$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa File: f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa (raw, json) Hash identifier: l3bqUbGFEvFC7JPW4NP/H/Tu32mpw6fUMEFD5HZLSzc= Subject key identifier: ED:02:60:6E:89:49:C8:A9:FE:87:07:E9:29:58:04:B2:8D:35:EA:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0160C20DD100A30DDC31600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa Signing time: Fri 22 Aug 2025 05:39:11 +0000 ROA not before: Fri 22 Aug 2025 05:39:11 +0000 ROA not after: Thu 20 Nov 2025 06:39:11 +0000 asID: 31898 IP address blocks: 207.135.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:16:0c:20:dd:10:0a:30:dd:c3:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:39:11 2025 GMT Not After : Nov 20 06:39:11 2025 GMT Subject: CN=ef00ca55-a8fe-4bca-8512-e7f4a4e0b8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:c3:31:0d:a3:93:f2:21:fb:4b:c6:19:79: d1:61:4d:fc:49:64:17:9f:8c:1d:d8:6a:31:94:51: 6b:a0:06:67:27:11:69:cc:e2:55:9b:67:21:57:4c: d2:37:76:91:a5:dc:96:89:2e:0b:9f:c7:e6:b9:0d: 59:1d:4f:68:80:f3:5f:91:7d:16:e2:42:58:a6:de: ac:8f:95:48:23:d4:71:af:89:ca:41:21:9c:e9:f8: c3:d7:e9:b0:c4:76:7b:4c:01:55:21:6a:a9:c4:da: 4f:72:0e:02:ed:9f:23:ea:f9:fd:cd:48:f3:0c:d2: ac:54:95:68:de:8a:38:46:87:80:94:ad:db:32:3b: 9a:08:9f:1f:78:a5:c3:68:14:c6:fc:d9:e5:29:bd: d4:f4:df:d3:d5:2b:41:dc:b3:7c:dd:db:63:5f:55: 77:40:0d:de:04:aa:f8:76:d8:9c:ca:05:83:43:a6: f0:c5:87:5f:54:fc:11:33:6f:c4:5e:ed:e2:d7:b0: df:ea:59:b0:f6:85:12:52:73:02:61:8d:41:9c:a1: 73:0d:08:ef:aa:d7:aa:f4:2b:85:a3:ba:fe:4d:11: e4:3a:85:f6:17:1e:44:3a:a1:a0:ce:70:d8:d5:d1: 98:4d:bb:ce:5a:b0:40:29:27:ad:3a:82:49:33:63: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:60:6E:89:49:C8:A9:FE:87:07:E9:29:58:04:B2:8D:35:EA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ea5235-8f2a-3f42-9519-2c9a34ff6168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:45:e9:b2:9d:82:79:ea:2b:2d:1d:f3:d2:ac:93:53:28:2b: 0b:68:55:37:87:eb:28:d2:91:2f:d1:ab:78:db:ae:05:bf:ef: aa:7e:47:6d:44:a7:94:f1:77:88:bc:b9:45:8d:30:01:07:af: 59:d2:3b:e1:58:d5:c0:c9:88:7a:9e:e0:d1:15:de:77:82:99: 2e:42:12:b7:c8:a8:7e:2a:cb:92:ce:b7:27:c7:5d:75:06:db: 6f:0b:5d:cb:93:6b:59:7d:29:c2:1c:44:6c:13:ea:70:6e:61: a0:5e:72:fc:e5:f4:3b:c6:e5:21:5f:16:7b:22:8d:4b:af:cf: 41:12:d3:23:a8:b4:09:7d:cf:bb:34:72:25:b5:4a:81:77:6f: 09:82:e2:ba:77:c3:ce:70:9f:69:20:08:4b:1c:22:92:b2:aa: 79:ae:4a:4b:80:a1:5d:ec:f5:fc:9c:6d:78:0b:b3:bd:41:6f: be:a2:45:72:71:fe:21:ff:4a:38:23:4e:bd:7c:5b:c7:72:3f: dd:5d:22:05:b8:5c:fa:2e:2f:d9:1a:2b:94:76:4c:ae:62:dc: 0f:2d:cb:08:0d:b9:02:4b:f7:74:27:fd:c0:0c:b0:a6:e3:25: aa:e0:77:ce:d9:9c:92:95:4e:1b:82:51:a8:cc:cd:70:af:a7: f3:65:3d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFgwg3RAKMN3DFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzkxMVoXDTI1MTEyMDA2MzkxMVowLzEtMCsGA1UEAxMk ZWYwMGNhNTUtYThmZS00YmNhLTg1MTItZTdmNGE0ZTBiOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDnDMQ2jk/Ih+0vGGXnRYU38SWQXn4wd2Gox lFFroAZnJxFpzOJVm2chV0zSN3aRpdyWiS4Ln8fmuQ1ZHU9ogPNfkX0W4kJYpt6s j5VII9Rxr4nKQSGc6fjD1+mwxHZ7TAFVIWqpxNpPcg4C7Z8j6vn9zUjzDNKsVJVo 3oo4RoeAlK3bMjuaCJ8feKXDaBTG/NnlKb3U9N/T1StB3LN83dtjX1V3QA3eBKr4 dticygWDQ6bwxYdfVPwRM2/EXu3i17Df6lmw9oUSUnMCYY1BnKFzDQjvqteq9CuF o7r+TRHkOoX2Fx5EOqGgznDY1dGYTbvOWrBAKSetOoJJM2NSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0CYG6JScip/ocH6SlYBLKNNernMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjJlYTUyMzUtOGYyYS0z ZjQyLTk1MTktMmM5YTM0ZmY2MTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRF6bKdgnnqKy0d89Ksk1MoKwtoVTeH6yjSkS/Rq3jbrgW/76p+R21E p5Txd4i8uUWNMAEHr1nSO+FY1cDJiHqe4NEV3neCmS5CErfIqH4qy5LOtyfHXXUG 228LXcuTa1l9KcIcRGwT6nBuYaBecvzl9DvG5SFfFnsijUuvz0ES0yOotAl9z7s0 ciW1SoF3bwmC4rp3w85wn2kgCEscIpKyqnmuSkuAoV3s9fycbXgLs71Bb76iRXJx /iH/SjgjTr18W8dyP91dIgW4XPouL9kaK5R2TK5i3A8tywgNuQJL93Qn/cAMsKbj Jargd87ZnJKVThuCUajMzXCvp/NlPc8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:10 2025 by rpki-client