$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa File: 74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa (raw, json) Hash identifier: g/DKfkwRK5mTYGI3BkjRV++yLTtMEmWQ1CGyjIXWOlw= Subject key identifier: 7D:BA:CF:9E:2A:24:0B:ED:86:A3:3F:AB:F7:16:69:BC:66:6C:DA:75 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEADF113C669DC59197D61C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa Signing time: Thu 21 Aug 2025 17:33:37 +0000 ROA not before: Thu 21 Aug 2025 17:33:37 +0000 ROA not after: Wed 19 Nov 2025 18:33:37 +0000 asID: 31898 IP address blocks: 147.154.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:f1:13:c6:69:dc:59:19:7d:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:37 2025 GMT Not After : Nov 19 18:33:37 2025 GMT Subject: CN=d5a0702e-775b-46fa-90b1-5c8402d19c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:bb:0c:d0:2c:53:b4:3a:07:e8:93:25:d1: cf:99:91:fb:09:20:81:6c:34:a0:6a:58:9e:58:3d: 87:2c:31:e9:a1:18:57:03:79:34:2f:70:f0:25:4c: dd:49:c4:7a:27:15:13:bc:a5:c5:bd:ad:35:98:d3: 7f:b9:72:06:15:3f:82:91:2f:ab:d5:b9:80:e6:7f: 61:6e:dd:e7:98:1f:bd:31:1a:c0:97:98:dd:4b:bc: b5:08:65:16:85:f9:41:e3:9d:30:ad:93:b2:69:fa: 8b:e0:89:b2:be:56:7e:d1:22:ac:26:04:00:6a:41: 61:f7:f5:8a:0c:18:b0:a4:c5:0c:03:b8:22:d8:3a: 4e:6a:e6:c2:4f:dd:fe:fe:36:8b:a9:b2:9c:a7:ce: 09:c3:90:b8:9b:c0:73:f6:0d:dd:af:ae:49:34:b6: b4:cb:bc:cf:0e:83:f0:42:cb:47:64:fd:d8:55:14: 4a:58:6e:45:2d:78:ba:9c:1d:26:61:ae:e3:b0:c5: a2:81:f1:b0:a9:93:e3:86:52:de:5f:6e:e7:f5:90: 7a:bd:36:2d:70:8d:62:6c:f9:a0:60:0e:b2:43:23: 4f:a9:81:68:c1:bb:cb:b8:eb:51:26:7d:62:35:c3: 15:26:7a:88:64:5c:30:e0:2a:ed:0c:81:6e:8a:12: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BA:CF:9E:2A:24:0B:ED:86:A3:3F:AB:F7:16:69:BC:66:6C:DA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74cd78b5-7282-34f1-b87a-36ced3aa68ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:57:29:71:a9:18:6e:42:51:a6:26:7d:58:3e:a6:3c:9e:8b: 22:f6:cb:0c:a4:9c:2a:e9:f2:4c:51:aa:87:40:b7:4c:c4:25: ba:ca:7c:59:46:f3:59:0e:18:34:fc:4e:50:c7:94:27:d9:cb: db:55:8a:c7:e7:6a:b4:a6:79:45:b7:1b:72:50:4d:1b:b6:f7: f1:c0:46:a7:ae:0b:a4:cb:3b:ec:6a:b9:50:41:91:ca:e9:ca: dc:3f:13:60:85:26:48:1f:6d:ab:62:93:6b:8b:2e:99:2e:7d: 89:9a:63:d5:3f:d1:45:45:44:0d:80:c4:fc:8e:a0:67:f0:d7: 66:92:ff:f8:55:ed:70:9e:bf:b2:ca:7e:c5:9e:fa:07:81:39: 4c:85:c2:73:8b:68:0d:b0:89:0b:49:c9:bc:54:90:08:3d:bf: f6:a8:af:46:16:ac:d6:78:f5:00:59:67:fb:31:54:17:9b:af: a0:39:67:d0:d1:47:84:47:90:63:10:c6:0c:03:ac:8e:35:95: 88:be:c3:28:2b:18:73:5d:e4:40:61:6b:3e:dc:ae:21:97:35: 0f:54:3d:f6:88:9d:b9:0f:0b:ee:28:e8:e6:84:bb:e4:e2:6c: 43:e2:90:ed:d8:66:78:82:10:ac:32:1d:ff:21:45:69:58:e5: 15:0e:67:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurfETxmncWRl9YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzMzN1oXDTI1MTExOTE4MzMzN1owLzEtMCsGA1UEAxMk ZDVhMDcwMmUtNzc1Yi00NmZhLTkwYjEtNWM4NDAyZDE5YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmi7DNAsU7Q6B+iTJdHPmZH7CSCBbDSgalie WD2HLDHpoRhXA3k0L3DwJUzdScR6JxUTvKXFva01mNN/uXIGFT+CkS+r1bmA5n9h bt3nmB+9MRrAl5jdS7y1CGUWhflB450wrZOyafqL4ImyvlZ+0SKsJgQAakFh9/WK DBiwpMUMA7gi2DpOaubCT93+/jaLqbKcp84Jw5C4m8Bz9g3dr65JNLa0y7zPDoPw QstHZP3YVRRKWG5FLXi6nB0mYa7jsMWigfGwqZPjhlLeX27n9ZB6vTYtcI1ibPmg YA6yQyNPqYFowbvLuOtRJn1iNcMVJnqIZFww4CrtDIFuihJcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH26z54qJAvthqM/q/cWabxmbNp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzRjZDc4YjUtNzI4Mi0z NGYxLWI4N2EtMzZjZWQzYWE2OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1XKXGpGG5CUaYmfVg+pjyeiyL2ywyknCrp8kxRqodAt0zEJbrKfFlG 81kOGDT8TlDHlCfZy9tVisfnarSmeUW3G3JQTRu29/HARqeuC6TLO+xquVBBkcrp ytw/E2CFJkgfbatik2uLLpkufYmaY9U/0UVFRA2AxPyOoGfw12aS//hV7XCev7LK fsWe+geBOUyFwnOLaA2wiQtJybxUkAg9v/aor0YWrNZ49QBZZ/sxVBebr6A5Z9DR R4RHkGMQxgwDrI41lYi+wygrGHNd5EBhaz7criGXNQ9UPfaInbkPC+4o6OaEu+Ti bEPikO3YZniCEKwyHf8hRWlY5RUOZ/8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:01 2025 by rpki-client