$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa File: a1127bd9-993a-3003-91c6-a84fe929e89d.roa (raw, json) Hash identifier: 5F6em5n4PG/RI7xtA2HM9hAZDlYuMjXd7F3TscDg0C4= Subject key identifier: C2:BE:D2:8E:E4:7F:C1:CE:40:A4:D0:6D:9E:8C:3F:47:69:90:60:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF015C6EE9F186BB018BA8A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa Signing time: Fri 22 Aug 2025 05:38:39 +0000 ROA not before: Fri 22 Aug 2025 05:38:39 +0000 ROA not after: Thu 20 Nov 2025 06:38:39 +0000 asID: 31898 IP address blocks: 192.29.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:15:c6:ee:9f:18:6b:b0:18:ba:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:38:39 2025 GMT Not After : Nov 20 06:38:39 2025 GMT Subject: CN=0f42f27d-ff9f-4f6c-bf1f-69f298a29242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:29:08:c8:d8:ae:93:cf:15:a7:13:e6:dc: 4c:b2:13:b4:cc:3f:94:48:b2:af:55:8a:aa:8d:af: fb:ec:33:82:1f:c2:f6:68:96:43:f4:74:e3:c9:ba: 69:55:d8:70:02:a1:54:1a:d0:c0:7b:a0:93:d8:87: 10:7e:18:90:71:ce:be:57:dd:44:1c:88:3d:6e:0d: f3:7a:b7:38:01:a4:af:e0:7b:6a:d6:01:36:c5:d7: 55:00:12:fe:44:ff:e5:79:fd:ee:eb:5e:15:d8:ea: 26:d5:78:27:e6:5a:58:28:33:00:e4:8b:db:a4:95: c6:66:c3:e8:9a:9d:a9:7a:e9:e1:15:96:c7:1f:d0: 17:9b:69:73:10:9e:63:99:02:5b:7d:1c:33:61:5e: f2:b2:ce:97:d7:ab:3b:76:4b:06:25:88:fd:4c:9b: 2b:f5:c6:e1:ad:66:5b:b0:32:de:e3:4c:84:a9:67: 8d:82:2d:c3:ce:67:a7:ec:48:9e:02:ff:f1:e9:d7: 12:4d:90:6a:79:bb:cf:66:d0:2d:cc:61:09:43:84: 5f:18:7b:78:c8:00:03:a5:9a:58:3f:a1:7a:29:5a: 85:e2:18:cd:a9:fe:be:64:bf:e8:4a:bb:8f:41:00: 93:b4:f4:2d:e8:0a:10:e9:12:06:8e:8f:48:27:3d: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:D2:8E:E4:7F:C1:CE:40:A4:D0:6D:9E:8C:3F:47:69:90:60:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1127bd9-993a-3003-91c6-a84fe929e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5f:03:c6:af:e0:c5:00:28:b3:e0:df:08:0e:7d:f9:8f:04: c5:16:22:be:36:8a:fc:11:59:07:b1:ee:6a:2e:20:81:e9:a0: f5:ca:d9:42:6b:31:30:85:2e:9b:67:07:40:04:e3:ea:1f:33: 3d:20:bc:e9:3c:42:2a:39:70:1d:71:f6:50:7c:39:b3:fd:8f: 26:ac:f4:d3:ab:e3:35:37:fe:f9:d9:64:ce:a4:21:3f:bb:4c: 29:94:03:a9:5e:39:5f:81:69:90:78:a9:ba:05:46:d7:3e:fd: 29:1d:4b:c7:db:a8:38:c0:94:78:ad:e1:58:8f:5e:af:c8:39: 7d:b8:e6:fa:51:b2:76:06:ce:70:c9:ef:3c:a1:62:df:e4:3d: 45:b8:99:2a:ee:13:e5:15:47:f2:6d:58:b7:eb:96:9a:12:3e: b3:66:81:1a:61:52:3e:8e:1b:54:cc:fd:4d:d6:d4:c8:7f:ef: b1:3b:85:82:0f:3f:da:b6:6d:99:c9:6a:59:b0:db:35:12:82: 5a:01:4c:97:c3:a0:6c:a0:c5:f2:96:dd:16:5e:07:6d:4d:4c: 81:bc:c7:a7:ab:1b:3a:37:23:56:44:02:d2:10:10:c8:e1:4e: 0f:47:29:91:95:93:40:39:cc:3f:13:4f:4e:fe:a0:b9:57:25: f0:77:7f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFcbunxhrsBi6igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzgzOVoXDTI1MTEyMDA2MzgzOVowLzEtMCsGA1UEAxMk MGY0MmYyN2QtZmY5Zi00ZjZjLWJmMWYtNjlmMjk4YTI5MjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW0pCMjYrpPPFacT5txMshO0zD+USLKvVYqq ja/77DOCH8L2aJZD9HTjybppVdhwAqFUGtDAe6CT2IcQfhiQcc6+V91EHIg9bg3z erc4AaSv4Htq1gE2xddVABL+RP/lef3u614V2Oom1Xgn5lpYKDMA5IvbpJXGZsPo mp2peunhFZbHH9AXm2lzEJ5jmQJbfRwzYV7yss6X16s7dksGJYj9TJsr9cbhrWZb sDLe40yEqWeNgi3Dzmen7EieAv/x6dcSTZBqebvPZtAtzGEJQ4RfGHt4yAADpZpY P6F6KVqF4hjNqf6+ZL/oSruPQQCTtPQt6AoQ6RIGjo9IJz0QqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK+0o7kf8HOQKTQbZ6MP0dpkGCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTExMjdiZDktOTkzYS0z MDAzLTkxYzYtYTg0ZmU5MjllODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBfA8av4MUAKLPg3wgOffmPBMUWIr42ivwRWQex7mouIIHpoPXK2UJr MTCFLptnB0AE4+ofMz0gvOk8Qio5cB1x9lB8ObP9jyas9NOr4zU3/vnZZM6kIT+7 TCmUA6leOV+BaZB4qboFRtc+/SkdS8fbqDjAlHit4ViPXq/IOX245vpRsnYGznDJ 7zyhYt/kPUW4mSruE+UVR/JtWLfrlpoSPrNmgRphUj6OG1TM/U3W1Mh/77E7hYIP P9q2bZnJalmw2zUSgloBTJfDoGygxfKW3RZeB21NTIG8x6erGzo3I1ZEAtIQEMjh Tg9HKZGVk0A5zD8TT07+oLlXJfB3f7c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:57 2025 by rpki-client