$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa File: 9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa (raw, json) Hash identifier: DmwAIlOMcH/CXjsvFxQwqMns3mTv9KjHW2Eou8x6EHo= Subject key identifier: C3:93:C1:B4:16:6A:D2:CD:A7:FB:A5:04:97:89:52:93:B1:0F:DD:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB17F055A83E7F36F3960300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa Signing time: Wed 20 Aug 2025 10:43:57 +0000 ROA not before: Wed 20 Aug 2025 10:43:57 +0000 ROA not after: Tue 18 Nov 2025 11:43:57 +0000 asID: 31898 IP address blocks: 168.129.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:17:f0:55:a8:3e:7f:36:f3:96:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 10:43:57 2025 GMT Not After : Nov 18 11:43:57 2025 GMT Subject: CN=67450c06-3cb4-4f97-86e1-a84b02a50bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:98:82:8c:0e:21:61:f4:3b:70:58:e4:03: 56:18:a4:03:77:12:8d:72:77:c2:2a:78:99:8c:3a: bd:78:08:79:cb:7a:b1:e9:50:c3:9d:1f:bc:d3:0b: 85:d5:5b:0a:dd:f4:6e:4f:26:e4:39:a4:f7:0e:29: 04:70:f1:63:9e:3b:19:3a:34:f3:a2:96:d7:29:81: e8:0a:0d:e0:7c:6a:60:cc:81:a3:46:44:26:da:b8: 0b:99:5d:a8:76:80:c7:02:1f:36:76:84:3c:f9:bc: e2:a4:c9:8c:54:f3:c4:a6:5b:12:fb:46:2f:a8:93: 15:e4:da:6c:14:8d:ac:51:9b:11:8f:96:f2:bd:8a: 77:16:74:ab:49:6e:66:5d:86:51:a8:4a:79:2c:6a: 1c:cd:fb:1d:39:48:98:2b:a3:c4:c2:ee:ba:40:12: 4c:28:ba:a9:82:5d:dc:a8:cb:19:0f:ad:eb:ee:d7: 97:fa:58:4a:66:64:07:ea:2e:58:dc:b8:1f:0a:5a: 35:01:b5:0d:2d:b4:c6:94:2c:7d:b0:04:38:87:c4: 58:c3:33:81:a5:72:af:f3:80:04:9f:ed:6a:b4:da: bb:51:86:a7:75:e5:13:89:bf:c6:24:2d:00:01:87: 25:89:eb:a3:07:0f:f2:1b:0a:dc:1e:79:74:02:11: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:93:C1:B4:16:6A:D2:CD:A7:FB:A5:04:97:89:52:93:B1:0F:DD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6a:ef:03:9a:e9:97:4a:3d:3e:fe:d4:24:e6:4d:5e:8e:4e: 64:aa:df:e2:15:55:f7:5c:83:3f:87:c2:9a:8a:9e:d9:9e:61: 6a:4d:e8:ba:c2:12:8a:67:c5:cc:5e:6f:c4:a6:ec:70:34:2a: e0:41:7f:18:43:d3:a4:fe:76:83:84:67:20:49:60:0d:ae:cb: be:c5:22:72:cc:75:1f:87:98:d1:49:3d:16:9a:79:4a:c7:2c: 8e:09:0c:3d:c8:75:a1:8c:f4:b3:43:19:3b:2b:fd:02:e4:92: 53:e4:2e:91:47:4e:ff:92:39:99:c0:a6:f4:b2:05:d8:f1:f6: 0f:88:9f:3b:bc:95:8b:92:ee:26:40:b9:a3:6e:ca:c7:fb:ca: c3:54:03:60:ec:01:96:eb:c2:40:87:c3:a6:44:de:11:cc:f6: 64:d6:85:75:cf:e1:7f:5d:48:37:27:4d:57:ce:f6:89:da:7f: 22:04:53:15:63:f0:f3:95:c3:67:ae:1f:e9:7f:bf:61:b8:d5: 5d:33:fc:cd:1e:87:19:c8:9f:f3:61:21:3a:b6:99:ee:f5:ca: 08:9f:f2:22:a0:36:dc:e6:de:00:da:81:6d:8c:bc:84:6c:5b: 43:4b:d2:ff:b9:d1:8f:08:3a:61:9f:ad:42:54:64:ab:1f:97: ba:29:89:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrF/BVqD5/NvOWAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEwNDM1N1oXDTI1MTExODExNDM1N1owLzEtMCsGA1UEAxMk Njc0NTBjMDYtM2NiNC00Zjk3LTg2ZTEtYTg0YjAyYTUwYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPyYgowOIWH0O3BY5ANWGKQDdxKNcnfCKniZ jDq9eAh5y3qx6VDDnR+80wuF1VsK3fRuTybkOaT3DikEcPFjnjsZOjTzopbXKYHo Cg3gfGpgzIGjRkQm2rgLmV2odoDHAh82doQ8+bzipMmMVPPEplsS+0YvqJMV5Nps FI2sUZsRj5byvYp3FnSrSW5mXYZRqEp5LGoczfsdOUiYK6PEwu66QBJMKLqpgl3c qMsZD63r7teX+lhKZmQH6i5Y3LgfClo1AbUNLbTGlCx9sAQ4h8RYwzOBpXKv84AE n+1qtNq7UYandeUTib/GJC0AAYclieujBw/yGwrcHnl0AhGbpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOTwbQWatLNp/ulBJeJUpOxD91bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWU2NzNmMmEtMWRiZS0z MmU5LTliNTEtNTc4YWJiYzUxZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9q7wOa6ZdKPT7+1CTmTV6OTmSq3+IVVfdcgz+HwpqKntmeYWpN6LrC Eopnxcxeb8Sm7HA0KuBBfxhD06T+doOEZyBJYA2uy77FInLMdR+HmNFJPRaaeUrH LI4JDD3IdaGM9LNDGTsr/QLkklPkLpFHTv+SOZnApvSyBdjx9g+Inzu8lYuS7iZA uaNuysf7ysNUA2DsAZbrwkCHw6ZE3hHM9mTWhXXP4X9dSDcnTVfO9onafyIEUxVj 8POVw2euH+l/v2G41V0z/M0ehxnIn/NhITq2me71ygif8iKgNtzm3gDagW2MvIRs W0NL0v+50Y8IOmGfrUJUZKsfl7opiac= -----END CERTIFICATE-----Generated at Sat Aug 23 15:25:10 2025 by rpki-client