$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8fbc30fc-2b24-37dc-8567-d3133740d565.roa File: 8fbc30fc-2b24-37dc-8567-d3133740d565.roa (raw, json) Hash identifier: Me5NoAKQEllw+efAyzcwQFf+Kewtk55bghKaRXwDv5w= Subject key identifier: 25:09:F9:34:F1:31:FE:18:4B:EB:E7:F5:A7:23:C6:BA:51:6F:54:C4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE8DB989DF1CC48D3846AD70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8fbc30fc-2b24-37dc-8567-d3133740d565.roa Signing time: Thu 21 Aug 2025 16:28:42 +0000 ROA not before: Thu 21 Aug 2025 16:28:42 +0000 ROA not after: Wed 19 Nov 2025 17:28:42 +0000 asID: 31898 IP address blocks: 165.1.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:8d:b9:89:df:1c:c4:8d:38:46:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 16:28:42 2025 GMT Not After : Nov 19 17:28:42 2025 GMT Subject: CN=dd0363b8-fcb6-41bc-a199-f99a7f8ef2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:37:cd:63:b6:da:1e:da:01:42:36:12:af: 39:74:64:2e:ab:fb:dd:a3:79:bb:7b:24:57:e9:10: 77:e8:f3:39:12:b5:c0:56:85:7c:12:a9:2c:ba:27: 81:55:c1:93:b5:fb:44:c2:a5:f5:86:7b:ac:d2:94: da:7d:e7:cf:48:17:83:4d:4d:70:87:7a:69:21:62: a2:17:af:5c:d0:09:de:c3:9f:09:14:1f:30:74:64: cd:d4:be:4d:04:b1:d0:54:a1:a3:db:2e:5b:fc:9f: d4:0f:de:5b:ca:28:97:81:f3:91:89:da:69:fa:a4: 37:e7:9a:af:3f:d7:58:c8:fd:cc:dd:62:80:08:a2: d0:c0:85:52:14:f9:87:30:d8:8f:81:9c:b7:f2:0c: 08:d2:e2:14:a2:89:19:6a:62:b4:d0:7b:cc:aa:24: 35:dc:79:47:c5:39:b3:fb:a6:9c:37:03:2e:cc:84: 7d:9e:a8:44:b8:78:25:02:a1:79:e3:69:71:28:22: 23:a9:94:97:da:f6:a7:4b:9e:57:ce:dd:a2:e8:26: d7:32:0a:84:ef:ea:5b:fd:b4:c7:ef:67:40:47:e0: d2:89:d0:35:00:03:18:3b:a8:7f:3c:be:e0:9b:25: 33:d3:f6:0e:51:d2:62:49:e0:7b:da:d2:55:0c:23: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:F9:34:F1:31:FE:18:4B:EB:E7:F5:A7:23:C6:BA:51:6F:54:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8fbc30fc-2b24-37dc-8567-d3133740d565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:92:98:5f:42:75:a0:e7:6b:bc:e6:57:32:b3:05:0c:1f:4c: 56:00:ee:8e:e8:1b:be:85:71:5d:f9:a1:9d:ef:af:3b:1b:10: dc:d6:3a:8f:88:3f:83:5e:1c:ce:88:5f:9c:56:a0:4f:c3:5b: e6:95:74:16:0d:7b:3d:da:9d:5c:ba:86:cd:16:30:c8:db:3f: 3f:61:3f:b7:74:f2:06:3d:a3:bf:34:9d:0a:63:54:ac:fb:b3: 10:42:33:d9:4a:93:23:ec:ca:61:95:aa:7e:c8:61:0c:23:04: 15:3a:cd:41:b8:50:d2:f3:cb:73:fb:72:ef:eb:ea:01:c4:f4: ac:ba:45:22:89:62:07:bb:93:91:61:93:5c:3e:08:d0:8b:fa: d1:ce:9f:70:67:da:ca:6f:c9:1d:b1:8f:fb:20:81:1d:05:9b: de:74:69:9f:34:7c:d5:89:1a:2a:57:4a:5a:88:6d:db:30:8b: 84:4b:e9:a9:46:81:9a:4e:ae:f1:71:97:8d:82:9c:f0:ee:27: 34:07:96:61:4e:10:fa:48:59:c9:8f:d2:58:2b:fd:58:7d:d3: 84:10:5d:fe:00:4a:5d:60:d7:08:33:89:1c:1f:ee:cd:66:37: d6:a8:c8:bb:66:61:3f:e3:b7:84:c1:ac:f0:2d:45:75:f8:b4: cb:6f:c6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErujbmJ3xzEjThGrXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE2Mjg0MloXDTI1MTExOTE3Mjg0MlowLzEtMCsGA1UEAxMk ZGQwMzYzYjgtZmNiNi00MWJjLWExOTktZjk5YTdmOGVmMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eg3zWO22h7aAUI2Eq85dGQuq/vdo3m7eyRX 6RB36PM5ErXAVoV8EqksuieBVcGTtftEwqX1hnus0pTafefPSBeDTU1wh3ppIWKi F69c0Anew58JFB8wdGTN1L5NBLHQVKGj2y5b/J/UD95byiiXgfORidpp+qQ355qv P9dYyP3M3WKACKLQwIVSFPmHMNiPgZy38gwI0uIUookZamK00HvMqiQ13HlHxTmz +6acNwMuzIR9nqhEuHglAqF542lxKCIjqZSX2vanS55Xzt2i6CbXMgqE7+pb/bTH 72dAR+DSidA1AAMYO6h/PL7gmyUz0/YOUdJiSeB72tJVDCNx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUJ+TTxMf4YS+vn9acjxrpRb1TEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGZiYzMwZmMtMmIyNC0z N2RjLTg1NjctZDMxMzM3NDBkNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqSmF9CdaDna7zmVzKzBQwfTFYA7o7oG76FcV35oZ3vrzsbENzWOo+I P4NeHM6IX5xWoE/DW+aVdBYNez3anVy6hs0WMMjbPz9hP7d08gY9o780nQpjVKz7 sxBCM9lKkyPsymGVqn7IYQwjBBU6zUG4UNLzy3P7cu/r6gHE9Ky6RSKJYge7k5Fh k1w+CNCL+tHOn3Bn2spvyR2xj/sggR0Fm950aZ80fNWJGipXSlqIbdswi4RL6alG gZpOrvFxl42CnPDuJzQHlmFOEPpIWcmP0lgr/Vh904QQXf4ASl1g1wgziRwf7s1m N9aoyLtmYT/jt4TBrPAtRXX4tMtvxhk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:04 2025 by rpki-client