$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd02ee36-8011-3d54-9e73-c61b00d68c40.roa File: dd02ee36-8011-3d54-9e73-c61b00d68c40.roa (raw, json) Hash identifier: dUkZs8mJJCoD5GWSWAoaaFH5J8PrPFR7YAKkP8OlEKY= Subject key identifier: 2B:DB:FE:1D:A3:D9:0C:14:D0:6A:18:DE:2D:0B:1D:17:33:A4:2C:13 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0144B688525578D4084D2E4 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd02ee36-8011-3d54-9e73-c61b00d68c40.roa Signing time: Fri 22 Aug 2025 05:35:39 +0000 ROA not before: Fri 22 Aug 2025 05:35:39 +0000 ROA not after: Thu 20 Nov 2025 06:35:39 +0000 asID: 31898 IP address blocks: 132.226.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:4b:68:85:25:57:8d:40:84:d2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:35:39 2025 GMT Not After : Nov 20 06:35:39 2025 GMT Subject: CN=3ab14b62-fa22-425c-9c4c-4e2854b3be70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:8c:35:c8:ef:74:be:e3:6d:a3:72:59:40: e5:e3:8a:e6:c0:f6:dc:ba:fb:81:a5:1b:13:ae:f2: 35:2d:02:bf:85:49:28:50:84:40:ee:cd:94:77:45: c1:e9:e3:d6:34:68:74:ba:97:bb:58:1a:ab:56:61: 22:cb:c2:61:55:03:21:1e:e7:35:b1:ea:eb:24:e6: 4e:2e:9a:85:c1:da:e9:f7:0d:0c:e1:65:b4:e7:17: cf:22:3b:6d:42:00:ca:34:40:07:4e:ef:e4:31:18: 59:30:cf:bd:a8:5c:0b:30:dc:f2:46:be:07:2c:5c: 80:fb:c4:92:9b:1b:12:55:0c:c8:f0:3b:36:dd:d7: 0f:c8:12:d7:ef:b6:aa:ad:50:97:fe:65:c0:6c:05: e2:c3:ac:d3:39:1e:da:36:f8:d7:45:d4:7e:37:a2: e2:f1:7d:d1:79:62:c8:f9:6a:81:96:43:1b:27:fe: 22:98:0c:a1:28:f1:49:9b:49:df:4a:f9:63:0a:a1: c5:55:d1:15:3c:57:42:d5:5f:02:db:55:9e:6a:11: 42:bd:2e:0a:5e:c6:bf:6f:80:88:25:a5:b7:68:cd: ed:6e:7d:91:a5:16:52:33:da:25:ce:07:8d:b7:44: 9b:24:3a:01:99:4b:ee:ca:00:af:fa:20:84:74:64: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:FE:1D:A3:D9:0C:14:D0:6A:18:DE:2D:0B:1D:17:33:A4:2C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd02ee36-8011-3d54-9e73-c61b00d68c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:50:36:fb:e5:0f:96:1e:61:6f:b8:f9:d2:c8:d8:ff:4c:23: 5c:bb:db:1d:a4:97:5b:c3:ad:52:1e:bd:4d:a2:a5:ce:0b:38: d3:13:bc:15:70:a0:0b:6c:2c:76:be:dd:1c:8f:ac:8c:97:fd: a9:f1:dd:88:0a:e8:fd:e7:14:4e:68:b0:57:cb:33:c0:40:24: db:53:c3:cf:6c:d1:bb:05:d7:25:7b:5d:bc:0d:85:aa:6e:51: 72:1b:7d:db:c9:ec:a8:56:9c:d8:75:03:16:a6:bf:b9:8e:2d: 82:3d:40:de:b0:36:b2:d8:8d:63:ae:19:1f:bc:dd:90:25:7d: c6:d1:80:29:0b:55:ac:ca:03:17:a9:f2:fa:da:b6:5c:18:89: 31:7d:f6:ca:7b:4c:e4:7f:0d:88:2b:8b:66:5e:38:2e:00:9a: 7e:70:ed:11:56:e2:76:48:e6:f4:26:2d:11:dc:a3:f6:8b:a4: 8e:41:04:d1:70:e6:0d:68:ec:9c:1c:77:9e:c9:21:93:f3:e6: c7:9f:33:9d:98:75:78:84:7d:f1:1f:94:81:da:0c:a9:e0:9b: 74:e6:bd:be:e9:5c:cb:d6:d8:a8:4d:df:62:29:25:67:ee:18: 03:2a:c2:88:61:07:67:5b:b6:b5:75:b6:c3:0b:a2:e3:a7:c0: 08:0b:86:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFEtohSVXjUCE0uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzUzOVoXDTI1MTEyMDA2MzUzOVowLzEtMCsGA1UEAxMk M2FiMTRiNjItZmEyMi00MjVjLTljNGMtNGUyODU0YjNiZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur6MNcjvdL7jbaNyWUDl44rmwPbcuvuBpRsT rvI1LQK/hUkoUIRA7s2Ud0XB6ePWNGh0upe7WBqrVmEiy8JhVQMhHuc1serrJOZO LpqFwdrp9w0M4WW05xfPIjttQgDKNEAHTu/kMRhZMM+9qFwLMNzyRr4HLFyA+8SS mxsSVQzI8Ds23dcPyBLX77aqrVCX/mXAbAXiw6zTOR7aNvjXRdR+N6Li8X3ReWLI +WqBlkMbJ/4imAyhKPFJm0nfSvljCqHFVdEVPFdC1V8C21WeahFCvS4KXsa/b4CI JaW3aM3tbn2RpRZSM9olzgeNt0SbJDoBmUvuygCv+iCEdGTd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvb/h2j2QwU0GoY3i0LHRczpCwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGQwMmVlMzYtODAxMS0z ZDU0LTllNzMtYzYxYjAwZDY4YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhOKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFQNvvlD5YeYW+4+dLI2P9MI1y72x2kl1vDrVIevU2ipc4LONMTvBVw oAtsLHa+3RyPrIyX/anx3YgK6P3nFE5osFfLM8BAJNtTw89s0bsF1yV7XbwNhapu UXIbfdvJ7KhWnNh1Axamv7mOLYI9QN6wNrLYjWOuGR+83ZAlfcbRgCkLVazKAxep 8vratlwYiTF99sp7TOR/DYgri2ZeOC4Amn5w7RFW4nZI5vQmLRHco/aLpI5BBNFw 5g1o7Jwcd57JIZPz5sefM52YdXiEffEflIHaDKngm3Tmvb7pXMvW2KhN32IpJWfu GAMqwohhB2dbtrV1tsMLouOnwAgLhnk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:45 2025 by rpki-client