$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa File: 08b29b97-2a8a-345b-8711-2abeefec3c7d.roa (raw, json) Hash identifier: QnYApTadJwoMoH46efKltYdOXU9evN6GHScNQM9yU70= Subject key identifier: 42:74:7A:1E:A5:E6:E7:B3:74:D1:C8:C6:1E:CA:9F:EB:D7:AC:EB:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43625BC7999D6C4AB37E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa Signing time: Tue 26 Aug 2025 22:56:03 +0000 ROA not before: Tue 26 Aug 2025 22:56:03 +0000 ROA not after: Mon 24 Nov 2025 23:56:03 +0000 asID: 31898 IP address blocks: 168.107.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:62:5b:c7:99:9d:6c:4a:b3:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:03 2025 GMT Not After : Nov 24 23:56:03 2025 GMT Subject: CN=3782affe-8188-4556-9304-67e86aa6207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:77:0e:69:a2:68:49:96:6c:d8:c4:1b:da: 52:5e:e4:f1:cf:ab:c0:dc:2e:93:83:29:16:bc:df: 5e:c0:a5:84:95:f1:c3:9e:3e:99:16:03:20:7a:e0: 03:ea:9d:a2:c2:1b:62:be:31:50:31:53:c6:5b:c5: 14:77:91:97:b9:75:c1:dc:f4:1f:60:89:b0:db:56: 48:4d:10:9c:a6:22:6b:52:47:18:19:74:af:64:e6: 69:aa:f6:1c:73:51:14:98:86:25:4d:1b:1e:58:20: 18:45:36:7e:c4:22:70:a0:a5:35:8d:50:7e:37:14: 83:3e:f9:7d:d3:22:9e:dd:6d:c6:8c:3e:34:b3:7c: de:06:0c:ce:15:ac:17:55:aa:6b:03:ad:89:8a:2b: 40:d3:79:3a:b7:e2:c9:32:bd:97:81:ce:a4:b6:b0: e0:d5:1e:ee:01:97:e0:e1:b9:c2:64:f9:7f:a7:3a: 8b:26:15:c4:04:02:d2:66:6c:3b:31:69:80:e3:bb: 9d:6a:80:b9:11:62:28:58:37:20:30:ff:b3:6e:e9: 05:f6:12:69:cf:76:ff:1e:a4:38:d5:84:5a:30:da: 8f:31:4f:bc:d1:36:8e:5a:9b:ea:8f:6d:d3:76:ef: a4:41:48:6e:5e:ee:d4:92:a2:90:e8:aa:53:a9:ac: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:74:7A:1E:A5:E6:E7:B3:74:D1:C8:C6:1E:CA:9F:EB:D7:AC:EB:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1b:65:b8:98:81:7e:91:e5:38:97:4b:8d:ad:92:75:29:ca: 5d:64:77:d2:f6:8e:c8:d7:8f:a2:d8:02:22:03:b7:80:40:cc: 70:ed:f5:d9:5c:22:5a:ba:55:91:9b:48:20:be:df:51:ef:57: 55:c1:0e:27:9c:72:91:c6:ee:df:a6:ab:7e:6d:56:c1:77:a1: 8a:8d:2d:db:22:6f:9c:67:72:1a:c3:5d:92:3c:67:8b:29:0f: 52:a4:e8:18:2f:31:a7:69:1d:16:e9:7c:68:60:d6:ae:27:fe: 6d:4b:49:87:91:28:f6:91:72:1b:53:cb:b7:63:87:56:96:d4: b7:22:03:91:88:4a:e5:c0:33:07:34:d6:b0:c8:c0:2b:34:c3: fb:41:46:c6:7a:36:53:1d:40:be:5b:12:c5:60:be:82:b3:c1: b6:93:e2:21:9d:c9:7d:8d:09:42:6f:2f:c3:74:a2:49:dc:36: e8:9a:c1:15:97:67:95:26:a4:c2:bf:02:84:44:07:41:9f:fb: e4:b9:8e:82:6f:a3:a4:cc:20:59:4f:c8:38:1a:c7:38:ca:dc: 5d:ab:51:23:de:9f:5a:37:9d:9e:47:c0:a5:61:b7:9a:01:42: 9d:98:33:dd:31:ce:f8:04:6d:4f:d0:43:12:b9:46:aa:a0:8b: f4:93:18:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q2Jbx5mdbEqzfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTYwM1oXDTI1MTEyNDIzNTYwM1owLzEtMCsGA1UEAxMk Mzc4MmFmZmUtODE4OC00NTU2LTkzMDQtNjdlODZhYTYyMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3B3DmmiaEmWbNjEG9pSXuTxz6vA3C6TgykW vN9ewKWElfHDnj6ZFgMgeuAD6p2iwhtivjFQMVPGW8UUd5GXuXXB3PQfYImw21ZI TRCcpiJrUkcYGXSvZOZpqvYcc1EUmIYlTRseWCAYRTZ+xCJwoKU1jVB+NxSDPvl9 0yKe3W3GjD40s3zeBgzOFawXVaprA62JiitA03k6t+LJMr2Xgc6ktrDg1R7uAZfg 4bnCZPl/pzqLJhXEBALSZmw7MWmA47udaoC5EWIoWDcgMP+zbukF9hJpz3b/HqQ4 1YRaMNqPMU+80TaOWpvqj23Tdu+kQUhuXu7UkqKQ6KpTqayPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ0eh6l5uezdNHIxh7Kn+vXrOsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDhiMjliOTctMmE4YS0z NDViLTg3MTEtMmFiZWVmZWMzYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0bZbiYgX6R5TiXS42tknUpyl1kd9L2jsjXj6LYAiIDt4BAzHDt9dlc Ilq6VZGbSCC+31HvV1XBDieccpHG7t+mq35tVsF3oYqNLdsib5xnchrDXZI8Z4sp D1Kk6BgvMadpHRbpfGhg1q4n/m1LSYeRKPaRchtTy7djh1aW1LciA5GISuXAMwc0 1rDIwCs0w/tBRsZ6NlMdQL5bEsVgvoKzwbaT4iGdyX2NCUJvL8N0okncNuiawRWX Z5UmpMK/AoREB0Gf++S5joJvo6TMIFlPyDgaxzjK3F2rUSPen1o3nZ5HwKVht5oB Qp2YM90xzvgEbU/QQxK5Rqqgi/STGAo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:04 2025 by rpki-client