$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa File: 7cf3189a-1651-32ac-987c-253702b7ced8.roa (raw, json) Hash identifier: ay5dTBGrtAli9cHRR9ty/u7RNDUiRuWb51u7qPjBuMk= Subject key identifier: 0F:6F:B1:E3:72:BD:DD:83:1A:03:ED:67:33:75:5D:A7:62:25:26:53 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFA1958FB024B436A9781BBC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa Signing time: Mon 25 Aug 2025 19:43:55 +0000 ROA not before: Mon 25 Aug 2025 19:43:55 +0000 ROA not after: Sun 23 Nov 2025 20:43:55 +0000 asID: 31898 IP address blocks: 192.22.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:19:58:fb:02:4b:43:6a:97:81:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 19:43:55 2025 GMT Not After : Nov 23 20:43:55 2025 GMT Subject: CN=794c181e-d310-4d57-a824-c6f91c11fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:c2:b8:d1:86:f5:8d:17:7f:b6:2f:42:84: 4d:7f:6d:c1:d9:0f:dd:26:d7:85:fc:93:75:23:dc: 94:b8:d4:c2:c3:83:c6:71:bf:f2:26:4e:8b:fd:22: 2b:f0:85:fd:d0:be:ca:f5:b4:41:ce:07:a1:78:ee: cc:58:9a:b4:f8:04:a7:84:ac:1a:8b:2f:65:18:a5: 2a:8d:00:05:40:69:40:f4:a9:1c:33:c4:aa:c3:8f: e9:50:65:86:6c:2d:a1:4c:4f:1a:e5:27:90:59:52: f8:d7:ed:ae:cc:08:3a:5c:be:c5:27:e4:f1:14:cd: 8a:48:59:22:a9:fb:17:70:76:04:3b:71:1c:4a:32: d2:a9:68:61:71:e4:ed:85:ea:60:a2:5f:75:63:ce: 9e:dd:88:0a:c6:bc:64:fe:3e:4f:8b:1a:ab:81:87: 64:9d:16:b7:88:2f:e3:d2:35:3c:3d:cf:b1:41:b6: 9c:b9:a0:11:9d:af:bf:d8:31:ac:52:27:04:ef:76: 19:ae:52:29:37:0d:e5:0c:1b:0b:6f:ab:6c:45:5c: 61:cd:40:da:d3:90:f3:4a:16:48:91:b5:f3:46:28: 47:0f:78:8d:cb:4a:e7:9d:69:71:78:c3:21:bc:bd: 12:eb:0f:39:2f:af:c3:d9:b0:c0:83:7f:82:7a:cc: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6F:B1:E3:72:BD:DD:83:1A:03:ED:67:33:75:5D:A7:62:25:26:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7cf3189a-1651-32ac-987c-253702b7ced8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6b:3d:de:b6:f3:55:b4:b8:f6:dc:5a:9f:97:2f:6a:c5:e2: 23:cb:35:08:ac:74:44:c0:9b:54:2c:27:1e:22:c7:b1:e5:ef: a2:3b:0f:93:06:a8:fb:87:e1:57:88:4a:1a:3e:6e:4d:09:2f: b5:4d:21:be:82:31:17:18:2c:f4:53:91:1e:75:a8:ca:b0:fe: bf:32:eb:2b:fe:c0:8f:cd:1a:c5:38:96:38:3a:14:5c:a2:5a: 20:56:3f:83:ed:4f:97:9b:cf:d5:45:6f:22:67:c7:36:a7:5e: ca:38:05:a7:b5:c6:29:4e:dd:b7:c4:27:35:ce:ce:a6:5f:d8: 0b:85:24:a0:6c:e1:0a:f6:42:87:6a:62:b7:a9:86:a9:86:32: 8c:92:09:6a:34:1a:5c:d0:28:f1:09:67:17:9d:82:32:e7:17: 7b:57:18:97:e6:5b:31:fb:89:9b:95:ea:03:38:b3:29:f3:b0: d3:38:16:8a:f5:6c:85:47:5c:ff:1f:11:ac:84:28:77:3e:6e: 9f:b7:b9:87:b5:28:a3:e3:11:1e:76:03:4a:85:d1:ae:ca:e7: 6d:d4:8b:f6:b2:99:ad:30:0e:82:1b:d1:fc:76:1d:9f:34:c9: fd:69:b5:b3:18:d8:fb:6f:05:a0:2e:e8:18:b9:12:a7:06:7f: 9d:53:fa:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6GVj7AktDapeBu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE5NDM1NVoXDTI1MTEyMzIwNDM1NVowLzEtMCsGA1UEAxMk Nzk0YzE4MWUtZDMxMC00ZDU3LWE4MjQtYzZmOTFjMTFmYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l3CuNGG9Y0Xf7YvQoRNf23B2Q/dJteF/JN1 I9yUuNTCw4PGcb/yJk6L/SIr8IX90L7K9bRBzgeheO7MWJq0+ASnhKwaiy9lGKUq jQAFQGlA9KkcM8Sqw4/pUGWGbC2hTE8a5SeQWVL41+2uzAg6XL7FJ+TxFM2KSFki qfsXcHYEO3EcSjLSqWhhceTthepgol91Y86e3YgKxrxk/j5PixqrgYdknRa3iC/j 0jU8Pc+xQbacuaARna+/2DGsUicE73YZrlIpNw3lDBsLb6tsRVxhzUDa05DzShZI kbXzRihHD3iNy0rnnWlxeMMhvL0S6w85L6/D2bDAg3+CesxX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9vseNyvd2DGgPtZzN1XadiJSZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2NmMzE4OWEtMTY1MS0z MmFjLTk4N2MtMjUzNzAyYjdjZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlrPd6281W0uPbcWp+XL2rF4iPLNQisdETAm1QsJx4ix7Hl76I7D5MG qPuH4VeISho+bk0JL7VNIb6CMRcYLPRTkR51qMqw/r8y6yv+wI/NGsU4ljg6FFyi WiBWP4PtT5ebz9VFbyJnxzanXso4Bae1xilO3bfEJzXOzqZf2AuFJKBs4Qr2Qodq YrephqmGMoySCWo0GlzQKPEJZxedgjLnF3tXGJfmWzH7iZuV6gM4synzsNM4For1 bIVHXP8fEayEKHc+bp+3uYe1KKPjER52A0qF0a7K523Ui/ayma0wDoIb0fx2HZ80 yf1ptbMY2PtvBaAu6Bi5EqcGf51T+ns= -----END CERTIFICATE-----Generated at Thu Oct 9 01:04:22 2025 by rpki-client