$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa File: 98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa (raw, json) Hash identifier: mId535IAKmtahTDBbGqnYygNsIoqPMwANqT7qHenFv4= Subject key identifier: 15:3B:0A:56:80:B6:24:2D:44:C7:60:6D:41:39:6D:3B:E7:C5:4B:31 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA06AB6B4BC6947419F6400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa Signing time: Thu 21 Aug 2025 17:06:22 +0000 ROA not before: Thu 21 Aug 2025 17:06:22 +0000 ROA not after: Wed 19 Nov 2025 18:06:22 +0000 asID: 31898 IP address blocks: 192.29.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:6a:b6:b4:bc:69:47:41:9f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:22 2025 GMT Not After : Nov 19 18:06:22 2025 GMT Subject: CN=8f503cc1-2bdb-4202-bee4-98624775df10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:bc:15:b4:12:26:5b:41:3c:d0:b5:cc:0b: 72:2f:53:0f:0d:17:c2:f4:33:94:b9:8b:c2:e4:8c: 3f:ff:cf:84:af:f3:63:93:cc:4c:db:c7:ec:7d:c9: 54:9a:a3:13:1b:fa:5a:71:82:c6:1c:07:ad:8f:aa: bc:be:ba:7c:d6:99:8e:3b:94:e5:f0:9e:0c:f2:1c: b4:8a:82:61:36:9c:f3:d0:b5:f2:85:75:57:bb:98: b1:37:6a:e4:d9:14:04:e2:b9:87:99:38:97:7a:56: 1a:47:06:35:b6:ca:18:56:bd:5a:9a:53:f4:87:1c: df:55:3a:58:30:e6:0d:da:0c:ce:df:d7:af:8e:9b: 9f:55:38:e0:9b:50:29:b1:cd:8c:64:a9:5d:11:fe: 42:c9:71:6d:96:2e:9f:21:d1:2a:4e:b6:1b:b9:7f: ae:3a:bf:ce:e6:3d:f9:5f:d7:96:d5:75:9a:0b:61: dc:1c:f9:cc:1e:1f:d4:b7:b2:a5:84:4e:c8:ee:28: 07:fc:69:7b:e7:85:c0:ec:e2:55:b5:bd:30:7d:2f: ae:10:ae:ce:da:d0:6b:5b:c9:49:b7:b5:47:8a:df: c3:8d:50:cb:79:84:90:b2:7c:98:ee:d0:0a:88:e3: 3a:de:97:34:45:a6:58:b6:d7:67:66:92:22:7c:0d: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3B:0A:56:80:B6:24:2D:44:C7:60:6D:41:39:6D:3B:E7:C5:4B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:92:09:11:56:d5:40:00:a0:06:df:26:59:34:a7:4f:ba:8e: 51:d8:d1:28:16:c8:57:5a:93:26:93:ad:89:f7:e0:83:8f:1e: a4:16:6c:50:c2:33:42:3d:54:1a:d2:66:5c:44:41:a9:89:f6: d2:ab:04:96:57:f1:3d:de:c7:0e:cc:b9:fb:c0:7c:08:c3:2f: d8:5f:6f:fd:e5:8c:17:62:1e:20:f2:77:56:8a:72:86:7b:54: 63:50:2d:90:23:7c:85:b7:2a:a2:e4:67:bc:a0:b5:4c:4d:04: f9:fc:bf:c7:51:46:78:a1:98:12:b6:fa:70:f3:cd:b5:73:25: 10:00:cb:0b:b8:4a:14:f0:f3:6f:e6:ef:11:84:87:dd:5b:8d: 98:88:3d:e0:f4:91:d8:0d:f8:ac:76:d7:5e:bc:d9:48:79:5b: 0a:8a:9b:62:8e:69:97:23:37:2a:9c:98:81:96:92:fe:45:d8: f5:0f:59:7a:a2:52:db:c0:c1:31:bc:63:ba:88:0f:15:b5:7c: 2c:82:7d:03:f8:7e:b7:5e:3a:f5:f0:29:49:bf:d1:c9:a8:cb: 4a:d1:0d:6a:91:81:1e:5e:f7:45:91:05:a2:ab:90:12:41:74: 0d:00:c4:4a:2a:05:2f:08:f8:8e:31:c8:87:ce:9f:0c:1a:4b: 49:eb:cd:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoGq2tLxpR0GfZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYyMloXDTI1MTExOTE4MDYyMlowLzEtMCsGA1UEAxMk OGY1MDNjYzEtMmJkYi00MjAyLWJlZTQtOTg2MjQ3NzVkZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zG8FbQSJltBPNC1zAtyL1MPDRfC9DOUuYvC 5Iw//8+Er/Njk8xM28fsfclUmqMTG/pacYLGHAetj6q8vrp81pmOO5Tl8J4M8hy0 ioJhNpzz0LXyhXVXu5ixN2rk2RQE4rmHmTiXelYaRwY1tsoYVr1amlP0hxzfVTpY MOYN2gzO39evjpufVTjgm1Apsc2MZKldEf5CyXFtli6fIdEqTrYbuX+uOr/O5j35 X9eW1XWaC2HcHPnMHh/Ut7KlhE7I7igH/Gl754XA7OJVtb0wfS+uEK7O2tBrW8lJ t7VHit/DjVDLeYSQsnyY7tAKiOM63pc0RaZYttdnZpIifA2hQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU7ClaAtiQtRMdgbUE5bTvnxUsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThlZmQ4OGUtM2FmMi0z YjIzLWEzY2UtN2VhOTQ0NjhlN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwB0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOSCRFW1UAAoAbfJlk0p0+6jlHY0SgWyFdakyaTrYn34IOPHqQWbFDC M0I9VBrSZlxEQamJ9tKrBJZX8T3exw7MufvAfAjDL9hfb/3ljBdiHiDyd1aKcoZ7 VGNQLZAjfIW3KqLkZ7ygtUxNBPn8v8dRRnihmBK2+nDzzbVzJRAAywu4ShTw82/m 7xGEh91bjZiIPeD0kdgN+Kx211682Uh5WwqKm2KOaZcjNyqcmIGWkv5F2PUPWXqi UtvAwTG8Y7qIDxW1fCyCfQP4frdeOvXwKUm/0cmoy0rRDWqRgR5e90WRBaKrkBJB dA0AxEoqBS8I+I4xyIfOnwwaS0nrzZ0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:57 2025 by rpki-client