$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa File: ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa (raw, json) Hash identifier: BZhDhZqGX0xuQ8ftnMVFwUsViaaeWfBAyeiG11aWSw4= Subject key identifier: 05:79:A0:42:A5:71:10:B3:17:86:EB:AD:1D:43:13:42:B1:23:76:5D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF015E97E40DF75955DB0C800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa Signing time: Fri 22 Aug 2025 05:38:55 +0000 ROA not before: Fri 22 Aug 2025 05:38:55 +0000 ROA not after: Thu 20 Nov 2025 06:38:55 +0000 asID: 31898 IP address blocks: 207.127.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:15:e9:7e:40:df:75:95:5d:b0:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:38:55 2025 GMT Not After : Nov 20 06:38:55 2025 GMT Subject: CN=813f048c-6a94-4bd2-a595-40810278c6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:bf:d9:6f:11:db:2c:b4:a5:32:46:03:d5: 99:57:a5:c0:5b:aa:85:fc:ac:ae:da:8d:fa:89:e7: ea:1c:1d:9a:d9:7a:90:93:fd:41:65:7c:e6:04:e3: 95:9f:e3:5b:9a:38:8d:84:2d:96:b1:34:4f:18:34: d9:20:90:ce:76:bb:11:9c:2f:f1:e3:9d:e8:93:ea: f4:b9:1c:1d:86:1e:db:70:ca:e1:05:9b:57:f1:c2: 21:47:e9:b3:d6:74:67:b5:20:07:1a:15:0a:23:e1: 97:bf:8c:22:16:61:6c:bf:5b:d6:52:28:2d:89:75: 93:68:fc:84:2c:f2:b0:4c:2d:d2:f2:a3:26:92:7e: 50:cc:2b:37:76:0c:e4:7c:d2:1c:03:17:2c:8e:3c: 3f:d8:7e:36:73:a2:c8:7a:76:a7:21:1a:3d:7f:25: 4f:2b:db:49:b5:44:d2:f0:86:98:f0:d3:c7:9c:7b: 27:7a:13:2a:de:c8:34:cb:33:84:75:50:1f:6c:6a: e7:5f:aa:1b:00:6b:6d:bb:22:72:1c:9d:44:d0:99: b7:e5:9e:88:7c:10:6a:76:b3:02:c9:8e:4b:99:cf: 83:f9:e7:bb:fa:b0:9e:f8:dc:12:a5:7a:ad:05:69: f0:ef:a4:00:f7:1c:21:34:05:dd:ef:4f:f3:40:ac: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:79:A0:42:A5:71:10:B3:17:86:EB:AD:1D:43:13:42:B1:23:76:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ecd2aa38-ced5-33f7-912c-b1717d9e913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6e:45:13:6f:17:b2:f0:5d:e3:54:13:18:6d:cc:20:2c:a4: c4:c9:54:37:50:2e:04:18:79:2b:f1:1d:01:c0:f6:4c:bf:28: fa:9b:35:58:63:a1:d8:d0:e3:0c:a3:97:d3:14:3f:3b:09:6b: 24:75:38:3e:b0:3d:73:17:63:26:19:93:66:b8:f8:18:5e:b3: 9e:5b:12:0c:34:1d:88:f9:d2:07:47:88:de:c3:42:77:40:8c: bf:c5:02:4a:97:2f:08:0f:24:1c:1b:c3:e1:79:ff:3c:96:34: 0a:4d:4a:5f:28:64:31:fb:9b:98:9f:2b:5a:d0:16:db:bd:78: 7f:21:68:a0:c1:86:c5:4e:02:2f:86:8e:c4:b4:fa:d6:8a:96: 9d:b0:d6:9a:22:24:36:1d:ee:0a:0f:f3:a4:28:c3:38:10:0e: 42:74:60:68:8c:f4:88:1b:dc:2a:17:b5:9d:41:e1:ff:3b:20: 5b:24:7f:1e:a9:58:0d:ef:9a:cf:78:96:d4:23:c1:78:04:1f: 0d:b0:f6:16:8f:99:58:fb:4e:9e:ee:e2:00:8b:60:a3:26:c6: be:83:7a:a2:62:ed:ad:f5:e3:f8:ec:53:59:83:0c:fa:2f:4b: 91:fc:bf:9d:5e:e2:f6:ef:8a:43:a0:a3:33:88:62:90:05:d2: 8a:b6:81:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFel+QN91lV2wyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1Mzg1NVoXDTI1MTEyMDA2Mzg1NVowLzEtMCsGA1UEAxMk ODEzZjA0OGMtNmE5NC00YmQyLWE1OTUtNDA4MTAyNzhjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFC/2W8R2yy0pTJGA9WZV6XAW6qF/Kyu2o36 iefqHB2a2XqQk/1BZXzmBOOVn+NbmjiNhC2WsTRPGDTZIJDOdrsRnC/x453ok+r0 uRwdhh7bcMrhBZtX8cIhR+mz1nRntSAHGhUKI+GXv4wiFmFsv1vWUigtiXWTaPyE LPKwTC3S8qMmkn5QzCs3dgzkfNIcAxcsjjw/2H42c6LIenanIRo9fyVPK9tJtUTS 8IaY8NPHnHsnehMq3sg0yzOEdVAfbGrnX6obAGttuyJyHJ1E0Jm35Z6IfBBqdrMC yY5Lmc+D+ee7+rCe+NwSpXqtBWnw76QA9xwhNAXd70/zQKz/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV5oEKlcRCzF4brrR1DE0KxI3ZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNkMmFhMzgtY2VkNS0z M2Y3LTkxMmMtYjE3MTdkOWU5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz398MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGduRRNvF7LwXeNUExhtzCAspMTJVDdQLgQYeSvxHQHA9ky/KPqbNVhj odjQ4wyjl9MUPzsJayR1OD6wPXMXYyYZk2a4+Bhes55bEgw0HYj50gdHiN7DQndA jL/FAkqXLwgPJBwbw+F5/zyWNApNSl8oZDH7m5ifK1rQFtu9eH8haKDBhsVOAi+G jsS0+taKlp2w1poiJDYd7goP86QowzgQDkJ0YGiM9Igb3CoXtZ1B4f87IFskfx6p WA3vms94ltQjwXgEHw2w9haPmVj7Tp7u4gCLYKMmxr6DeqJi7a314/jsU1mDDPov S5H8v51e4vbvikOgozOIYpAF0oq2gUk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:16 2025 by rpki-client