$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa File: a8b9269c-db50-3610-836d-3e8d4894532a.roa (raw, json) Hash identifier: iydUR7JdpbQNIYtcM4rUWVT5+xC1mUHe6dmD9iFIXR0= Subject key identifier: DD:E5:01:A6:E9:F1:60:E0:50:5E:B7:03:D9:58:E7:01:9E:6E:8B:B1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF56083776E8F211818D3680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa Signing time: Thu 21 Aug 2025 23:12:18 +0000 ROA not before: Thu 21 Aug 2025 23:12:18 +0000 ROA not after: Thu 20 Nov 2025 00:12:18 +0000 asID: 31898 IP address blocks: 147.154.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:56:08:37:76:e8:f2:11:81:8d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:12:18 2025 GMT Not After : Nov 20 00:12:18 2025 GMT Subject: CN=ba50575a-3b24-455e-940b-70d6a56e275b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:f3:52:f3:2c:bd:44:f6:49:c6:09:7e:76: 2d:a0:d4:cf:78:13:4e:45:65:44:ec:8e:06:86:e0: 4a:cd:c6:d3:5f:2e:c3:c2:1d:84:11:5d:11:aa:36: 62:bd:1d:ea:f4:91:09:8f:1f:fa:c2:9b:db:96:29: a2:82:c0:76:87:ce:3f:27:bd:29:8d:17:8c:ed:ba: 8b:71:16:d2:d8:57:3e:db:6c:25:ea:8c:33:ff:8c: b6:d5:91:71:ee:3d:91:b8:25:54:0b:62:71:27:f8: 50:7f:f0:6e:75:9e:ef:58:48:87:0d:3f:e3:58:c7: 5d:66:97:50:d6:6b:a0:25:1e:5c:d5:25:f2:a7:cf: 94:07:f8:db:ac:7a:cc:43:51:28:d7:e0:d9:34:60: 16:26:ab:2e:36:49:71:14:18:52:ed:b4:cc:0d:a4: af:52:31:dd:a7:62:76:e6:28:2b:46:c5:33:7c:39: 23:49:a2:3b:e1:44:0a:4f:00:05:bf:64:f4:61:03: 84:23:11:b0:d0:03:00:3c:e0:76:89:32:c7:fa:56: 9a:b6:93:38:f5:cf:93:9e:87:25:ab:00:8b:c7:0c: ea:12:d0:b0:74:64:c7:3f:b1:2b:99:0a:7b:da:a0: 7d:c2:28:32:ee:d6:20:3a:2c:f1:a9:8e:16:66:12: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E5:01:A6:E9:F1:60:E0:50:5E:B7:03:D9:58:E7:01:9E:6E:8B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1c:44:f5:16:54:c5:c9:18:d4:f9:2d:b2:60:c2:1c:21:ab: 2e:49:33:0e:c1:60:7e:04:47:0f:7d:40:49:a7:cc:50:ec:bb: e3:06:e1:6e:eb:0d:e6:c2:c2:ce:a3:4b:c4:1b:d9:77:a3:44: 68:b6:55:53:b5:e1:84:af:25:8e:79:82:24:03:28:3f:8c:10: 44:0b:84:8c:5d:a8:97:fb:48:8e:31:fd:da:e5:8b:76:0d:5a: ba:80:48:68:16:3a:5b:f4:3c:72:92:e7:a0:2f:22:46:67:bb: b1:69:ed:fd:a9:d8:6a:7a:75:87:52:93:69:27:09:4f:8f:8a: 0f:9d:1f:47:83:d0:55:e2:86:72:08:f4:de:e7:93:5d:7c:67: c8:4f:98:2e:bb:3f:48:17:85:8d:d1:b0:95:24:b6:f2:52:cf: 45:30:8c:dc:c5:36:c1:55:81:ef:ff:0c:94:c8:b8:4b:8d:31: 34:c3:e5:75:e4:83:68:b2:71:50:66:34:81:26:04:98:01:18: b7:7d:e2:b2:db:cb:2e:42:f3:0c:d2:0e:2d:f6:0e:18:f0:e9: 45:b7:ac:98:bb:cf:21:8f:ba:e4:3e:03:ff:4c:0b:65:b9:f0: 65:28:23:c7:b9:97:7a:84:24:11:0a:b8:b0:3a:0e:e1:cf:06: 2b:1b:8b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVgg3dujyEYGNNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTIxOFoXDTI1MTEyMDAwMTIxOFowLzEtMCsGA1UEAxMk YmE1MDU3NWEtM2IyNC00NTVlLTk0MGItNzBkNmE1NmUyNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+LzUvMsvUT2ScYJfnYtoNTPeBNORWVE7I4G huBKzcbTXy7Dwh2EEV0RqjZivR3q9JEJjx/6wpvblimigsB2h84/J70pjReM7bqL cRbS2Fc+22wl6owz/4y21ZFx7j2RuCVUC2JxJ/hQf/BudZ7vWEiHDT/jWMddZpdQ 1mugJR5c1SXyp8+UB/jbrHrMQ1Eo1+DZNGAWJqsuNklxFBhS7bTMDaSvUjHdp2J2 5igrRsUzfDkjSaI74UQKTwAFv2T0YQOEIxGw0AMAPOB2iTLH+laatpM49c+Tnocl qwCLxwzqEtCwdGTHP7ErmQp72qB9wigy7tYgOizxqY4WZhK77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3lAabp8WDgUF63A9lY5wGebouxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThiOTI2OWMtZGI1MC0z NjEwLTgzNmQtM2U4ZDQ4OTQ1MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQcRPUWVMXJGNT5LbJgwhwhqy5JMw7BYH4ERw99QEmnzFDsu+MG4W7r DebCws6jS8Qb2XejRGi2VVO14YSvJY55giQDKD+MEEQLhIxdqJf7SI4x/drli3YN WrqASGgWOlv0PHKS56AvIkZnu7Fp7f2p2Gp6dYdSk2knCU+Pig+dH0eD0FXihnII 9N7nk118Z8hPmC67P0gXhY3RsJUktvJSz0UwjNzFNsFVge//DJTIuEuNMTTD5XXk g2iycVBmNIEmBJgBGLd94rLbyy5C8wzSDi32Dhjw6UW3rJi7zyGPuuQ+A/9MC2W5 8GUoI8e5l3qEJBEKuLA6DuHPBisbi10= -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:57 2025 by rpki-client