$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa File: ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa (raw, json) Hash identifier: c/lPE14GKhZADu5frwgXlSGqmaI6ydVCDwMkvDCcmoA= Subject key identifier: 11:79:86:0C:37:79:EC:D5:47:E4:38:D2:FE:10:03:1C:DE:5F:4B:20 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EF119045EB4C74D1DAEC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa Signing time: Fri 22 Aug 2025 12:56:28 +0000 ROA not before: Fri 22 Aug 2025 12:56:28 +0000 ROA not after: Thu 20 Nov 2025 13:56:28 +0000 asID: 31898 IP address blocks: 68.233.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ef:11:90:45:eb:4c:74:d1:da:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:28 2025 GMT Not After : Nov 20 13:56:28 2025 GMT Subject: CN=c9690612-31d9-4762-907c-a7d81a92d442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:9b:c3:8e:6f:01:ad:58:be:84:b3:49:a5: bc:fb:8e:8e:ff:90:d1:8e:b3:e0:fa:ff:bb:da:e2: e9:48:54:60:1e:c3:d1:cc:8f:1d:f2:38:13:23:cf: cb:58:ff:64:74:7c:f3:d3:7e:83:4e:10:6f:00:67: 27:a2:71:07:1e:ac:66:2b:fa:93:89:18:3b:50:ed: d5:c4:21:65:73:0a:3b:3a:ea:04:04:62:ed:36:16: ff:6f:eb:2b:bc:af:42:1f:40:0f:5c:63:77:97:02: 9b:d9:7d:21:04:37:d7:ca:f5:fd:a4:17:a8:6f:9d: 70:74:ce:e9:a9:7d:b7:ad:ce:44:63:cd:24:fa:a9: 0a:97:a5:9b:04:1a:4e:41:33:1c:8c:dd:bf:a9:0e: 30:70:00:86:15:47:b8:42:5c:c7:fa:cc:cd:8b:ce: 70:dc:a6:1d:f4:51:da:06:33:bf:59:04:83:3e:58: f6:92:bc:0a:3d:05:91:88:a4:23:10:a9:29:c8:5f: 4c:37:a2:98:70:fc:5f:2d:8f:c6:f8:da:b6:96:0f: 9e:6c:90:39:38:8d:be:b4:ef:d5:d1:15:51:c8:91: ea:81:65:97:ad:1a:60:6b:9b:eb:69:ca:05:e1:49: 51:c3:8c:d4:20:47:48:b6:5a:95:db:fe:0f:9e:95: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:86:0C:37:79:EC:D5:47:E4:38:D2:FE:10:03:1C:DE:5F:4B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ea93b4be-e82c-3dc0-8651-f6e5a5642082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0b:aa:8c:45:e4:0f:2b:0c:ff:9a:46:99:fd:ad:a1:3c:86: fa:58:13:06:46:0a:2e:8f:b5:7e:2a:f2:db:35:de:d8:ed:27: 6e:98:04:96:f1:d7:f1:0d:34:4a:24:10:75:36:30:67:4b:31: 63:bc:6e:85:37:95:b5:1f:dc:43:1f:3e:eb:3f:0a:d7:68:17: c8:ba:50:8b:b6:36:f7:32:bf:cc:fd:6f:88:49:1c:9e:2a:48: f7:f7:b0:73:86:22:9a:4d:00:74:10:e0:e0:52:fd:2f:45:30: 97:c9:b9:d1:c3:94:7b:e1:fc:41:c7:55:d4:be:0b:83:3f:88: d5:3d:61:a3:4c:9b:4c:eb:aa:3c:78:aa:f8:a7:63:ff:00:9b: a2:8a:7a:47:46:c0:f2:b0:b7:c9:68:41:8b:b4:cc:e7:5d:b2: 75:a6:37:75:42:c5:c0:39:b1:ff:09:80:e0:81:ce:d7:13:08: 0a:f1:79:2e:06:f4:a9:46:08:7a:af:b0:10:81:98:ab:7a:3a: 12:a1:9f:52:e8:75:d4:93:7f:ff:2e:b1:15:80:71:d3:0c:11: 98:c7:33:d2:ed:f8:47:83:04:7c:98:70:27:df:11:83:89:10: 38:d9:ee:b4:65:44:04:df:ac:b9:2d:8b:c9:e7:e6:e6:01:e5: 83:50:c3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7xGQRetMdNHa7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYyOFoXDTI1MTEyMDEzNTYyOFowLzEtMCsGA1UEAxMk Yzk2OTA2MTItMzFkOS00NzYyLTkwN2MtYTdkODFhOTJkNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t6bw45vAa1YvoSzSaW8+46O/5DRjrPg+v+7 2uLpSFRgHsPRzI8d8jgTI8/LWP9kdHzz036DThBvAGcnonEHHqxmK/qTiRg7UO3V xCFlcwo7OuoEBGLtNhb/b+srvK9CH0APXGN3lwKb2X0hBDfXyvX9pBeob51wdM7p qX23rc5EY80k+qkKl6WbBBpOQTMcjN2/qQ4wcACGFUe4QlzH+szNi85w3KYd9FHa BjO/WQSDPlj2krwKPQWRiKQjEKkpyF9MN6KYcPxfLY/G+Nq2lg+ebJA5OI2+tO/V 0RVRyJHqgWWXrRpga5vracoF4UlRw4zUIEdItlqV2/4PnpUz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF5hgw3eezVR+Q40v4QAxzeX0sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWE5M2I0YmUtZTgyYy0z ZGMwLTg2NTEtZjZlNWE1NjQyMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcLqoxF5A8rDP+aRpn9raE8hvpYEwZGCi6PtX4q8ts13tjtJ26YBJbx 1/ENNEokEHU2MGdLMWO8boU3lbUf3EMfPus/CtdoF8i6UIu2Nvcyv8z9b4hJHJ4q SPf3sHOGIppNAHQQ4OBS/S9FMJfJudHDlHvh/EHHVdS+C4M/iNU9YaNMm0zrqjx4 qvinY/8Am6KKekdGwPKwt8loQYu0zOddsnWmN3VCxcA5sf8JgOCBztcTCArxeS4G 9KlGCHqvsBCBmKt6OhKhn1LoddSTf/8usRWAcdMMEZjHM9Lt+EeDBHyYcCffEYOJ EDjZ7rRlRATfrLkti8nn5uYB5YNQw0s= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:50 2025 by rpki-client