$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa File: 8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa (raw, json) Hash identifier: tPbui9gbNwTzCT56qkk+VwJQv1vb+pY2Adm6Fj0zb4w= Subject key identifier: 4A:12:0B:00:2D:77:61:2F:6A:22:E7:85:E7:3B:27:E5:3F:24:45:4C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC00593394D09CB2F5A10980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa Signing time: Wed 20 Aug 2025 18:32:14 +0000 ROA not before: Wed 20 Aug 2025 18:32:14 +0000 ROA not after: Tue 18 Nov 2025 19:32:14 +0000 asID: 31898 IP address blocks: 193.122.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:59:33:94:d0:9c:b2:f5:a1:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:32:14 2025 GMT Not After : Nov 18 19:32:14 2025 GMT Subject: CN=788499ca-5784-4cea-be5f-c043f6066977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:7a:c0:f9:d1:04:60:4b:30:f7:8e:6f:26: ab:cc:d4:b3:d2:33:b7:45:04:41:ee:09:80:0c:24: 80:78:7c:96:9a:bc:13:61:93:2e:e9:3c:44:6a:3a: 21:0f:ee:10:e2:24:35:b5:3c:38:3e:de:e7:94:25: 35:23:03:9a:3c:25:49:fa:7a:b6:2f:f5:c4:95:8d: c7:90:12:4b:d7:a0:56:2c:08:fe:3f:9b:22:db:49: 72:5b:f3:42:5a:f6:8d:cd:62:f3:96:83:0e:5a:4a: b9:52:55:4f:ea:55:04:7d:bd:d9:55:85:45:7f:37: 93:05:a1:f7:ac:61:fd:41:2f:1c:f0:c5:a1:ca:84: 76:c1:ef:0d:32:f5:43:3f:a4:fc:ef:ca:1a:da:d7: fe:d5:42:35:07:88:5c:0c:d3:de:fc:ec:38:0a:3d: 87:4d:8f:04:fb:c6:14:11:75:38:ad:bc:c7:8a:19: f2:40:de:3c:46:b7:41:96:93:63:ea:27:23:fb:09: b1:ea:17:3e:d4:74:47:98:2b:9e:3f:ea:0a:ed:4b: bc:a9:f6:bf:6c:5e:7a:38:64:a8:84:ad:71:86:a7: 4f:5c:88:31:e9:8c:23:c9:6e:74:c5:f1:38:c6:fb: 6b:a9:fa:41:40:b7:f8:59:d6:a5:1e:7c:30:d9:ce: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:0B:00:2D:77:61:2F:6A:22:E7:85:E7:3B:27:E5:3F:24:45:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c281c3f-a9c8-33d7-ad5f-0aa56fbed6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 193.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:67:8f:5a:3e:bb:c2:fa:40:22:2c:87:3a:04:26:3c:71:63: 42:cd:c8:74:c9:d1:6a:48:27:10:ed:dc:35:bd:67:c4:38:51: 7d:0b:2a:c3:f1:5e:a0:4a:5d:b5:c0:9a:9f:c3:d4:c8:20:f6: 0b:9a:15:64:fb:e3:3c:75:0c:90:4c:4a:96:e1:c6:45:42:2e: 98:42:42:04:41:62:f7:c5:af:1a:2a:a5:2c:c1:61:bf:bf:a5: 5a:41:8d:52:f3:b5:31:90:f9:b8:85:8e:17:16:c8:b6:b2:b0: b6:53:0a:29:5e:83:07:91:74:47:55:e9:7c:c7:e9:7b:f3:c9: d5:a4:e2:b6:e5:52:f7:06:cf:b8:24:20:19:4a:77:41:01:1d: 6f:a8:8d:bb:e7:08:67:57:60:19:60:65:73:2e:9b:f7:2f:6f: 93:32:89:fb:77:3e:1b:9d:65:eb:7b:f6:52:01:99:e0:34:7e: e8:df:bc:b9:f4:dd:14:21:d6:c6:16:4d:51:e9:53:80:44:9c: 98:ff:fa:89:eb:68:15:f6:ba:da:d4:7c:12:1e:7f:b0:08:6d: 8e:6c:81:08:57:cc:39:15:7e:4a:35:f7:af:f4:73:91:2b:3f: de:26:c8:ac:f7:13:99:a0:e8:e5:aa:cd:42:45:47:b9:35:ce: 6c:eb:99:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsAFkzlNCcsvWhCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MzIxNFoXDTI1MTExODE5MzIxNFowLzEtMCsGA1UEAxMk Nzg4NDk5Y2EtNTc4NC00Y2VhLWJlNWYtYzA0M2Y2MDY2OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX56wPnRBGBLMPeObyarzNSz0jO3RQRB7gmA DCSAeHyWmrwTYZMu6TxEajohD+4Q4iQ1tTw4Pt7nlCU1IwOaPCVJ+nq2L/XElY3H kBJL16BWLAj+P5si20lyW/NCWvaNzWLzloMOWkq5UlVP6lUEfb3ZVYVFfzeTBaH3 rGH9QS8c8MWhyoR2we8NMvVDP6T878oa2tf+1UI1B4hcDNPe/Ow4Cj2HTY8E+8YU EXU4rbzHihnyQN48RrdBlpNj6icj+wmx6hc+1HRHmCueP+oK7Uu8qfa/bF56OGSo hK1xhqdPXIgx6YwjyW50xfE4xvtrqfpBQLf4WdalHnww2c47PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoSCwAtd2EvaiLnhec7J+U/JEVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGMyODFjM2YtYTljOC0z M2Q3LWFkNWYtMGFhNTZmYmVkNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwXoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENnj1o+u8L6QCIshzoEJjxxY0LNyHTJ0WpIJxDt3DW9Z8Q4UX0LKsPx XqBKXbXAmp/D1Mgg9guaFWT74zx1DJBMSpbhxkVCLphCQgRBYvfFrxoqpSzBYb+/ pVpBjVLztTGQ+biFjhcWyLaysLZTCilegweRdEdV6XzH6XvzydWk4rblUvcGz7gk IBlKd0EBHW+ojbvnCGdXYBlgZXMum/cvb5Myift3PhudZet79lIBmeA0fujfvLn0 3RQh1sYWTVHpU4BEnJj/+onraBX2utrUfBIef7AIbY5sgQhXzDkVfko196/0c5Er P94myKz3E5mg6OWqzUJFR7k1zmzrmfY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:10 2025 by rpki-client