$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa File: 7dd65e63-a2f2-307d-9565-1a245811fba8.roa (raw, json) Hash identifier: tw29ebLO7miUKg1B1pMhGN2YE4iVypyeKVRR/kljeMs= Subject key identifier: 4C:71:3E:13:7A:06:80:4E:76:D0:1F:C2:4A:BE:B3:64:BC:0B:15:94 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43BCEDF71DF06F98AF82A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa Signing time: Tue 26 Aug 2025 22:56:46 +0000 ROA not before: Tue 26 Aug 2025 22:56:46 +0000 ROA not after: Mon 24 Nov 2025 23:56:46 +0000 asID: 31898 IP address blocks: 192.22.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:bc:ed:f7:1d:f0:6f:98:af:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:46 2025 GMT Not After : Nov 24 23:56:46 2025 GMT Subject: CN=743a5851-a25c-4217-a9d2-7c82df03495f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:8f:96:5c:f5:c6:69:e2:ab:5b:af:2c:d6: 4b:04:d2:1a:0e:92:66:bd:6b:7d:3a:f3:c0:77:8f: 6e:8e:1f:93:76:1d:f1:88:1b:b6:ee:7d:85:73:4a: bf:77:09:fa:91:35:66:de:e6:6b:fe:0a:55:e9:c0: fe:f6:4e:89:8d:9d:32:e0:b3:e2:04:82:06:2c:88: a9:b8:85:b7:54:e7:d7:f3:1e:73:2e:74:ef:53:b7: 8c:66:23:e3:8a:9b:b1:77:64:45:35:b6:28:29:ff: 60:41:8c:cb:1c:74:42:63:4a:95:cf:1b:44:06:a9: c9:a6:8b:e7:bd:ed:b3:d9:ef:02:50:af:b5:99:71: 5f:8d:d8:b3:3f:a1:35:99:3a:04:da:17:d3:d1:18: a2:6e:35:eb:17:f7:8b:47:c5:e9:62:88:13:15:4e: 83:99:07:d7:39:36:9c:a7:34:c1:45:e7:9f:f9:4a: 0c:01:26:56:0e:ba:99:8c:e0:ed:d6:9b:41:c2:f3: 83:15:96:50:72:4c:b6:da:cb:95:95:fb:2a:f7:a8: 19:6e:89:ef:dd:ea:b5:ce:79:2c:58:e9:55:6a:64: fd:e4:04:39:44:74:ae:7d:10:f4:10:4f:dd:f3:f7: 30:5c:42:ca:ad:29:0c:d8:74:6c:0a:c1:58:4e:0c: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:71:3E:13:7A:06:80:4E:76:D0:1F:C2:4A:BE:B3:64:BC:0B:15:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7dd65e63-a2f2-307d-9565-1a245811fba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:56:69:5e:0c:8a:21:13:f5:6f:8b:51:26:94:5d:7b:24:d1: 51:68:2a:91:6e:3e:4f:8f:6b:d2:22:60:d9:ef:43:9b:84:7d: 20:f8:44:ee:9b:f4:0a:6b:b2:be:0f:b5:dd:30:f5:12:a1:09: 83:a1:cc:43:92:dd:bd:8a:c8:ab:72:87:34:f6:e1:8f:4a:8a: 15:27:af:42:a7:e8:ca:af:41:a5:eb:d0:ec:83:20:6d:93:1b: c7:0a:72:a6:dc:f2:02:fd:0f:5e:e8:d9:6f:12:03:f8:41:42: 2c:cc:ee:80:58:bc:ca:64:21:3f:57:9b:9d:f9:c5:52:b1:26: 9f:a7:00:ea:16:1b:22:18:2d:82:f7:e2:df:81:05:6e:3b:3d: ba:32:bb:3d:d2:bd:25:bc:1e:54:46:75:7d:b7:84:00:25:ef: bf:5a:5d:55:f2:13:81:6d:e4:6b:6a:5d:79:ee:e5:f8:7f:e8: 2c:f1:74:cd:bd:ca:21:fb:17:3e:f4:70:ba:2c:23:f1:ed:19: a5:ec:28:08:86:d9:a5:84:32:02:2a:9a:5b:d1:81:e0:f0:64: f6:3e:a1:e7:8c:65:0d:74:c3:56:7d:42:1e:f9:69:83:d3:89: d4:a2:42:5a:db:69:fa:c9:e1:a2:5d:71:8c:05:88:7d:f0:13: 2c:01:f2:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q7zt9x3wb5ivgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTY0NloXDTI1MTEyNDIzNTY0NlowLzEtMCsGA1UEAxMk NzQzYTU4NTEtYTI1Yy00MjE3LWE5ZDItN2M4MmRmMDM0OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsyPllz1xmniq1uvLNZLBNIaDpJmvWt9OvPA d49ujh+Tdh3xiBu27n2Fc0q/dwn6kTVm3uZr/gpV6cD+9k6JjZ0y4LPiBIIGLIip uIW3VOfX8x5zLnTvU7eMZiPjipuxd2RFNbYoKf9gQYzLHHRCY0qVzxtEBqnJpovn ve2z2e8CUK+1mXFfjdizP6E1mToE2hfT0RiibjXrF/eLR8XpYogTFU6DmQfXOTac pzTBReef+UoMASZWDrqZjODt1ptBwvODFZZQcky22suVlfsq96gZbonv3eq1znks WOlVamT95AQ5RHSufRD0EE/d8/cwXELKrSkM2HRsCsFYTgz9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExxPhN6BoBOdtAfwkq+s2S8CxWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2RkNjVlNjMtYTJmMi0z MDdkLTk1NjUtMWEyNDU4MTFmYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxWaV4MiiET9W+LUSaUXXsk0VFoKpFuPk+Pa9IiYNnvQ5uEfSD4RO6b 9Aprsr4Ptd0w9RKhCYOhzEOS3b2KyKtyhzT24Y9KihUnr0Kn6MqvQaXr0OyDIG2T G8cKcqbc8gL9D17o2W8SA/hBQizM7oBYvMpkIT9Xm535xVKxJp+nAOoWGyIYLYL3 4t+BBW47Pboyuz3SvSW8HlRGdX23hAAl779aXVXyE4Ft5GtqXXnu5fh/6CzxdM29 yiH7Fz70cLosI/HtGaXsKAiG2aWEMgIqmlvRgeDwZPY+oeeMZQ10w1Z9Qh75aYPT idSiQlrbafrJ4aJdcYwFiH3wEywB8rU= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:42 2025 by rpki-client