$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa File: c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa (raw, json) Hash identifier: nf+66WVttG8PI8w7WMz6K1MXq21ta3qzcC2efHMhOX0= Subject key identifier: A6:E1:EF:73:00:DD:47:F6:1E:A8:8F:EA:B3:73:80:B6:41:B0:15:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB6557E164DB29567354CEC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa Signing time: Wed 20 Aug 2025 13:19:55 +0000 ROA not before: Wed 20 Aug 2025 13:19:55 +0000 ROA not after: Tue 18 Nov 2025 14:19:55 +0000 asID: 31898 IP address blocks: 204.216.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:57:e1:64:db:29:56:73:54:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:55 2025 GMT Not After : Nov 18 14:19:55 2025 GMT Subject: CN=b4e88e9e-905b-4e39-9af8-7ffccb862ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:ac:ae:86:09:8b:ce:83:f9:b9:5c:88:cd: 6f:6a:55:28:ad:ba:0f:40:04:33:75:86:75:b5:42: 4b:3c:41:1d:b6:0c:30:fd:9b:a6:36:8a:41:35:17: 1b:62:f9:18:5f:13:b7:ab:77:87:d7:69:1b:2e:31: e3:53:de:92:0b:2a:ea:3c:13:9e:8b:9a:1c:1b:31: da:f8:1f:e4:70:89:24:20:db:71:60:89:6a:20:e6: c2:5a:3a:5a:09:81:21:15:cb:cf:cd:e7:17:15:ae: 01:c8:60:08:a3:a1:3c:fb:5a:7a:2d:a4:29:45:34: 00:b6:33:ed:13:ca:3a:d9:9c:47:33:cb:4f:cd:b8: 94:a7:69:1b:70:77:6e:7e:43:40:8f:37:37:51:61: 0c:da:10:75:e4:7a:59:05:fd:98:87:a4:35:48:53: ff:62:5a:8c:59:79:49:0c:7b:f5:c5:49:0f:ed:89: 18:02:37:12:2f:c0:8e:3d:7b:25:3e:3d:be:10:f3: 3d:45:0b:89:95:8b:36:0a:71:5d:65:48:37:15:c2: 35:04:79:d4:4b:54:33:5c:e8:71:7c:8a:ad:80:4a: 61:4e:4c:74:2a:23:ff:dc:9f:4b:97:63:02:84:c3: cd:b5:f5:fa:a9:cc:b9:d3:2f:5c:c9:3a:ff:2f:8e: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:EF:73:00:DD:47:F6:1E:A8:8F:EA:B3:73:80:B6:41:B0:15:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c06b4056-8c47-3fcd-b684-3c8e78dec7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f2:65:65:b0:d6:f8:47:59:18:cd:88:0d:56:a5:82:78:fb: c5:e6:a9:5a:9b:a8:b7:c6:0d:3c:7a:e2:04:e9:11:a0:6c:77: a8:da:95:d6:37:03:52:05:fe:22:c4:80:62:45:c4:62:42:98: 0d:08:0c:7a:a0:82:5d:29:43:62:b6:0a:d9:80:55:1e:63:6f: 61:e5:0b:71:e7:bd:a0:3e:c8:24:ea:a0:27:34:a3:0a:12:e6: 50:8f:56:31:83:20:a7:9b:0e:f7:57:4a:44:bc:3d:b7:0a:f9: 78:a1:ee:48:f4:8c:69:ca:a3:2d:89:e9:66:29:6e:65:a8:54: 21:5b:2c:43:50:5b:85:ed:dd:0d:fd:5b:fc:33:be:53:72:ed: 08:6c:22:d1:2a:80:26:b4:87:a1:16:71:e6:42:10:be:8e:fb: 79:35:7e:43:fb:54:91:f5:ae:de:4f:e3:92:94:da:65:e0:1f: 91:49:24:43:5b:5d:aa:33:da:f2:f3:47:fc:9f:5d:61:55:a9: 4d:d6:b7:3d:74:6d:66:2a:52:33:cb:91:c6:d5:8d:2a:54:3f: 87:5f:c4:f5:7f:0a:4f:6a:d9:a7:4d:f3:61:f3:df:bc:e9:dd: 6c:4d:e8:15:d4:91:7b:d7:6a:fd:42:31:74:c5:c3:2c:87:85: 41:0d:d0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZVfhZNspVnNUzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTk1NVoXDTI1MTExODE0MTk1NVowLzEtMCsGA1UEAxMk YjRlODhlOWUtOTA1Yi00ZTM5LTlhZjgtN2ZmY2NiODYyYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD6sroYJi86D+blciM1valUorboPQAQzdYZ1 tUJLPEEdtgww/ZumNopBNRcbYvkYXxO3q3eH12kbLjHjU96SCyrqPBOei5ocGzHa +B/kcIkkINtxYIlqIObCWjpaCYEhFcvPzecXFa4ByGAIo6E8+1p6LaQpRTQAtjPt E8o62ZxHM8tPzbiUp2kbcHdufkNAjzc3UWEM2hB15HpZBf2Yh6Q1SFP/YlqMWXlJ DHv1xUkP7YkYAjcSL8COPXslPj2+EPM9RQuJlYs2CnFdZUg3FcI1BHnUS1QzXOhx fIqtgEphTkx0KiP/3J9Ll2MChMPNtfX6qcy50y9cyTr/L45qmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbh73MA3Uf2HqiP6rNzgLZBsBU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzA2YjQwNTYtOGM0Ny0z ZmNkLWI2ODQtM2M4ZTc4ZGVjN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzNiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAryZWWw1vhHWRjNiA1WpYJ4+8XmqVqbqLfGDTx64gTpEaBsd6jaldY3 A1IF/iLEgGJFxGJCmA0IDHqggl0pQ2K2CtmAVR5jb2HlC3HnvaA+yCTqoCc0owoS 5lCPVjGDIKebDvdXSkS8PbcK+Xih7kj0jGnKoy2J6WYpbmWoVCFbLENQW4Xt3Q39 W/wzvlNy7QhsItEqgCa0h6EWceZCEL6O+3k1fkP7VJH1rt5P45KU2mXgH5FJJENb Xaoz2vLzR/yfXWFVqU3Wtz10bWYqUjPLkcbVjSpUP4dfxPV/Ck9q2adN82Hz37zp 3WxN6BXUkXvXav1CMXTFwyyHhUEN0Cw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:33 2025 by rpki-client