$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa File: 1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa (raw, json) Hash identifier: lpwaB+BX3fZcu+utCcsRgThvEsmY1TmF15A4O74N3hA= Subject key identifier: C5:D7:1B:03:44:25:A5:90:25:92:A4:A1:CD:F3:A4:AE:8A:B9:63:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFA195614597D4656967DDA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa Signing time: Mon 25 Aug 2025 19:43:54 +0000 ROA not before: Mon 25 Aug 2025 19:43:54 +0000 ROA not after: Sun 23 Nov 2025 20:43:54 +0000 asID: 31898 IP address blocks: 192.22.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:19:56:14:59:7d:46:56:96:7d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 19:43:54 2025 GMT Not After : Nov 23 20:43:54 2025 GMT Subject: CN=83ad1026-b3ae-4c30-b4bd-bf594655f630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:d7:40:1d:d8:e2:5d:ed:c6:3f:85:e3:67: 87:f4:32:f8:6d:d3:83:80:58:b8:bc:e7:78:fd:ad: 95:21:4d:a3:ed:51:93:39:b7:34:b7:eb:07:8f:75: eb:bb:81:7c:c1:9e:38:ea:d5:8a:c2:86:cc:f1:0b: e1:36:8f:d8:60:43:5f:b2:dd:b4:2a:8a:2d:6c:ee: 29:45:69:07:11:36:c8:8b:ea:eb:eb:dc:27:9a:e6: f8:f9:06:45:d3:33:31:3e:ca:fb:e6:b2:e1:a6:14: 75:b2:5c:2f:17:35:57:43:bf:57:f2:ea:3e:01:2d: 72:71:71:71:c8:d8:c3:60:35:9e:b6:4b:c8:3e:cb: ba:fb:44:59:33:8d:0a:b4:46:7e:a2:50:0f:89:40: 4d:8c:ad:52:7c:75:5e:04:3a:76:77:1b:4d:15:1d: 0f:4e:1c:70:d2:87:45:bc:54:a0:b5:0b:3b:86:52: 62:54:1a:24:18:9e:44:43:ee:99:9a:b3:fd:f5:d2: b8:40:b2:02:af:6c:bf:4c:1c:19:01:14:9a:98:65: bb:88:34:40:ae:93:aa:b8:45:4a:32:4a:79:75:39: fd:5d:16:76:00:fc:55:0b:3d:f9:1f:90:fc:36:63: d7:70:d8:56:f4:7a:dd:c8:5a:71:70:c7:8c:15:d8: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:1B:03:44:25:A5:90:25:92:A4:A1:CD:F3:A4:AE:8A:B9:63:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1db86590-5b3b-3de4-a07d-7fd149d4ac20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:85:f1:07:5a:a8:f2:47:34:a9:18:0e:25:0e:74:65:1e:11: fb:f4:d7:f0:46:f3:60:f7:28:f7:8d:61:76:16:31:db:64:d0: 19:2c:14:86:c2:eb:f8:49:87:ac:23:64:af:d8:a2:fc:1a:c0: 83:28:f3:38:46:1f:de:04:ba:ff:8d:40:a1:29:65:92:ca:cd: ed:a2:b8:1a:3a:23:dc:51:dc:4a:23:9b:f3:64:44:0e:a4:60: 21:2d:2b:e0:98:da:28:79:a8:5d:ab:ac:47:04:f7:b6:b6:4f: 4d:ff:ee:a5:3b:45:70:e1:1a:00:bf:c7:a2:67:d8:cb:3a:b8: e2:99:ea:7a:2e:f0:f2:ff:9f:b8:a8:60:2c:14:73:3e:1b:09: 62:63:9a:10:06:1e:61:37:21:95:e2:99:a7:46:6f:82:6d:24: 49:57:61:46:c0:3f:96:af:26:f5:68:0a:be:46:a7:76:dc:b5: 93:07:da:df:05:60:40:f3:e7:0d:3a:27:72:3d:bc:be:fb:50: 6a:2e:af:63:95:1d:4f:ac:11:1e:02:8c:8e:b3:b1:4b:d8:de: 66:62:fc:84:f1:63:46:4d:19:0b:5d:65:63:19:8d:6e:df:29: 60:65:4e:84:59:9b:8a:8f:50:5a:de:5c:db:0b:1a:84:03:21: f2:6b:b8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6GVYUWX1GVpZ92oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE5NDM1NFoXDTI1MTEyMzIwNDM1NFowLzEtMCsGA1UEAxMk ODNhZDEwMjYtYjNhZS00YzMwLWI0YmQtYmY1OTQ2NTVmNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+HXQB3Y4l3txj+F42eH9DL4bdODgFi4vOd4 /a2VIU2j7VGTObc0t+sHj3Xru4F8wZ446tWKwobM8QvhNo/YYENfst20KootbO4p RWkHETbIi+rr69wnmub4+QZF0zMxPsr75rLhphR1slwvFzVXQ79X8uo+AS1ycXFx yNjDYDWetkvIPsu6+0RZM40KtEZ+olAPiUBNjK1SfHVeBDp2dxtNFR0PThxw0odF vFSgtQs7hlJiVBokGJ5EQ+6ZmrP99dK4QLICr2y/TBwZARSamGW7iDRArpOquEVK Mkp5dTn9XRZ2APxVCz35H5D8NmPXcNhW9HrdyFpxcMeMFdiI5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXXGwNEJaWQJZKkoc3zpK6KuWMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWRiODY1OTAtNWIzYi0z ZGU0LWEwN2QtN2ZkMTQ5ZDRhYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2F8QdaqPJHNKkYDiUOdGUeEfv01/BG82D3KPeNYXYWMdtk0BksFIbC 6/hJh6wjZK/YovwawIMo8zhGH94Euv+NQKEpZZLKze2iuBo6I9xR3Eojm/NkRA6k YCEtK+CY2ih5qF2rrEcE97a2T03/7qU7RXDhGgC/x6Jn2Ms6uOKZ6nou8PL/n7io YCwUcz4bCWJjmhAGHmE3IZXimadGb4JtJElXYUbAP5avJvVoCr5Gp3bctZMH2t8F YEDz5w06J3I9vL77UGour2OVHU+sER4CjI6zsUvY3mZi/ITxY0ZNGQtdZWMZjW7f KWBlToRZm4qPUFreXNsLGoQDIfJruCY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:14 2025 by rpki-client