$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa File: a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa (raw, json) Hash identifier: i7+MT1p8D9GqCrU0uYqOZUZelSDbsTTUEd48plQAHZc= Subject key identifier: 03:82:93:94:88:E1:87:D9:72:9C:A1:8B:B8:30:20:75:78:4A:AE:44 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEADE5C839C6DA9232DECF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa Signing time: Thu 21 Aug 2025 17:33:32 +0000 ROA not before: Thu 21 Aug 2025 17:33:32 +0000 ROA not after: Wed 19 Nov 2025 18:33:32 +0000 asID: 31898 IP address blocks: 147.154.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:e5:c8:39:c6:da:92:32:de:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:32 2025 GMT Not After : Nov 19 18:33:32 2025 GMT Subject: CN=dca5e2f5-3aac-41f2-9a4e-67ae446daf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:8b:5a:95:dc:b0:41:7d:5d:14:d1:4b:69: 08:c1:66:af:65:6f:b9:20:ea:e8:3f:9b:ee:87:e7: f8:5f:55:64:ed:7b:a0:4d:9f:06:3d:28:1a:cd:24: 28:30:40:73:17:1b:54:1e:4c:a4:92:0a:c2:08:9d: d9:a9:2b:90:d2:c1:17:5b:84:0a:35:c7:c3:c5:45: cc:23:45:89:71:10:e9:70:81:59:d6:c9:5b:ee:f8: 02:f7:47:09:5f:03:1a:0b:43:1a:02:40:5f:17:aa: 95:6f:49:e4:84:b2:fb:71:19:86:fb:a9:5b:ae:42: 38:ff:5e:25:5d:bc:70:74:bc:d3:83:eb:7f:f7:ba: f0:0e:a1:18:f8:11:98:51:bb:a9:27:4b:65:8f:f6: 38:43:c3:ac:5f:1e:b5:42:28:47:62:d8:76:04:cb: e6:3f:90:9e:82:d0:e0:40:75:e2:ff:dc:e7:65:e9: 11:74:9c:95:62:72:c0:28:a3:1b:85:b9:2d:e0:a8: 46:f8:3a:f4:ed:60:2e:c1:ae:65:18:33:37:a4:2a: 70:e4:ae:db:68:43:3c:68:54:ad:ff:4c:8f:12:ee: d6:ef:c7:bd:50:fb:1c:ff:ab:bd:8e:7a:da:1e:87: 43:e1:ed:d7:57:d4:4b:80:0d:9e:5c:33:d1:76:78: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:82:93:94:88:E1:87:D9:72:9C:A1:8B:B8:30:20:75:78:4A:AE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a4817fd0-0f78-36e4-bbb7-b8fafc7a4879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d3:89:66:d2:ab:80:a4:dd:2c:15:18:ce:34:50:61:04:93: 2f:7c:c3:f9:fd:ff:9d:f2:15:28:13:df:99:c1:8c:59:a0:1d: f6:85:81:00:9d:92:ef:92:49:66:e0:d9:f4:65:38:fa:d8:99: 79:f1:43:a9:13:d1:e8:e1:7b:89:23:57:4d:58:fc:77:97:72: 26:a5:4b:7e:bd:ea:ae:42:46:b2:98:c5:87:18:25:bb:5d:d4: 14:23:eb:25:50:5a:f7:d6:d4:60:ed:67:4b:55:16:dd:3b:b1: a8:f8:1c:b7:36:97:d4:a7:cd:aa:f9:c5:22:b0:bb:86:7d:45: 3e:d1:32:bf:98:94:a9:3e:7d:d2:a7:fb:35:24:9f:69:86:c5: 4f:38:37:f1:1d:2c:38:07:ea:97:5b:da:af:d4:32:48:fd:2e: 4f:05:50:1d:fb:64:2e:2f:0f:4c:ad:0a:4e:5e:84:ef:5b:24: 40:3e:de:d3:1d:dd:da:d6:4e:b4:fc:9c:64:f0:8a:ec:40:6f: 26:84:ae:4c:b8:e4:2d:ae:ed:d9:c3:91:b0:82:92:98:3e:14: 8f:b0:cf:eb:df:d1:6d:33:00:17:40:3a:ec:fb:24:ea:4b:09: 65:7a:a9:6b:55:b7:93:05:65:94:e2:92:80:12:ea:10:7a:6f: a6:64:7b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErureXIOcbakjLez4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzMzMloXDTI1MTExOTE4MzMzMlowLzEtMCsGA1UEAxMk ZGNhNWUyZjUtM2FhYy00MWYyLTlhNGUtNjdhZTQ0NmRhZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/aLWpXcsEF9XRTRS2kIwWavZW+5IOroP5vu h+f4X1Vk7XugTZ8GPSgazSQoMEBzFxtUHkykkgrCCJ3ZqSuQ0sEXW4QKNcfDxUXM I0WJcRDpcIFZ1slb7vgC90cJXwMaC0MaAkBfF6qVb0nkhLL7cRmG+6lbrkI4/14l XbxwdLzTg+t/97rwDqEY+BGYUbupJ0tlj/Y4Q8OsXx61QihHYth2BMvmP5CegtDg QHXi/9znZekRdJyVYnLAKKMbhbkt4KhG+Dr07WAuwa5lGDM3pCpw5K7baEM8aFSt /0yPEu7W78e9UPsc/6u9jnraHodD4e3XV9RLgA2eXDPRdngnrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOCk5SI4YfZcpyhi7gwIHV4Sq5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTQ4MTdmZDAtMGY3OC0z NmU0LWJiYjctYjhmYWZjN2E0ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnTiWbSq4Ck3SwVGM40UGEEky98w/n9/53yFSgT35nBjFmgHfaFgQCd ku+SSWbg2fRlOPrYmXnxQ6kT0ejhe4kjV01Y/HeXcialS3696q5CRrKYxYcYJbtd 1BQj6yVQWvfW1GDtZ0tVFt07saj4HLc2l9Snzar5xSKwu4Z9RT7RMr+YlKk+fdKn +zUkn2mGxU84N/EdLDgH6pdb2q/UMkj9Lk8FUB37ZC4vD0ytCk5ehO9bJEA+3tMd 3drWTrT8nGTwiuxAbyaErky45C2u7dnDkbCCkpg+FI+wz+vf0W0zABdAOuz7JOpL CWV6qWtVt5MFZZTikoAS6hB6b6Zke/Q= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:50 2025 by rpki-client