c:8e:6c:38:43:ba:df: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0C:E8:9C:57:D3:A8:30:07:91:D8:F0:CC:A2:46:EC:76:FA:80:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63b35b89-d8f8-30d8-a34a-41a9ae10e5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7e:5a:e4:85:75:e0:63:32:7b:34:9d:b5:ad:e7:61:86:36: 69:1b:d9:99:7a:7b:c8:57:44:45:fe:37:3f:63:c5:6f:91:5d: d9:87:3a:a7:97:04:d3:f5:d7:5c:14:ac:86:33:ce:a9:98:bc: 7e:cf:be:51:db:14:c7:36:56:ac:dc:c4:16:1f:c0:99:ab:a2: 1b:99:d3:ed:71:fb:7b:64:df:a4:62:7b:15:64:37:64:29:05: 5a:14:4f:24:81:e3:11:a0:e1:a2:d2:66:8b:da:07:b4:2c:a9: 63:a3:07:12:f9:5a:b8:c9:66:11:d5:93:d5:40:52:30:30:47: 2f:8e:c7:a6:67:61:ab:af:fd:90:04:13:7f:73:fd:7c:f7:79: c6:c2:6b:4e:02:a8:03:e3:21:b9:65:4b:1b:33:6d:7e:43:36: 0d:25:2b:07:cd:80:67:cf:4e:34:a1:bb:ab:1c:45:76:29:1f: 1c:a2:77:17:af:20:3e:aa:89:e4:60:39:f0:4e:15:18:28:64: 3d:23:30:5f:4d:17:70:24:7d:5d:e9:f4:99:38:44:e4:a6:b4: e7:e6:04:c4:96:63:25:7c:92:45:ee:55:39:89:85:54:08:8c: 87:3a:b4:dc:c5:b1:46:67:e3:cd:1e:7d:a8:a3:57:4f:c4:9e: 13:da:69:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsAFBoxeiTPhybggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MzIxMFoXDTI1MTExODE5MzIxMFowLzEtMCsGA1UEAxMk N2Y2ODBjYTAtODkwNy00NzE1LTliMDctMjkwOTkyYzkzNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUqkFxyX42K2R+AnmDtFB6ybhTpky+l7FDR5 GxzFPOW5wSiLP452BqpJHWCg28AVX2PkNZA1n88UPKRN9cpqlJkLa8adBeIyf+eJ jziXea/IMCH8bauIY1yb6PT/plMmchYfoGFeFbwQmSXmGhKit/cJRKwUl8XRQ3zg +DU5CKLara0QhEHOH5LgNFxC5oOvBvtrmIIgcDJMHkZS6Pw8Cbv7h5mqfW/znM9g twZDyB4RQHc+xlvtFgmK0Z/fBo9oExy+juur9hcdQPoc0rfVlLtqCJcwFFExgzcB D2vJJHO6msgW3L7ifGunjGfng3T5cd7lr+rCzFyObDhDut+knQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAM6JxX06gwB5HY8MyiRux2+oC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjNiMzViODktZDhmOC0z MGQ4LWEzNGEtNDFhOWFlMTBlNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN+WuSFdeBjMns0nbWt52GGNmkb2Zl6e8hXREX+Nz9jxW+RXdmHOqeX BNP111wUrIYzzqmYvH7PvlHbFMc2VqzcxBYfwJmrohuZ0+1x+3tk36RiexVkN2Qp BVoUTySB4xGg4aLSZovaB7QsqWOjBxL5WrjJZhHVk9VAUjAwRy+Ox6ZnYauv/ZAE E39z/Xz3ecbCa04CqAPjIbllSxszbX5DNg0lKwfNgGfPTjShu6scRXYpHxyidxev ID6qieRgOfBOFRgoZD0jMF9NF3AkfV3p9Jk4ROSmtOfmBMSWYyV8kkXuVTmJhVQI jIc6tNzFsUZn480efaijV0/EnhPaab0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:16 2025 by rpki-client