$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa File: 19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa (raw, json) Hash identifier: Yrg3FA37sGgRlWfrK+zLV6Y4GyGnYVBtgOdgO2mQf/U= Subject key identifier: 50:CD:7D:F5:66:AE:53:DB:48:51:D8:01:21:38:20:B5:42:9B:5B:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C464722E25D858CA457DE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa Signing time: Mon 25 Aug 2025 08:16:56 +0000 ROA not before: Mon 25 Aug 2025 08:16:56 +0000 ROA not after: Sun 23 Nov 2025 09:16:56 +0000 asID: 31898 IP address blocks: 147.154.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:64:72:2e:25:d8:58:ca:45:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:16:56 2025 GMT Not After : Nov 23 09:16:56 2025 GMT Subject: CN=88235db3-3254-4ee4-ae06-87288e43c894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:8d:21:6f:57:06:c4:d8:28:53:5e:1c:3a: 26:8c:1d:aa:69:73:bf:02:72:1d:94:63:fd:dc:09: a5:cb:7f:16:0c:c6:07:c1:f0:d1:c9:74:a8:4e:09: 6b:89:5b:a1:ac:b6:ee:18:3c:14:d1:e5:84:52:02: b6:40:15:20:7d:d1:1f:6d:01:4e:fe:35:62:e7:a8: 95:1b:f6:22:c7:19:d9:2a:5e:1f:e0:0c:d1:a2:b5: 6b:a1:6a:90:4c:58:d3:4f:e2:ec:98:66:31:e3:f2: 52:bc:ba:18:3b:ac:1c:4c:af:0c:48:aa:c4:4d:bd: bb:04:85:0b:b9:fe:1e:81:58:48:33:24:9b:7b:b8: dd:34:bf:9f:18:65:f2:75:29:df:d9:45:2e:2d:44: 7b:8e:fe:0d:cd:25:99:91:02:ed:1c:34:ac:db:b6: 3a:d5:53:41:03:b9:83:7c:59:ff:87:77:d9:a3:a0: b8:a4:87:48:3a:3b:56:92:cb:6a:54:21:46:5b:80: c6:9d:53:f9:3b:94:89:13:e4:eb:15:52:e2:5f:96: 9a:01:69:4c:8d:6c:dd:04:d1:64:41:63:27:ee:c1: 04:da:c7:31:16:bb:fd:55:da:a6:99:f3:0d:2b:55: d1:da:e4:74:1d:b5:a9:b0:72:74:fe:a7:11:bd:4e: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CD:7D:F5:66:AE:53:DB:48:51:D8:01:21:38:20:B5:42:9B:5B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a2:c7:b3:77:32:d0:39:3f:17:6a:a6:71:fe:87:1a:bd:35: f0:01:9c:57:ef:cf:a5:18:15:2f:1c:6e:0b:c3:8b:90:e1:f2: 1c:90:13:cf:3e:ae:15:22:44:97:d9:13:c6:00:78:a0:92:1a: 0a:ea:21:cc:b9:0a:83:b0:bf:b1:81:71:1b:67:ed:c2:68:c7: ad:16:e1:59:18:d5:05:16:2d:c8:bd:91:0b:11:a0:a4:dc:3f: 57:d6:ac:a2:69:d1:e7:88:57:dc:cd:ad:ca:47:a8:e7:d6:01: bf:bc:e7:85:77:6a:c9:ec:01:2e:7d:f5:4c:45:c7:24:ac:d1: b1:23:39:bc:6f:df:f1:7c:3e:11:a1:ba:0c:85:f1:37:34:a8: b0:11:1c:9d:eb:28:30:bc:2e:e3:6d:3e:32:f6:92:20:74:58: f4:c8:c2:8e:4b:c6:b8:15:3d:34:13:59:ea:c9:bc:fb:1f:c2: 17:40:05:30:a5:27:81:33:33:2b:65:d0:91:e9:27:45:b3:60: ad:a0:d1:fe:4c:35:12:44:98:e4:2d:0c:6e:0c:8a:44:51:7a: 69:16:17:d2:92:05:9a:c3:8a:6b:e5:2b:dc:1e:5b:c5:c2:b0: 1b:b3:1e:94:0f:c9:39:38:6d:9b:24:72:f1:05:0f:80:af:f2: 45:e8:e1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xGRyLiXYWMpFfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTY1NloXDTI1MTEyMzA5MTY1NlowLzEtMCsGA1UEAxMk ODgyMzVkYjMtMzI1NC00ZWU0LWFlMDYtODcyODhlNDNjODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUqNIW9XBsTYKFNeHDomjB2qaXO/AnIdlGP9 3Amly38WDMYHwfDRyXSoTglriVuhrLbuGDwU0eWEUgK2QBUgfdEfbQFO/jVi56iV G/YixxnZKl4f4AzRorVroWqQTFjTT+LsmGYx4/JSvLoYO6wcTK8MSKrETb27BIUL uf4egVhIMySbe7jdNL+fGGXydSnf2UUuLUR7jv4NzSWZkQLtHDSs27Y61VNBA7mD fFn/h3fZo6C4pIdIOjtWkstqVCFGW4DGnVP5O5SJE+TrFVLiX5aaAWlMjWzdBNFk QWMn7sEE2scxFrv9VdqmmfMNK1XR2uR0HbWpsHJ0/qcRvU7fIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDNffVmrlPbSFHYASE4ILVCm1uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTk0MDRmYjAtMWM5ZS0z MGNjLWJiMmUtMjNhOWU2MzdmYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmix7N3MtA5PxdqpnH+hxq9NfABnFfvz6UYFS8cbgvDi5Dh8hyQE88+ rhUiRJfZE8YAeKCSGgrqIcy5CoOwv7GBcRtn7cJox60W4VkY1QUWLci9kQsRoKTc P1fWrKJp0eeIV9zNrcpHqOfWAb+854V3asnsAS599UxFxySs0bEjObxv3/F8PhGh ugyF8Tc0qLARHJ3rKDC8LuNtPjL2kiB0WPTIwo5LxrgVPTQTWerJvPsfwhdABTCl J4EzMytl0JHpJ0WzYK2g0f5MNRJEmOQtDG4MikRRemkWF9KSBZrDimvlK9weW8XC sBuzHpQPyTk4bZskcvEFD4Cv8kXo4aE= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:49 2025 by rpki-client