$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42fa6ec9-e11d-3eaf-bed3-45336ccaf1cb.roa File: 42fa6ec9-e11d-3eaf-bed3-45336ccaf1cb.roa (raw, json) Hash identifier: zm8xeYoXG4SeNS6ES20CzDGCNqyJAxCim3Q1lXxepYw= Subject key identifier: E5:25:F9:A0:38:3E:3A:1C:62:C5:90:0E:5D:92:0D:C1:CF:3A:1C:C3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C4F5B6D91D974ACBF879DC Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42fa6ec9-e11d-3eaf-bed3-45336ccaf1cb.roa Signing time: Mon 25 Aug 2025 08:18:05 +0000 ROA not before: Mon 25 Aug 2025 08:18:05 +0000 ROA not after: Sun 23 Nov 2025 09:18:05 +0000 asID: 31898 IP address blocks: 170.9.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:f5:b6:d9:1d:97:4a:cb:f8:79:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:18:05 2025 GMT Not After : Nov 23 09:18:05 2025 GMT Subject: CN=11e534ab-7ede-4689-bb50-c7a496b9a2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:15:fb:c9:d9:9f:e0:1e:41:03:cd:9c:8c: 9e:8e:e2:19:a4:ed:6c:7f:dd:79:61:8e:08:f3:8a: d5:7a:7b:e0:60:f0:9c:5d:9e:11:f3:3c:b3:de:28: 00:6f:e3:4b:00:c3:18:9a:72:4f:9c:cc:e1:56:50: 46:99:2b:36:b2:67:3f:22:8e:5a:65:00:a2:14:c6: 41:9e:80:50:4f:96:61:37:11:67:17:68:a2:24:ef: 45:e3:26:64:8d:1c:27:5e:60:ea:a4:51:cf:0e:78: fb:cf:bc:20:50:70:ea:6e:79:35:c0:2c:94:25:0b: 9b:ba:04:84:c6:d2:a9:3a:5c:ad:0f:f0:89:28:89: b1:e1:99:58:35:63:05:39:be:d4:89:a9:b4:d0:2d: 58:09:a3:58:66:58:c8:09:c1:c3:b5:2a:81:ef:09: 0a:2d:3c:02:40:ad:97:ff:22:54:db:72:00:c0:e0: 27:d3:42:92:0e:54:aa:5d:7d:d1:10:20:fc:68:a0: 68:96:87:fe:44:05:37:c0:64:4f:4b:1b:91:8c:18: 4b:fb:70:72:89:92:35:2b:fc:60:a0:1a:8f:9a:aa: 2a:57:bb:42:a8:4c:c4:4b:c7:b3:d9:71:32:6a:6d: f5:e3:d9:09:2e:17:a8:db:27:7a:69:5c:3c:8a:73: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:F9:A0:38:3E:3A:1C:62:C5:90:0E:5D:92:0D:C1:CF:3A:1C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42fa6ec9-e11d-3eaf-bed3-45336ccaf1cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:df:2f:8c:2b:fb:f1:ea:af:94:2c:4f:1d:fe:c9:85:c2:7c: 0c:8a:55:db:c0:63:fc:e4:11:36:96:c5:f5:84:5c:70:81:d0: f8:69:88:83:67:11:dc:54:b1:de:bd:84:df:dd:49:0f:14:99: 16:e2:a8:55:79:72:f8:84:71:ae:ef:fa:e6:83:27:7a:eb:65: 69:c8:7f:87:fb:65:8f:aa:a2:85:f8:36:13:83:91:bc:43:f8: 50:46:cb:13:f1:3d:5f:13:44:14:7b:84:6a:04:09:2f:6b:42: 8c:33:80:28:81:d1:80:78:4d:59:07:93:27:8a:36:a4:74:0c: 79:a3:dc:7c:30:79:0f:5f:a3:9a:61:21:37:cd:c9:3b:3b:06: 3e:44:1d:58:6e:39:95:5b:87:03:c9:0b:ac:f0:5b:1d:27:85: 6a:a4:3a:3f:08:56:f6:c5:8d:f4:e1:6c:b4:13:3c:4f:d4:13: 06:85:0d:78:3a:b7:4a:b9:27:1d:ad:45:46:0a:4f:f7:5c:a3: d2:7f:45:16:34:bf:01:c5:c7:c1:af:bb:a1:c1:71:f6:63:7a: a9:61:76:ee:32:33:f9:a7:75:f8:dc:0f:9b:a4:27:df:cd:a9: 9e:23:f6:60:c5:2e:c2:20:89:9e:08:7a:a5:53:27:1b:7b:7b: 5b:b3:87:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xPW22R2XSsv4edwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTgwNVoXDTI1MTEyMzA5MTgwNVowLzEtMCsGA1UEAxMk MTFlNTM0YWItN2VkZS00Njg5LWJiNTAtYzdhNDk2YjlhMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEcV+8nZn+AeQQPNnIyejuIZpO1sf915YY4I 84rVenvgYPCcXZ4R8zyz3igAb+NLAMMYmnJPnMzhVlBGmSs2smc/Io5aZQCiFMZB noBQT5ZhNxFnF2iiJO9F4yZkjRwnXmDqpFHPDnj7z7wgUHDqbnk1wCyUJQubugSE xtKpOlytD/CJKImx4ZlYNWMFOb7Uiam00C1YCaNYZljICcHDtSqB7wkKLTwCQK2X /yJU23IAwOAn00KSDlSqXX3RECD8aKBolof+RAU3wGRPSxuRjBhL+3ByiZI1K/xg oBqPmqoqV7tCqEzES8ez2XEyam3149kJLheo2yd6aVw8inPpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUl+aA4PjocYsWQDl2SDcHPOhzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDJmYTZlYzktZTExZC0z ZWFmLWJlZDMtNDUzMzZjY2FmMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqgnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPfL4wr+/Hqr5QsTx3+yYXCfAyKVdvAY/zkETaWxfWEXHCB0PhpiINn EdxUsd69hN/dSQ8UmRbiqFV5cviEca7v+uaDJ3rrZWnIf4f7ZY+qooX4NhODkbxD +FBGyxPxPV8TRBR7hGoECS9rQowzgCiB0YB4TVkHkyeKNqR0DHmj3HwweQ9fo5ph ITfNyTs7Bj5EHVhuOZVbhwPJC6zwWx0nhWqkOj8IVvbFjfThbLQTPE/UEwaFDXg6 t0q5Jx2tRUYKT/dco9J/RRY0vwHFx8Gvu6HBcfZjeqlhdu4yM/mndfjcD5ukJ9/N qZ4j9mDFLsIgiZ4IeqVTJxt7e1uzhxA= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:43 2025 by rpki-client