$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0647350-4a6b-3898-b256-a8e6d6293d5e.roa File: f0647350-4a6b-3898-b256-a8e6d6293d5e.roa (raw, json) Hash identifier: SAFQLEwMOq5/ckOdW882+gmSLXlVFyTivu1PtlVa0N8= Subject key identifier: 25:74:CA:43:F0:0B:4F:D4:FD:FE:72:5A:F8:4D:91:1D:4E:55:FD:D3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A813A285528AF68D4C400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0647350-4a6b-3898-b256-a8e6d6293d5e.roa Signing time: Thu 21 Aug 2025 13:08:47 +0000 ROA not before: Thu 21 Aug 2025 13:08:47 +0000 ROA not after: Wed 19 Nov 2025 14:08:47 +0000 asID: 31898 IP address blocks: 192.9.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:81:3a:28:55:28:af:68:d4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:47 2025 GMT Not After : Nov 19 14:08:47 2025 GMT Subject: CN=12262cd5-c358-450d-bd3b-00dad3ff743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:2e:62:b9:98:42:2a:f5:3c:31:b9:d3:dd: ee:db:c5:22:e2:b7:bf:71:f8:99:50:d1:1a:fb:64: 9b:eb:46:4a:b4:47:a4:00:34:73:30:60:00:a8:2a: b4:fd:16:51:6c:38:35:f8:13:93:47:c5:12:00:89: d6:c7:ca:38:0f:33:a5:44:67:7b:63:01:56:45:1c: 63:19:bc:55:6d:57:dd:49:d3:c5:12:22:4c:c8:68: 03:38:84:4a:89:b2:94:65:9e:ad:8b:e3:e9:61:7d: da:94:4b:91:60:fb:25:f2:b9:30:7f:81:03:14:28: 41:21:fc:41:6b:b3:86:8a:0c:b3:d4:77:b3:92:be: 6c:c9:39:17:9d:cf:15:79:3d:15:97:4d:ba:a0:f5: dd:0c:e7:9b:4b:7e:01:da:92:36:57:f9:13:95:f3: 69:21:72:a3:92:56:da:14:ff:32:85:78:d1:60:dd: c3:67:5c:1b:83:30:d7:f4:09:82:2b:a2:1b:88:75: 32:3b:5d:88:02:07:fb:47:aa:bb:77:d1:f0:d1:91: 7a:6a:0a:12:6c:09:e1:a2:5c:27:cf:47:1f:07:32: 0b:56:34:b2:58:90:3c:2b:b6:9e:78:e8:e5:09:e4: c4:6b:03:56:5d:1c:00:61:7f:9d:8e:6d:ae:95:cf: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:CA:43:F0:0B:4F:D4:FD:FE:72:5A:F8:4D:91:1D:4E:55:FD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0647350-4a6b-3898-b256-a8e6d6293d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.9.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a1:6b:25:b3:21:b7:9a:4b:a0:8e:1a:13:b5:4a:8e:b5:b2: e0:1b:4e:e4:ab:43:0e:bd:69:37:e4:04:78:68:26:62:14:a7: d3:f8:ea:ae:89:77:33:61:49:f6:ac:19:6f:42:86:08:b2:8e: b3:63:91:09:7d:18:a3:d4:1d:40:3e:85:51:8c:c3:78:b3:04: 98:c7:f1:68:61:65:1c:4e:f5:63:ce:1d:7d:04:7d:af:eb:fc: 1a:c0:07:25:ac:77:e0:20:77:bd:38:de:9a:20:d9:1f:41:58: 79:33:09:ad:69:eb:43:2b:9c:54:83:4c:5f:10:ce:68:9a:86: ee:a9:0b:02:43:99:1f:54:b6:8a:e7:3e:19:26:79:cb:c0:9a: ce:6d:2f:8c:0f:b6:45:f7:37:5f:3c:e6:35:d6:21:27:6b:4e: 11:8c:25:ef:bd:90:04:e1:ff:5d:db:49:1d:b1:ed:82:82:1c: 83:da:2a:ce:5a:8f:58:7f:c0:f1:3b:58:de:a3:2c:ef:78:1a: 15:74:5d:31:4b:01:7e:29:99:41:36:c5:da:c7:9c:cc:e9:ee: 93:a1:15:aa:e1:66:2c:a5:c8:81:1b:d7:9f:13:33:67:8e:92: 38:8d:ba:6c:fa:c7:f2:af:a0:62:70:24:23:9d:81:3c:5f:46: 2f:4a:2a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKoE6KFUor2jUxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDg0N1oXDTI1MTExOTE0MDg0N1owLzEtMCsGA1UEAxMk MTIyNjJjZDUtYzM1OC00NTBkLWJkM2ItMDBkYWQzZmY3NDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRUuYrmYQir1PDG5093u28Ui4re/cfiZUNEa +2Sb60ZKtEekADRzMGAAqCq0/RZRbDg1+BOTR8USAInWx8o4DzOlRGd7YwFWRRxj GbxVbVfdSdPFEiJMyGgDOIRKibKUZZ6ti+PpYX3alEuRYPsl8rkwf4EDFChBIfxB a7OGigyz1Hezkr5syTkXnc8VeT0Vl026oPXdDOebS34B2pI2V/kTlfNpIXKjklba FP8yhXjRYN3DZ1wbgzDX9AmCK6IbiHUyO12IAgf7R6q7d9Hw0ZF6agoSbAnholwn z0cfBzILVjSyWJA8K7aeeOjlCeTEawNWXRwAYX+djm2ulc/CXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV0ykPwC0/U/f5yWvhNkR1OVf3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjA2NDczNTAtNGE2Yi0z ODk4LWIyNTYtYThlNmQ2MjkzZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqhayWzIbeaS6COGhO1So61suAbTuSrQw69aTfkBHhoJmIUp9P46q6J dzNhSfasGW9ChgiyjrNjkQl9GKPUHUA+hVGMw3izBJjH8WhhZRxO9WPOHX0Efa/r /BrAByWsd+Agd7043pog2R9BWHkzCa1p60MrnFSDTF8Qzmiahu6pCwJDmR9Utorn PhkmecvAms5tL4wPtkX3N1885jXWISdrThGMJe+9kATh/13bSR2x7YKCHIPaKs5a j1h/wPE7WN6jLO94GhV0XTFLAX4pmUE2xdrHnMzp7pOhFarhZiylyIEb158TM2eO kjiNumz6x/KvoGJwJCOdgTxfRi9KKvE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:57 2025 by rpki-client