$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec2fb97b-5716-3708-8e97-ff329aaf1b2c.roa File: ec2fb97b-5716-3708-8e97-ff329aaf1b2c.roa (raw, json) Hash identifier: +jLQDrYB7ATLJnjHdvGpt4emOo9L/XJD7sTOs3QyBgo= Subject key identifier: 77:5B:37:CC:A5:AD:76:6F:B7:DC:C3:01:B1:EB:28:50:36:7F:6C:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EF0580FB079CF754A7B6D0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec2fb97b-5716-3708-8e97-ff329aaf1b2c.roa Signing time: Fri 22 Aug 2025 12:56:22 +0000 ROA not before: Fri 22 Aug 2025 12:56:22 +0000 ROA not after: Thu 20 Nov 2025 13:56:22 +0000 asID: 31898 IP address blocks: 170.9.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ef:05:80:fb:07:9c:f7:54:a7:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:22 2025 GMT Not After : Nov 20 13:56:22 2025 GMT Subject: CN=aa2f5ddc-0f84-47c9-a4f8-51b537a7ba19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:64:98:66:8a:18:d2:df:58:60:8b:fe:7c: 87:e8:cd:0d:55:2e:45:ec:c1:1c:f6:6c:73:b7:ca: e0:c7:6b:b4:e8:b2:43:ea:ea:16:3f:52:df:85:9a: c6:1e:4c:68:98:a6:fd:30:bf:0c:56:26:77:ed:54: c7:c9:c9:b0:c2:b4:85:6a:b4:74:fa:c6:52:c1:f6: d6:df:9a:5a:90:4a:70:ce:a7:89:7b:dd:5b:53:6f: 44:86:45:6e:48:a7:44:72:1f:5a:64:c0:10:8b:e7: 50:b1:ed:76:40:f1:e3:56:a0:36:34:12:5f:37:84: ca:ef:51:de:43:80:c0:12:f7:b7:51:ef:a1:fa:5b: d1:7d:6f:e1:40:bd:86:18:b6:92:03:c4:9c:fa:85: 20:4c:0a:29:d7:e5:e4:c6:a3:31:d0:fe:2e:fc:9e: 67:dc:23:a3:b6:43:a7:ba:c1:e2:52:c9:95:d3:bf: ee:15:94:0f:12:73:df:85:63:a0:97:ae:05:fa:a0: 62:3a:db:98:20:bf:1f:c2:7c:2d:87:8f:1c:a2:c5: eb:bd:aa:92:38:bc:1d:9d:f6:c8:d1:4c:a0:2d:42: ba:9f:d1:fa:80:65:38:2f:e0:be:db:53:20:0d:f8: 38:52:d1:53:fd:37:22:27:1d:cd:41:44:d3:10:f4: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5B:37:CC:A5:AD:76:6F:B7:DC:C3:01:B1:EB:28:50:36:7F:6C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec2fb97b-5716-3708-8e97-ff329aaf1b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e1:2e:c7:6b:22:2d:43:a8:c3:c8:3f:ca:70:b6:b9:b7:16: 61:8c:dd:11:cc:aa:52:02:51:1d:ab:88:c2:07:4d:1c:db:0a: 6e:12:fd:ab:38:f2:5a:82:97:88:33:a4:eb:ad:1d:9b:ef:af: 0c:9a:26:d6:f9:d2:24:2c:85:b4:03:e3:74:3a:8d:c8:36:09: 45:30:83:de:ed:3c:2a:07:42:6d:84:50:1d:9c:b0:56:64:1c: da:7a:f9:06:ff:3e:f7:5a:2e:99:af:9b:7e:e9:5c:1c:c7:04: 57:b4:49:14:f4:26:13:45:09:bd:c7:5a:20:1f:5c:69:e1:12: 38:2e:6f:b2:c2:6f:b3:95:54:6e:2f:54:68:99:ad:9c:76:e5: 82:8e:e1:62:9d:e4:68:df:12:db:74:6e:b8:74:00:0b:7f:37: 39:ed:ac:b5:ca:74:1b:00:c6:d6:35:f6:73:f3:53:f5:cb:bf: c6:4d:7e:6a:0e:31:b8:47:5d:b3:80:e2:d3:2c:a0:40:b6:ae: 62:cc:a6:a1:1f:3e:3a:d6:a1:6b:d9:d5:58:86:6c:d2:98:0d: 24:c4:b9:85:69:82:53:78:67:72:55:d4:4c:2c:3b:44:a9:0d: b1:a1:d5:39:c2:70:0c:19:05:34:fc:b0:37:6e:2b:88:50:3d: e7:ab:ff:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7wWA+wec91SnttAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYyMloXDTI1MTEyMDEzNTYyMlowLzEtMCsGA1UEAxMk YWEyZjVkZGMtMGY4NC00N2M5LWE0ZjgtNTFiNTM3YTdiYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0JkmGaKGNLfWGCL/nyH6M0NVS5F7MEc9mxz t8rgx2u06LJD6uoWP1LfhZrGHkxomKb9ML8MViZ37VTHycmwwrSFarR0+sZSwfbW 35pakEpwzqeJe91bU29EhkVuSKdEch9aZMAQi+dQse12QPHjVqA2NBJfN4TK71He Q4DAEve3Ue+h+lvRfW/hQL2GGLaSA8Sc+oUgTAop1+XkxqMx0P4u/J5n3COjtkOn usHiUsmV07/uFZQPEnPfhWOgl64F+qBiOtuYIL8fwnwth48cosXrvaqSOLwdnfbI 0UygLUK6n9H6gGU4L+C+21MgDfg4UtFT/TciJx3NQUTTEPTj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdbN8ylrXZvt9zDAbHrKFA2f2yOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWMyZmI5N2ItNTcxNi0z NzA4LThlOTctZmYzMjlhYWYxYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqgkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPhLsdrIi1DqMPIP8pwtrm3FmGM3RHMqlICUR2riMIHTRzbCm4S/as4 8lqCl4gzpOutHZvvrwyaJtb50iQshbQD43Q6jcg2CUUwg97tPCoHQm2EUB2csFZk HNp6+Qb/PvdaLpmvm37pXBzHBFe0SRT0JhNFCb3HWiAfXGnhEjgub7LCb7OVVG4v VGiZrZx25YKO4WKd5GjfEtt0brh0AAt/NzntrLXKdBsAxtY19nPzU/XLv8ZNfmoO MbhHXbOA4tMsoEC2rmLMpqEfPjrWoWvZ1ViGbNKYDSTEuYVpglN4Z3JV1EwsO0Sp DbGh1TnCcAwZBTT8sDduK4hQPeer/8w= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:09 2025 by rpki-client