$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa File: 9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa (raw, json) Hash identifier: OtKVzsDtTgpC+aXbEqk2iQ04bhrrZhbQAlHYgAnnOIs= Subject key identifier: 8F:A3:5F:33:A7:C4:18:AA:65:89:C3:35:FD:8B:1B:AA:74:E0:23:AD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD427786EB29DC51231BE3A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa Signing time: Tue 26 Aug 2025 22:54:12 +0000 ROA not before: Tue 26 Aug 2025 22:54:12 +0000 ROA not after: Mon 24 Nov 2025 23:54:12 +0000 asID: 31898 IP address blocks: 64.181.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:77:86:eb:29:dc:51:23:1b:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:12 2025 GMT Not After : Nov 24 23:54:12 2025 GMT Subject: CN=78075c7a-19cd-4d5f-a6b1-27bb0c9c93d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:10:af:b5:6b:8e:63:86:52:83:fa:85:3d: 59:2a:61:8b:0b:dd:06:66:65:91:2b:e2:08:cd:2d: 8a:5e:9e:12:d4:15:d1:ae:d6:86:5d:7d:c2:b8:64: 93:98:af:be:e3:a4:39:ef:0e:8c:67:71:46:24:a9: 0b:73:60:a4:8e:81:ac:39:4c:d9:53:98:97:d6:52: 48:02:71:5d:6b:c5:69:27:b5:bc:b3:42:bb:69:91: 32:6e:b4:4f:6f:61:f5:c0:06:97:e4:54:b8:23:f1: f6:a2:8f:f3:4e:4a:7b:46:07:6a:a9:d3:a9:57:8e: 92:50:89:0a:5e:5a:71:a8:f6:ee:fb:46:80:31:35: 06:6f:ef:3d:fe:5a:92:07:ec:00:c2:4b:e8:ca:82: c9:f4:a3:59:6a:de:39:6f:d8:6c:77:fa:f9:89:9a: 93:e3:3e:b5:06:f9:ed:e7:99:14:0b:67:e4:cf:90: fd:22:1c:3f:e4:f0:57:11:86:43:bf:0a:52:59:2e: 8d:a3:76:1f:ed:c5:cf:82:41:21:1d:c9:df:b7:93: 68:b4:1f:d3:29:f1:fc:12:c7:fb:3f:79:4b:98:2f: 5c:67:24:36:c2:ea:b5:19:10:4d:d5:5e:fc:ef:a8: 6a:1a:0c:ae:fc:d2:e4:7a:5a:1d:f7:50:7a:d2:5c: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A3:5F:33:A7:C4:18:AA:65:89:C3:35:FD:8B:1B:AA:74:E0:23:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9cbce8ad-3b2e-3ac3-be1a-fd3bb2a0a766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0a:6b:ad:58:e4:c4:5e:dd:38:e1:0e:44:22:80:35:45:89: f6:d3:b6:2b:b8:b6:44:4a:01:f2:5f:f2:f2:c8:1c:b4:f0:6b: 1f:66:4b:9c:8e:d5:28:41:79:3d:40:63:e4:5f:61:c6:de:df: 39:99:db:bf:30:d0:08:08:a6:6c:a5:dc:fe:46:dc:4c:2d:4c: 76:74:bc:b2:83:92:6f:42:28:6c:4d:2e:ee:59:fc:2c:17:31: a5:23:38:81:71:84:3d:c2:79:fc:39:96:c6:6d:88:ab:07:69: ba:b7:88:8a:4e:81:1c:23:ba:a8:be:51:7c:f7:f1:bb:14:13: 7e:06:0b:93:a4:86:52:05:66:ae:1d:93:09:9c:d4:ca:b7:10: 41:7e:13:63:79:0b:07:6a:ca:cd:ee:ed:8c:e7:90:97:85:4c: 98:14:f6:d3:0a:82:8c:56:d2:db:ca:fd:8f:82:3d:83:7d:07: c4:dd:0c:75:60:9a:9e:9e:44:51:4a:27:e6:ff:1d:5d:a8:90: d8:6b:69:bb:64:bb:cc:f1:02:60:22:9c:93:b1:a9:59:3b:23: 2e:6d:18:85:d6:4d:54:39:bf:55:5b:51:7b:2c:21:ac:f8:a9: d0:18:eb:ee:d8:e8:45:da:61:ec:ef:dd:b6:83:d1:f3:8d:9a: ee:c9:c3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QneG6yncUSMb46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQxMloXDTI1MTEyNDIzNTQxMlowLzEtMCsGA1UEAxMk NzgwNzVjN2EtMTljZC00ZDVmLWE2YjEtMjdiYjBjOWM5M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAIQr7VrjmOGUoP6hT1ZKmGLC90GZmWRK+II zS2KXp4S1BXRrtaGXX3CuGSTmK++46Q57w6MZ3FGJKkLc2CkjoGsOUzZU5iX1lJI AnFda8VpJ7W8s0K7aZEybrRPb2H1wAaX5FS4I/H2oo/zTkp7RgdqqdOpV46SUIkK XlpxqPbu+0aAMTUGb+89/lqSB+wAwkvoyoLJ9KNZat45b9hsd/r5iZqT4z61Bvnt 55kUC2fkz5D9Ihw/5PBXEYZDvwpSWS6No3Yf7cXPgkEhHcnft5NotB/TKfH8Esf7 P3lLmC9cZyQ2wuq1GRBN1V7876hqGgyu/NLkelod91B60lwiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+jXzOnxBiqZYnDNf2LG6p04COtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWNiY2U4YWQtM2IyZS0z YWMzLWJlMWEtZmQzYmIyYTBhNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIKa61Y5MRe3TjhDkQigDVFifbTtiu4tkRKAfJf8vLIHLTwax9mS5yO 1ShBeT1AY+RfYcbe3zmZ278w0AgIpmyl3P5G3EwtTHZ0vLKDkm9CKGxNLu5Z/CwX MaUjOIFxhD3Cefw5lsZtiKsHabq3iIpOgRwjuqi+UXz38bsUE34GC5OkhlIFZq4d kwmc1Mq3EEF+E2N5Cwdqys3u7YznkJeFTJgU9tMKgoxW0tvK/Y+CPYN9B8TdDHVg mp6eRFFKJ+b/HV2okNhrabtku8zxAmAinJOxqVk7Iy5tGIXWTVQ5v1VbUXssIaz4 qdAY6+7Y6EXaYezv3baD0fONmu7Jw0s= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:25 2025 by rpki-client