$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa File: 99f65072-ef1d-368c-9d6e-dcbfde17a809.roa (raw, json) Hash identifier: YB7OoBytmyTSuuULPkg9FdGq1Kj4UxYUXq5FsIQSqR0= Subject key identifier: E6:FD:75:5C:BA:A1:66:A8:62:8E:31:4C:13:1F:86:D5:C6:38:E2:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA06E0123223214B5F0BF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa Signing time: Thu 21 Aug 2025 17:06:24 +0000 ROA not before: Thu 21 Aug 2025 17:06:24 +0000 ROA not after: Wed 19 Nov 2025 18:06:24 +0000 asID: 31898 IP address blocks: 192.29.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:6e:01:23:22:32:14:b5:f0:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:24 2025 GMT Not After : Nov 19 18:06:24 2025 GMT Subject: CN=ad980da1-4e30-4e45-81c1-8a99689fc4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:99:89:15:18:74:2e:d0:ef:5a:c2:06:90: aa:94:b5:f3:96:a3:13:62:88:0b:15:db:7c:70:74: 8f:05:bd:bb:10:1b:6d:57:65:43:3a:3d:0e:76:cf: 14:c1:5e:56:98:05:59:68:05:c5:50:d1:d2:4b:93: e2:7f:c5:fb:1e:23:c9:f1:77:30:a7:d5:90:b6:9b: 1d:84:14:8b:57:96:83:58:df:94:a1:4e:3d:6d:f7: fa:ee:6e:64:dc:93:a8:21:c7:a6:17:cf:ce:64:34: 73:46:b5:3f:da:d0:20:75:6f:a4:c8:eb:18:27:4a: 4f:c7:ca:42:f8:f2:10:77:f5:ce:a7:70:d1:f1:96: 2e:82:7e:12:27:02:af:84:29:ea:f6:1d:87:0c:8d: 50:4b:a1:21:24:01:59:d3:8c:46:13:ca:74:8f:86: 9a:6a:7e:f6:d3:a3:dd:a4:82:10:23:4c:51:f9:8e: 79:1f:4b:3c:07:51:41:51:10:72:24:0d:17:d7:5f: b9:d9:ce:0c:34:5d:89:20:5f:b5:50:d7:3f:52:3d: 2b:5e:34:2f:f4:05:37:10:ef:05:0d:68:d9:99:1e: 72:48:5c:99:bb:56:88:da:65:49:57:24:cf:3c:76: c4:42:6e:cd:5f:6b:b4:87:f2:16:3e:f1:0a:75:7a: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FD:75:5C:BA:A1:66:A8:62:8E:31:4C:13:1F:86:D5:C6:38:E2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f5:d8:b8:94:05:6d:48:63:09:91:ab:ac:f4:22:c0:dc:16: a1:45:0f:4c:08:0b:e1:49:a4:8e:6c:23:4d:9c:92:02:b6:f7: 51:33:55:24:e5:8f:59:f9:ae:77:00:7e:7c:dd:c0:86:65:bb: 73:00:f6:70:bf:9b:2d:3c:73:32:cb:f8:80:ad:23:6a:60:79: 1f:5d:f4:75:38:50:b2:94:f0:16:06:eb:69:ea:0b:77:4c:ac: ce:bf:27:80:e1:41:31:2f:22:1e:e0:1b:88:2d:2e:56:2f:84: 8a:be:94:57:16:b4:2e:d3:39:9a:2c:c0:a1:53:e8:18:33:1e: a0:24:d8:e3:9c:f8:37:e8:b7:2b:76:01:ac:c8:8a:7d:a2:5e: 4e:50:a4:73:a1:9e:bf:11:df:13:49:f2:e7:c2:18:a0:39:66: 42:0e:23:0f:63:2d:ee:2a:1b:ff:f4:0a:55:d2:7a:27:fa:c3: 00:10:53:54:20:86:67:55:60:ae:9d:20:ea:fd:10:f7:86:a1: 0c:eb:f9:45:17:69:2e:80:7a:89:04:53:1d:f7:90:8b:a3:3a: 9f:d1:fe:53:f9:8e:89:82:21:fd:65:09:62:04:bc:94:3d:16: f3:21:da:bd:fb:b2:b6:3f:cc:b3:b8:77:2b:de:01:93:2d:66: 5a:b5:1e:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoG4BIyIyFLXwv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYyNFoXDTI1MTExOTE4MDYyNFowLzEtMCsGA1UEAxMk YWQ5ODBkYTEtNGUzMC00ZTQ1LTgxYzEtOGE5OTY4OWZjNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7uZiRUYdC7Q71rCBpCqlLXzlqMTYogLFdt8 cHSPBb27EBttV2VDOj0Ods8UwV5WmAVZaAXFUNHSS5Pif8X7HiPJ8Xcwp9WQtpsd hBSLV5aDWN+UoU49bff67m5k3JOoIcemF8/OZDRzRrU/2tAgdW+kyOsYJ0pPx8pC +PIQd/XOp3DR8ZYugn4SJwKvhCnq9h2HDI1QS6EhJAFZ04xGE8p0j4aaan7206Pd pIIQI0xR+Y55H0s8B1FBURByJA0X11+52c4MNF2JIF+1UNc/Uj0rXjQv9AU3EO8F DWjZmR5ySFyZu1aI2mVJVyTPPHbEQm7NX2u0h/IWPvEKdXqhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb9dVy6oWaoYo4xTBMfhtXGOOLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTlmNjUwNzItZWYxZC0z NjhjLTlkNmUtZGNiZmRlMTdhODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX12LiUBW1IYwmRq6z0IsDcFqFFD0wIC+FJpI5sI02ckgK291EzVSTl j1n5rncAfnzdwIZlu3MA9nC/my08czLL+ICtI2pgeR9d9HU4ULKU8BYG62nqC3dM rM6/J4DhQTEvIh7gG4gtLlYvhIq+lFcWtC7TOZoswKFT6BgzHqAk2OOc+Dfotyt2 AazIin2iXk5QpHOhnr8R3xNJ8ufCGKA5ZkIOIw9jLe4qG//0ClXSeif6wwAQU1Qg hmdVYK6dIOr9EPeGoQzr+UUXaS6AeokEUx33kIujOp/R/lP5jomCIf1lCWIEvJQ9 FvMh2r37srY/zLO4dyveAZMtZlq1HsU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:06 2025 by rpki-client