$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa File: b54a82cc-027e-31e0-9c69-30ee467bb265.roa (raw, json) Hash identifier: hFdxtlkx994CfE9DiCEkR62aNIICJ3bJ4mpbxlyGujs= Subject key identifier: 84:CE:31:8B:74:63:8F:9A:24:1D:38:7A:0A:65:4A:CC:9A:5D:96:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF015BE63C742590DD9269740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa Signing time: Fri 22 Aug 2025 05:38:35 +0000 ROA not before: Fri 22 Aug 2025 05:38:35 +0000 ROA not after: Thu 20 Nov 2025 06:38:35 +0000 asID: 31898 IP address blocks: 192.18.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:15:be:63:c7:42:59:0d:d9:26:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:38:35 2025 GMT Not After : Nov 20 06:38:35 2025 GMT Subject: CN=d9440f07-4c02-4ff6-ab4a-6c3c7761b990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:07:a4:c2:6e:d9:bd:36:8b:1c:93:14:d4: dd:29:b8:67:ce:c1:0e:48:21:ff:6e:d5:2e:89:d4: 27:4d:1a:d6:48:40:da:12:d2:e2:47:d4:5e:ce:67: d1:78:50:36:db:60:e2:bd:3a:bc:3b:09:0f:24:bc: de:b1:45:d9:f4:32:21:0b:65:eb:8c:cb:50:ba:16: f1:58:cd:ef:2b:11:00:13:14:57:5d:d3:8f:3c:d2: f6:72:2f:0f:d9:99:9b:da:69:d4:52:2f:c7:42:fd: 7a:8a:59:9d:4a:70:df:a1:d0:a3:42:63:81:f8:0f: ad:db:b6:37:8d:de:bd:cf:4e:7c:9b:fc:ce:08:87: 5d:12:16:d7:ae:5f:30:4b:40:8f:03:2b:2e:98:7f: 89:c7:cc:ff:88:b9:1c:9c:36:1f:0f:5e:0c:c3:4d: 38:7e:0d:22:17:3a:ac:93:ab:6c:d3:3a:a3:df:0e: 61:2c:45:95:0c:17:38:3c:1b:99:6e:7c:e7:11:c2: be:e2:60:a8:89:76:28:51:1c:1f:70:f2:06:4c:b8: 10:79:04:b9:aa:a0:87:a5:96:cd:e6:94:75:fa:e9: 66:35:a6:3a:b3:60:e5:25:71:72:b0:e5:9d:e6:dd: 02:ba:7f:60:97:7b:4c:a7:d4:d8:c4:b2:ff:1e:29: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CE:31:8B:74:63:8F:9A:24:1D:38:7A:0A:65:4A:CC:9A:5D:96:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b54a82cc-027e-31e0-9c69-30ee467bb265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.18.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:58:55:cc:30:39:d1:e6:69:7a:55:47:16:7c:42:2c:92:37: 0c:f0:b6:db:48:33:5d:40:0b:5c:17:1c:6c:7a:e2:53:1b:a0: b3:c1:2c:0e:75:6c:f3:c1:6a:aa:24:b7:2d:a7:00:4c:16:fb: 6d:84:a5:85:0f:15:c1:c9:b9:6b:34:09:b8:2b:e5:84:06:1b: a1:8b:34:d6:68:fc:36:95:e0:09:6a:0e:7f:05:b5:77:bf:bc: 2b:b5:5d:81:da:6b:c5:cb:ca:cf:40:37:6b:13:70:3c:61:6d: 0d:1c:c1:f4:8e:88:48:94:ce:5c:cd:ae:aa:d5:14:1b:74:19: 29:6d:68:a6:59:8e:e0:7f:9e:fb:91:5d:ad:25:18:45:b0:07: e6:43:1b:8e:55:63:d9:61:b4:ab:ff:ef:95:cc:d8:89:28:12: 70:e7:f6:f6:fa:da:1a:64:51:54:8f:7a:4a:bf:01:db:23:11: e1:e3:1d:7c:c9:de:71:35:f2:d2:ef:b7:aa:3f:9b:b9:17:d2: 28:01:25:57:10:c7:81:2b:26:7e:dc:99:8f:42:23:74:4e:9c: 3f:70:f0:15:7a:94:b4:11:84:17:52:2e:84:21:41:89:0a:c2: 56:1b:e6:dd:c7:e1:cc:41:5a:f3:b2:89:8f:4b:cc:a7:52:d9: 7b:ab:7d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFb5jx0JZDdkml0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzgzNVoXDTI1MTEyMDA2MzgzNVowLzEtMCsGA1UEAxMk ZDk0NDBmMDctNGMwMi00ZmY2LWFiNGEtNmMzYzc3NjFiOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqQHpMJu2b02ixyTFNTdKbhnzsEOSCH/btUu idQnTRrWSEDaEtLiR9RezmfReFA222DivTq8OwkPJLzesUXZ9DIhC2XrjMtQuhbx WM3vKxEAExRXXdOPPNL2ci8P2Zmb2mnUUi/HQv16ilmdSnDfodCjQmOB+A+t27Y3 jd69z058m/zOCIddEhbXrl8wS0CPAysumH+Jx8z/iLkcnDYfD14Mw004fg0iFzqs k6ts0zqj3w5hLEWVDBc4PBuZbnznEcK+4mCoiXYoURwfcPIGTLgQeQS5qqCHpZbN 5pR1+ulmNaY6s2DlJXFysOWd5t0Cun9gl3tMp9TYxLL/Him43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITOMYt0Y4+aJB04egplSsyaXZZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjU0YTgyY2MtMDI3ZS0z MWUwLTljNjktMzBlZTQ2N2JiMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtYVcwwOdHmaXpVRxZ8QiySNwzwtttIM11AC1wXHGx64lMboLPBLA51 bPPBaqokty2nAEwW+22EpYUPFcHJuWs0Cbgr5YQGG6GLNNZo/DaV4AlqDn8FtXe/ vCu1XYHaa8XLys9AN2sTcDxhbQ0cwfSOiEiUzlzNrqrVFBt0GSltaKZZjuB/nvuR Xa0lGEWwB+ZDG45VY9lhtKv/75XM2IkoEnDn9vb62hpkUVSPekq/AdsjEeHjHXzJ 3nE18tLvt6o/m7kX0igBJVcQx4ErJn7cmY9CI3ROnD9w8BV6lLQRhBdSLoQhQYkK wlYb5t3H4cxBWvOyiY9LzKdS2XurfZA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:09 2025 by rpki-client