$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa File: e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa (raw, json) Hash identifier: B9ty0pFqOliVZkXqxL736AaU19/4JXe//ggZfOgeS3E= Subject key identifier: F6:DD:59:81:B5:EA:70:FD:04:A0:40:34:54:DF:60:2B:38:21:C3:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB650AB37562914C4C091300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa Signing time: Wed 20 Aug 2025 13:19:19 +0000 ROA not before: Wed 20 Aug 2025 13:19:19 +0000 ROA not after: Tue 18 Nov 2025 14:19:19 +0000 asID: 31898 IP address blocks: 144.33.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:0a:b3:75:62:91:4c:4c:09:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:19 2025 GMT Not After : Nov 18 14:19:19 2025 GMT Subject: CN=48fc5a0b-5dc4-4c91-ac8f-9e739349f968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:75:ed:4b:52:09:5e:95:db:63:d5:d2:3f: bb:3e:f0:1f:1e:57:b4:38:04:4e:75:c8:c5:a8:95: ee:ce:90:80:dd:2d:93:db:00:54:42:54:90:b9:bb: ef:25:9b:26:84:73:46:50:40:a1:5f:e3:1b:fb:63: df:e3:32:43:cf:e4:5b:96:3e:00:4a:cb:33:db:df: 95:58:c4:7a:fb:48:34:84:27:81:98:3d:2f:c2:a2: 6b:97:0a:f6:aa:60:f6:6d:3a:ac:b7:f0:6e:a9:64: d1:75:fd:60:9a:7d:b0:ef:98:3f:45:91:6f:c4:7b: a0:a8:dd:11:dd:39:ca:7a:6b:20:c6:42:cd:0a:5d: 73:cb:56:0f:bc:83:23:62:e5:12:70:4a:3c:4b:dd: e3:ad:9f:6e:50:f2:fb:62:0b:c4:4a:18:15:5d:88: a8:08:8f:dc:3f:4d:6f:c5:23:0d:ef:c6:2f:0f:48: e7:e0:b0:c6:6e:72:1b:ce:34:86:df:ef:4b:c4:a3: e9:1b:c9:9c:02:2f:52:01:64:cf:ca:89:b6:c4:76: 10:67:86:3f:e4:44:7c:1b:67:25:c2:5a:90:b9:d3: 74:0d:13:d3:3e:92:43:85:ef:fd:1a:64:25:45:61: cf:bd:8d:a4:17:d2:b1:a5:ff:d1:a3:0d:3e:b0:f3: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DD:59:81:B5:EA:70:FD:04:A0:40:34:54:DF:60:2B:38:21:C3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ba299b-2f9d-3b01-9f14-af5fa10190a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:79:9c:11:1d:d5:5c:62:2d:85:4c:67:ca:e8:23:80:48:b3: e2:86:87:98:a6:a4:4d:8a:66:41:0c:c4:b7:ae:02:91:05:12: f6:01:59:67:da:f9:c5:00:4e:55:6d:8f:7d:ad:30:eb:2d:4f: e5:41:da:bd:41:3d:b1:10:8d:f3:86:f0:f2:0b:7d:56:bd:6e: 46:16:83:73:c7:78:15:9e:83:0b:1f:cb:4d:55:d5:5b:16:0b: 3f:ef:88:b3:34:f7:ac:f0:26:69:bc:ac:27:3c:07:5e:60:55: 04:bd:09:41:4f:d5:34:5a:d2:8d:1d:03:6d:37:18:f3:77:e5: f1:7a:7c:25:39:f8:98:43:40:6f:5e:8a:fd:7c:22:12:4a:f6: 02:71:e6:53:ea:e9:9e:6f:86:fc:cf:10:d0:e7:27:50:98:05: c1:fb:1b:73:75:c4:b9:79:43:07:3d:c2:9f:2d:c4:07:4c:e6: 0f:c4:7f:60:08:2c:43:a0:f1:96:e5:6a:8c:cd:54:45:6e:7c: e2:9a:bc:cc:6f:89:04:fe:da:23:d6:7f:0e:9a:24:c0:50:68: b8:1f:7a:ae:b1:9b:fc:85:f8:ab:da:b1:b2:bb:44:64:86:f7: ca:07:e4:bf:a4:86:2d:c1:04:22:82:a8:0e:36:d5:d3:9a:3c: 84:33:db:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZQqzdWKRTEwJEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTkxOVoXDTI1MTExODE0MTkxOVowLzEtMCsGA1UEAxMk NDhmYzVhMGItNWRjNC00YzkxLWFjOGYtOWU3MzkzNDlmOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHt17UtSCV6V22PV0j+7PvAfHle0OAROdcjF qJXuzpCA3S2T2wBUQlSQubvvJZsmhHNGUEChX+Mb+2Pf4zJDz+Rblj4ASssz29+V WMR6+0g0hCeBmD0vwqJrlwr2qmD2bTqst/BuqWTRdf1gmn2w75g/RZFvxHugqN0R 3TnKemsgxkLNCl1zy1YPvIMjYuUScEo8S93jrZ9uUPL7YgvEShgVXYioCI/cP01v xSMN78YvD0jn4LDGbnIbzjSG3+9LxKPpG8mcAi9SAWTPyom2xHYQZ4Y/5ER8G2cl wlqQudN0DRPTPpJDhe/9GmQlRWHPvY2kF9Kxpf/Row0+sPMXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbdWYG16nD9BKBANFTfYCs4IcNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTdiYTI5OWItMmY5ZC0z YjAxLTlmMTQtYWY1ZmExMDE5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkCEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG55nBEd1VxiLYVMZ8roI4BIs+KGh5impE2KZkEMxLeuApEFEvYBWWfa +cUATlVtj32tMOstT+VB2r1BPbEQjfOG8PILfVa9bkYWg3PHeBWegwsfy01V1VsW Cz/viLM096zwJmm8rCc8B15gVQS9CUFP1TRa0o0dA203GPN35fF6fCU5+JhDQG9e iv18IhJK9gJx5lPq6Z5vhvzPENDnJ1CYBcH7G3N1xLl5Qwc9wp8txAdM5g/Ef2AI LEOg8ZblaozNVEVufOKavMxviQT+2iPWfw6aJMBQaLgfeq6xm/yF+KvasbK7RGSG 98oH5L+khi3BBCKCqA421dOaPIQz2+c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:38 2025 by rpki-client