$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa File: a8aeac39-c794-349e-bef6-fb3c8890d20d.roa (raw, json) Hash identifier: d/2K7LmLz8nxpPh/jnMugYOCCPrMOwPTkq0oirr7DMo= Subject key identifier: 43:4E:F8:99:54:97:AA:47:2A:16:2B:20:0D:87:DF:30:5D:11:6E:2B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDB07963830C5663CABB180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa Signing time: Thu 21 Aug 2025 10:28:40 +0000 ROA not before: Thu 21 Aug 2025 10:28:40 +0000 ROA not after: Wed 19 Nov 2025 11:28:40 +0000 asID: 31898 IP address blocks: 168.138.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:db:07:96:38:30:c5:66:3c:ab:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:28:40 2025 GMT Not After : Nov 19 11:28:40 2025 GMT Subject: CN=74b5bcaa-debc-4d7c-b526-4fdc0d1efdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:53:99:ac:a0:78:6b:33:f0:93:dd:9d:f2: 0c:f6:e2:86:5d:ec:a2:c8:c7:d4:d2:f6:a4:2b:3d: e2:ac:bb:57:88:38:42:39:e6:51:4e:4b:21:35:40: 1a:21:fd:d6:e6:bc:28:d1:b2:8a:39:24:e8:f0:28: 51:2b:df:be:a3:ab:20:1d:4b:d4:7f:80:ed:aa:1f: e7:85:9b:c7:26:99:36:22:4d:97:96:69:6b:e0:8d: b5:79:4e:57:dd:e3:9e:a7:fc:3c:28:4a:09:c1:1b: da:21:75:37:81:2a:63:62:fe:b4:ab:89:e8:fd:e8: 4c:c2:1b:dd:02:57:7d:55:3a:b3:6b:cf:de:f1:09: 62:c7:41:39:5f:8d:e6:16:cc:d2:64:bd:3e:9a:66: 25:e9:b6:a4:8b:56:f2:c0:34:d2:db:4b:51:b8:87: a7:26:e1:28:ba:0f:7c:99:ff:9f:9d:e8:eb:5f:d1: 45:2d:79:28:5e:d9:22:13:cb:ec:db:64:ef:1c:d4: fb:97:65:35:2b:9d:7f:90:e1:5e:4a:b9:e0:d8:56: c9:b1:f7:28:e6:50:43:4e:30:44:f4:2f:36:60:36: 45:3a:aa:68:15:18:6f:43:d7:16:cf:36:9e:7b:1b: 97:bc:fa:c4:3e:85:e5:68:7f:7d:fb:be:05:86:a9: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:F8:99:54:97:AA:47:2A:16:2B:20:0D:87:DF:30:5D:11:6E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5d:e2:43:1c:8f:df:89:8d:7e:38:2d:00:3b:66:c5:26:d0: aa:f4:d8:b9:c5:59:ef:e3:0a:f8:94:89:fd:65:aa:ca:75:c0: dc:08:f4:af:f4:b2:04:8d:8e:61:3f:4d:18:4a:3f:f2:a0:1c: ba:c4:7f:38:88:c9:60:2c:6b:23:98:31:d3:fd:09:f0:00:45: 1a:3f:80:f5:2f:a3:d6:38:65:09:e8:fc:c3:53:d0:87:9c:da: 52:ec:af:45:b5:c7:58:90:3e:5a:9a:17:f8:54:b4:c7:2f:09: 75:fc:ca:d4:d2:15:b8:e5:3a:1a:63:7a:a2:60:da:f1:f0:66: e2:8b:26:75:ef:c3:52:22:94:ea:b9:16:13:98:7f:f9:4b:e6: f5:12:fa:2e:2b:35:a7:a3:37:4c:8e:be:95:af:37:b6:28:26: 71:d2:cf:f4:51:f5:00:50:ba:c2:e6:a7:26:07:cc:20:3f:fb: 03:b4:c2:f9:ee:c5:25:22:cc:56:6b:34:d5:15:dd:f7:a9:5c: 9e:88:c4:ce:5a:7d:ac:c5:c4:0b:5b:a0:85:ce:87:35:6e:6a: 3c:5c:68:7b:67:b0:0d:3d:7c:94:d4:79:89:59:88:29:c1:d6: 5f:ef:ce:a2:7a:1f:b6:9b:3a:99:ee:77:01:59:87:ff:e9:32: a9:83:a6:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2weWODDFZjyrsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjg0MFoXDTI1MTExOTExMjg0MFowLzEtMCsGA1UEAxMk NzRiNWJjYWEtZGViYy00ZDdjLWI1MjYtNGZkYzBkMWVmZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dFTmaygeGsz8JPdnfIM9uKGXeyiyMfU0vak Kz3irLtXiDhCOeZRTkshNUAaIf3W5rwo0bKKOSTo8ChRK9++o6sgHUvUf4Dtqh/n hZvHJpk2Ik2Xlmlr4I21eU5X3eOep/w8KEoJwRvaIXU3gSpjYv60q4no/ehMwhvd Ald9VTqza8/e8Qlix0E5X43mFszSZL0+mmYl6baki1bywDTS20tRuIenJuEoug98 mf+fnejrX9FFLXkoXtkiE8vs22TvHNT7l2U1K51/kOFeSrng2FbJsfco5lBDTjBE 9C82YDZFOqpoFRhvQ9cWzzaeexuXvPrEPoXlaH99+74FhqkeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENO+JlUl6pHKhYrIA2H3zBdEW4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThhZWFjMzktYzc5NC0z NDllLWJlZjYtZmIzYzg4OTBkMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVd4kMcj9+JjX44LQA7ZsUm0Kr02LnFWe/jCviUif1lqsp1wNwI9K/0 sgSNjmE/TRhKP/KgHLrEfziIyWAsayOYMdP9CfAARRo/gPUvo9Y4ZQno/MNT0Iec 2lLsr0W1x1iQPlqaF/hUtMcvCXX8ytTSFbjlOhpjeqJg2vHwZuKLJnXvw1IilOq5 FhOYf/lL5vUS+i4rNaejN0yOvpWvN7YoJnHSz/RR9QBQusLmpyYHzCA/+wO0wvnu xSUizFZrNNUV3fepXJ6IxM5afazFxAtboIXOhzVuajxcaHtnsA09fJTUeYlZiCnB 1l/vzqJ6H7abOpnudwFZh//pMqmDpiw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:22 2025 by rpki-client