$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fca0dcf4-8cce-3249-b438-60c2b7f97c07.roa File: fca0dcf4-8cce-3249-b438-60c2b7f97c07.roa (raw, json) Hash identifier: 9/dvaUgu8vKc9Wu+PNsABdQnGE948SubEmYuNRtk1ow= Subject key identifier: AB:F2:BF:67:55:72:E2:34:14:DB:0B:BB:3A:3C:73:F9:63:9E:6B:9A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF5595E139139428B6818560 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fca0dcf4-8cce-3249-b438-60c2b7f97c07.roa Signing time: Thu 21 Aug 2025 23:11:24 +0000 ROA not before: Thu 21 Aug 2025 23:11:24 +0000 ROA not after: Thu 20 Nov 2025 00:11:24 +0000 asID: 31898 IP address blocks: 132.145.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:95:e1:39:13:94:28:b6:81:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:24 2025 GMT Not After : Nov 20 00:11:24 2025 GMT Subject: CN=d643d9b7-c509-4dd7-957a-cd77e9ffc569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:33:0b:43:64:8f:44:ce:29:e3:bc:f3:b2: 30:83:28:ab:e6:69:3b:5f:98:10:8f:65:83:15:b2: cd:45:77:8a:61:f1:26:c0:23:ed:3e:60:63:3c:ea: 8e:2e:3e:68:f4:78:a5:33:1c:76:2b:92:8e:df:d6: 93:a3:c0:23:a6:41:56:d0:75:73:bb:10:1d:44:e9: b5:09:cb:5e:54:8b:6e:a0:e8:cd:7d:d8:75:1b:48: 49:01:29:04:e1:6c:00:7b:6e:d5:91:0a:db:52:55: 8a:86:08:1a:0d:27:98:50:57:87:2b:44:72:db:3b: 2d:e6:c2:33:f0:a8:8a:e1:bf:26:ed:97:b6:31:54: 25:47:8b:92:14:fe:ee:cb:10:d1:76:79:87:e2:2e: fb:f9:4e:34:e8:6a:b4:c2:26:cb:5c:b1:49:90:9b: c4:66:de:4c:9f:6b:05:2f:0f:04:a8:c3:16:aa:7e: 36:fc:db:3b:5b:e3:ab:1a:8c:32:ac:44:90:c1:57: 5e:f5:28:ca:67:6e:ff:2c:90:46:6b:42:18:c3:9a: 76:45:68:e9:cd:0a:77:93:34:62:9a:4b:20:8f:b5: 32:dc:c1:b1:03:23:9b:13:7b:02:cc:04:f0:15:84: 40:c6:a8:10:c3:ce:5b:fb:f9:f9:76:ca:1b:b7:27: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F2:BF:67:55:72:E2:34:14:DB:0B:BB:3A:3C:73:F9:63:9E:6B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fca0dcf4-8cce-3249-b438-60c2b7f97c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fc:7f:e8:76:ae:53:c5:79:ec:5a:76:bc:3e:3b:ca:31:de: c8:1d:e9:fb:c2:29:1f:4b:ba:24:9f:ad:69:bc:9e:6c:2e:25: 29:48:fe:88:ea:3b:7b:6c:53:68:f8:fb:5e:8a:e2:39:3e:f7: 92:95:0a:b2:b3:fe:2a:90:45:b5:7c:e6:db:33:84:27:ed:88: 0d:dd:7b:93:70:7f:67:2d:2d:b8:80:6f:44:96:89:cb:b2:b4: 54:0e:13:3a:a2:7f:d1:35:d7:a9:2e:53:11:92:ff:c7:43:80: 6e:98:96:2c:6f:5f:ab:3a:75:7e:5f:4d:6e:76:3c:0b:e1:b9: c2:a5:01:b8:85:a8:fa:4c:71:fc:03:02:a5:5b:24:e1:02:f8: 64:fe:1d:f0:59:8b:af:2b:98:4f:01:56:e8:f4:f2:25:fc:ef: 14:0f:62:99:80:e7:dd:3d:70:3c:2c:25:38:0d:db:3a:ba:44: 59:42:b5:0e:5d:7c:65:78:f0:1c:8f:08:22:f4:eb:03:b8:1b: ed:63:d1:c0:b8:0e:d3:4b:25:0a:cf:e9:f9:7d:2c:b7:5d:47: f1:ed:57:6e:b3:7a:74:5f:43:ee:39:08:e3:0d:2b:c2:ea:8e: 57:ae:f4:8d:6c:4b:8a:50:70:cf:3b:03:2c:3f:2b:20:78:f6: 01:3e:5c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVZXhOROUKLaBhWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEyNFoXDTI1MTEyMDAwMTEyNFowLzEtMCsGA1UEAxMk ZDY0M2Q5YjctYzUwOS00ZGQ3LTk1N2EtY2Q3N2U5ZmZjNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5czC0Nkj0TOKeO887Iwgyir5mk7X5gQj2WD FbLNRXeKYfEmwCPtPmBjPOqOLj5o9HilMxx2K5KO39aTo8AjpkFW0HVzuxAdROm1 CcteVItuoOjNfdh1G0hJASkE4WwAe27VkQrbUlWKhggaDSeYUFeHK0Ry2zst5sIz 8KiK4b8m7Ze2MVQlR4uSFP7uyxDRdnmH4i77+U406Gq0wibLXLFJkJvEZt5Mn2sF Lw8EqMMWqn42/Ns7W+OrGowyrESQwVde9SjKZ27/LJBGa0IYw5p2RWjpzQp3kzRi mksgj7Uy3MGxAyObE3sCzATwFYRAxqgQw85b+/n5dsobtydbAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvyv2dVcuI0FNsLuzo8c/ljnmuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmNhMGRjZjQtOGNjZS0z MjQ5LWI0MzgtNjBjMmI3Zjk3YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID8f+h2rlPFeexadrw+O8ox3sgd6fvCKR9LuiSfrWm8nmwuJSlI/ojq O3tsU2j4+16K4jk+95KVCrKz/iqQRbV85tszhCftiA3de5Nwf2ctLbiAb0SWicuy tFQOEzqif9E116kuUxGS/8dDgG6YlixvX6s6dX5fTW52PAvhucKlAbiFqPpMcfwD AqVbJOEC+GT+HfBZi68rmE8BVuj08iX87xQPYpmA5909cDwsJTgN2zq6RFlCtQ5d fGV48ByPCCL06wO4G+1j0cC4DtNLJQrP6fl9LLddR/HtV26zenRfQ+45COMNK8Lq jleu9I1sS4pQcM87Ayw/KyB49gE+XDM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:50 2025 by rpki-client