$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa File: a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa (raw, json) Hash identifier: uaWWu4i5LAOAPZCVw5YyLzKGRkOlXJkB0zIh3+1ZpEs= Subject key identifier: 48:BE:BD:60:0B:45:1F:52:2D:8C:A2:7D:B6:EB:51:4C:09:11:15:FE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF014541C936123053DBE3300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa Signing time: Fri 22 Aug 2025 05:35:44 +0000 ROA not before: Fri 22 Aug 2025 05:35:44 +0000 ROA not after: Thu 20 Nov 2025 06:35:44 +0000 asID: 31898 IP address blocks: 132.226.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:54:1c:93:61:23:05:3d:be:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:35:44 2025 GMT Not After : Nov 20 06:35:44 2025 GMT Subject: CN=0a372735-8a67-43b1-8a53-948983b4864e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:19:2e:59:ec:fa:ad:be:6b:e7:3a:0b:72: 28:23:63:58:72:de:ca:3e:5e:a0:8f:df:88:3f:51: 5f:01:5d:4b:b7:41:cf:83:de:37:6f:ed:ca:a7:4a: 32:86:e9:00:e3:b2:14:14:4d:59:97:91:86:39:3c: 8d:d6:7b:32:31:e8:3c:8b:18:c5:5d:ec:2f:28:42: 26:7a:64:fc:e9:55:c7:ba:c1:f4:17:0b:d0:64:b5: 12:c8:da:6e:67:f9:57:a9:41:34:ea:1a:e5:f0:d6: 3f:6d:c2:84:ac:5d:37:7d:8e:84:40:d9:5a:f0:42: 3b:90:34:59:a9:1a:01:b6:20:18:8c:05:12:ec:b7: dd:7b:f3:87:a5:c6:e7:8e:c1:52:f3:7f:1e:d7:23: 77:aa:fe:6b:24:86:22:51:4e:27:8a:74:af:ae:2b: f5:af:19:a6:99:18:90:8a:64:a4:97:99:90:54:8b: 97:59:bb:5a:6e:04:e9:a4:23:6b:04:d5:62:ce:f4: 32:87:49:ea:d0:1c:f4:74:a6:fa:df:72:a5:fe:5c: 42:4d:3d:6c:a8:12:ca:c3:07:e4:c0:81:90:78:76: bc:5a:8c:a1:cf:0a:7e:15:30:4a:84:36:6c:cc:90: f3:31:a7:5f:b3:71:89:45:ce:a7:0e:fe:2f:66:f0: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:BD:60:0B:45:1F:52:2D:8C:A2:7D:B6:EB:51:4C:09:11:15:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a99cf58b-8fe6-3a42-9f22-5d2ba9f0ba07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:73:8d:97:5c:bc:9c:3a:50:b3:b5:63:36:94:61:13:e7:3a: 26:b7:10:09:ae:4e:3f:75:03:b7:41:93:9d:0c:ba:68:b1:0b: ab:a9:69:13:79:7a:8d:ae:1f:24:ed:a0:81:a9:02:c9:b2:98: a9:47:cc:c2:4a:e8:30:8c:aa:6d:31:83:9e:4b:ce:02:af:f2: 7f:c7:be:9d:f4:f7:df:45:71:76:d0:29:3f:d0:bc:5e:bf:b7: 45:e4:00:59:e8:02:94:c4:cf:cd:9c:83:31:12:71:50:8a:a3: 6f:84:d9:3c:20:98:56:48:d1:4b:53:09:4f:d3:f8:c0:c5:19: 33:55:f2:7c:a2:a2:95:88:33:bc:31:8c:2f:c0:70:35:50:14: e9:36:82:f4:f6:29:39:11:60:af:1c:87:22:f7:18:bd:89:e2: 17:8d:55:21:5c:13:47:dc:f3:65:34:70:20:6c:92:68:99:06: 19:9b:fd:84:62:5f:7e:51:33:e5:ad:2a:39:8f:36:7e:99:87: de:25:25:fd:4b:0a:76:65:f5:a7:a1:a3:6b:f3:26:0f:fb:05: c1:62:0b:a7:15:2a:f6:0a:71:a8:4e:32:b0:2d:f5:d9:e7:6c: ae:0e:a9:e4:62:b7:6f:de:6f:27:46:19:4a:45:65:ec:b4:4d: 69:27:f1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFFQck2EjBT2+MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzU0NFoXDTI1MTEyMDA2MzU0NFowLzEtMCsGA1UEAxMk MGEzNzI3MzUtOGE2Ny00M2IxLThhNTMtOTQ4OTgzYjQ4NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4wZLlns+q2+a+c6C3IoI2NYct7KPl6gj9+I P1FfAV1Lt0HPg943b+3Kp0oyhukA47IUFE1Zl5GGOTyN1nsyMeg8ixjFXewvKEIm emT86VXHusH0FwvQZLUSyNpuZ/lXqUE06hrl8NY/bcKErF03fY6EQNla8EI7kDRZ qRoBtiAYjAUS7Lfde/OHpcbnjsFS838e1yN3qv5rJIYiUU4ninSvriv1rxmmmRiQ imSkl5mQVIuXWbtabgTppCNrBNVizvQyh0nq0Bz0dKb633Kl/lxCTT1sqBLKwwfk wIGQeHa8Woyhzwp+FTBKhDZszJDzMadfs3GJRc6nDv4vZvBCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+vWALRR9SLYyifbbrUUwJERX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTk5Y2Y1OGItOGZlNi0z YTQyLTlmMjItNWQyYmE5ZjBiYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhOIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVzjZdcvJw6ULO1YzaUYRPnOia3EAmuTj91A7dBk50MumixC6upaRN5 eo2uHyTtoIGpAsmymKlHzMJK6DCMqm0xg55LzgKv8n/Hvp30999FcXbQKT/QvF6/ t0XkAFnoApTEz82cgzEScVCKo2+E2TwgmFZI0UtTCU/T+MDFGTNV8nyiopWIM7wx jC/AcDVQFOk2gvT2KTkRYK8chyL3GL2J4heNVSFcE0fc82U0cCBskmiZBhmb/YRi X35RM+WtKjmPNn6Zh94lJf1LCnZl9aeho2vzJg/7BcFiC6cVKvYKcahOMrAt9dnn bK4OqeRit2/ebydGGUpFZey0TWkn8Us= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:02 2025 by rpki-client