$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f819d56-b25d-3193-80ec-65314eba96f2.roa File: 9f819d56-b25d-3193-80ec-65314eba96f2.roa (raw, json) Hash identifier: c4RkGJfgWzSrq9dMz0vHZ8/oOV3A1klSkOFeh5xi+t4= Subject key identifier: BA:93:D5:FE:31:7C:3E:6A:4E:4E:9F:6B:17:D6:A8:7D:1F:C4:5A:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE8DC20B87EA2720258D6280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f819d56-b25d-3193-80ec-65314eba96f2.roa Signing time: Thu 21 Aug 2025 16:28:46 +0000 ROA not before: Thu 21 Aug 2025 16:28:46 +0000 ROA not after: Wed 19 Nov 2025 17:28:46 +0000 asID: 31898 IP address blocks: 168.129.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:8d:c2:0b:87:ea:27:20:25:8d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 16:28:46 2025 GMT Not After : Nov 19 17:28:46 2025 GMT Subject: CN=596e0dac-0e1f-493e-bd72-d73f64f0355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2b:8b:cd:6c:07:02:a4:cb:1a:65:6d:d1:14: c3:e7:42:e4:ce:df:ae:27:31:ce:9e:5e:29:48:b2: 37:34:74:38:84:4b:dc:d7:3f:54:a2:c8:50:c2:4c: 38:30:c1:06:4b:bd:cf:05:30:de:52:75:a5:e1:dd: 2a:b7:a5:fe:e8:37:2a:fb:21:9c:cc:93:c9:3c:14: 56:f8:15:6d:48:20:e9:60:84:cb:69:96:7a:4b:75: c8:81:40:49:92:a7:94:a0:1e:69:f4:99:d9:10:9c: 13:f2:62:6e:ec:04:10:bf:c7:a9:82:b9:72:5e:ba: ac:49:0d:0d:cf:b4:7a:31:4a:7e:5a:56:46:69:1c: 40:73:76:a4:59:19:7e:11:d5:bd:ee:c1:9a:61:bb: 1d:88:61:0e:fc:97:51:6c:10:5d:ad:0c:4a:6b:88: da:50:45:5b:b8:ee:8a:be:c0:0e:7e:57:b8:f4:ac: 5f:c4:12:c3:fb:dc:6d:6f:21:48:8f:09:fa:6b:cf: dd:23:a7:63:b1:08:6f:bb:83:08:e1:cd:5d:9b:99: 87:73:53:82:f4:86:90:1d:2a:e2:29:e1:14:47:fd: 38:72:f0:25:04:90:2d:a8:a8:b1:d8:91:26:f8:f8: e3:d4:21:91:85:99:75:05:e7:66:8f:0f:32:63:92: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:93:D5:FE:31:7C:3E:6A:4E:4E:9F:6B:17:D6:A8:7D:1F:C4:5A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f819d56-b25d-3193-80ec-65314eba96f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ee:40:97:14:f6:ba:4a:29:d9:93:fc:05:1d:44:54:c9:d4: fb:e0:25:94:35:9b:dc:47:f6:fd:d3:22:b2:1d:0b:62:f8:1a: 72:09:9b:00:e4:9b:f5:72:6c:46:d2:de:06:56:b8:b0:68:e6: 58:9b:39:6f:8c:72:5a:63:e3:66:e9:5c:f6:b3:e6:7b:67:3f: 23:34:5d:3c:79:54:c7:11:43:4b:ab:32:22:bf:86:25:43:a1: 0e:7b:27:3b:a3:00:60:f0:f0:7b:bc:e3:81:66:bf:b8:19:5c: e1:52:80:76:82:23:3c:af:fe:30:d2:95:9d:09:ea:ac:9e:cc: 87:1e:11:b3:46:31:26:af:3b:89:79:60:48:c2:b0:b7:61:77: 29:f9:32:57:3b:38:4a:ab:80:9b:02:e9:6b:a0:cd:67:fc:25: 12:e2:b9:d7:ce:a7:80:12:ed:27:24:86:aa:72:cf:7e:28:43: 23:98:ab:9f:d1:49:b0:78:7b:3b:5b:82:78:c2:30:2d:85:14: 72:78:3e:87:df:72:c0:e6:bc:e2:4d:3a:6c:11:03:6c:bb:1e: 76:3a:e2:cc:ef:a0:5b:00:ac:74:f4:73:de:c5:a6:41:59:2b: 6b:04:63:ca:b3:6e:b3:4f:37:bf:bf:55:60:d9:93:4b:0d:4c: a5:b1:05:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErujcILh+onICWNYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE2Mjg0NloXDTI1MTExOTE3Mjg0NlowLzEtMCsGA1UEAxMk NTk2ZTBkYWMtMGUxZi00OTNlLWJkNzItZDczZjY0ZjAzNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiuLzWwHAqTLGmVt0RTD50Lkzt+uJzHOnl4p SLI3NHQ4hEvc1z9UoshQwkw4MMEGS73PBTDeUnWl4d0qt6X+6Dcq+yGczJPJPBRW +BVtSCDpYITLaZZ6S3XIgUBJkqeUoB5p9JnZEJwT8mJu7AQQv8epgrlyXrqsSQ0N z7R6MUp+WlZGaRxAc3akWRl+EdW97sGaYbsdiGEO/JdRbBBdrQxKa4jaUEVbuO6K vsAOfle49KxfxBLD+9xtbyFIjwn6a8/dI6djsQhvu4MI4c1dm5mHc1OC9IaQHSri KeEUR/04cvAlBJAtqKix2JEm+Pjj1CGRhZl1Bedmjw8yY5IYcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqT1f4xfD5qTk6faxfWqH0fxFqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY4MTlkNTYtYjI1ZC0z MTkzLTgwZWMtNjUzMTRlYmE5NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzuQJcU9rpKKdmT/AUdRFTJ1PvgJZQ1m9xH9v3TIrIdC2L4GnIJmwDk m/VybEbS3gZWuLBo5libOW+Mclpj42bpXPaz5ntnPyM0XTx5VMcRQ0urMiK/hiVD oQ57JzujAGDw8Hu844Fmv7gZXOFSgHaCIzyv/jDSlZ0J6qyezIceEbNGMSavO4l5 YEjCsLdhdyn5Mlc7OEqrgJsC6WugzWf8JRLiudfOp4AS7Sckhqpyz34oQyOYq5/R SbB4eztbgnjCMC2FFHJ4PoffcsDmvOJNOmwRA2y7HnY64szvoFsArHT0c97FpkFZ K2sEY8qzbrNPN7+/VWDZk0sNTKWxBSA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:56:34 2025 by rpki-client