$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2f21133-2d13-3646-afb4-0f2a8d02495c.roa File: b2f21133-2d13-3646-afb4-0f2a8d02495c.roa (raw, json) Hash identifier: 2wMenUTZRRpOOEWPRhWjA+JmWx5+eEb2M35z2TlVzo4= Subject key identifier: F6:2B:1D:0D:04:0D:B5:0C:19:73:AD:F0:3F:4C:35:77:4A:93:1A:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFA1949A8F011058B745ABE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2f21133-2d13-3646-afb4-0f2a8d02495c.roa Signing time: Mon 25 Aug 2025 19:43:48 +0000 ROA not before: Mon 25 Aug 2025 19:43:48 +0000 ROA not after: Sun 23 Nov 2025 20:43:48 +0000 asID: 31898 IP address blocks: 192.22.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:19:49:a8:f0:11:05:8b:74:5a:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 19:43:48 2025 GMT Not After : Nov 23 20:43:48 2025 GMT Subject: CN=7924def3-12ed-4483-b6c3-9dd31680559f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:31:10:7c:3e:49:66:ca:42:b5:88:df:60: 5e:09:28:23:fe:fa:d0:c7:f9:14:09:a1:34:f6:60: 7d:3b:71:3c:92:e2:4b:4a:20:ac:13:41:07:59:3f: 33:d0:f3:1d:d6:95:fa:28:ba:c5:5a:7f:8d:a3:cc: 42:94:be:41:ff:a1:d9:a3:48:8a:65:38:ba:aa:b4: 1a:ca:d1:03:bd:35:21:07:88:ca:e3:48:a9:25:9f: ee:2f:9d:9f:70:2d:9f:ce:c5:a6:34:f1:be:78:7c: 24:ac:ac:83:6b:0b:a3:ca:fd:f2:40:56:16:ac:a5: d4:83:47:06:bf:07:ca:3c:56:bb:7f:d0:2c:95:f1: 58:dd:1f:2a:9c:99:53:2d:94:ce:71:22:47:93:ff: 1a:d1:3b:c5:66:a7:1d:6d:82:1a:5f:91:13:8f:d2: 45:0f:16:e7:45:ed:2c:d0:86:2c:49:44:6b:92:43: 77:7c:36:9d:07:1e:1c:2e:7b:64:74:0b:5a:7e:05: 95:4e:fa:5c:1c:e4:87:ba:47:4b:06:42:66:18:f5: 5e:fb:12:07:95:77:86:78:54:8c:b6:d4:30:24:26: 12:d9:ab:8d:44:45:e9:1f:5d:2a:57:aa:4a:a5:6d: dc:81:34:5d:0c:10:58:91:d2:80:b3:3a:f9:d6:c5: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:1D:0D:04:0D:B5:0C:19:73:AD:F0:3F:4C:35:77:4A:93:1A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2f21133-2d13-3646-afb4-0f2a8d02495c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:89:fb:70:96:ac:65:6e:6c:cd:8d:fd:5f:5d:93:5f:61:35: 57:87:b9:13:b1:7a:0c:74:c0:fa:2f:d2:f1:98:02:32:64:54: 07:3f:0f:a5:9c:17:8b:b6:65:f5:24:5c:40:fc:a8:e0:8d:e8: 62:dc:df:2e:1e:de:ed:dc:6c:ce:c9:57:59:9d:e1:9a:5a:ed: 6f:7f:09:59:c3:96:7a:08:db:61:70:b3:f7:62:a9:11:4a:ba: 03:a4:8f:54:4f:18:bf:ff:0d:f7:29:90:3c:d2:90:1d:f1:06: 87:c3:b7:02:e9:32:78:c3:05:87:d9:8d:16:6c:0d:24:21:79: 35:c7:d1:ad:90:27:db:d4:29:e3:1b:09:fd:62:70:82:60:db: 7e:cf:55:26:54:7e:99:30:82:85:84:57:3f:26:64:64:2f:eb: d0:9c:16:d9:05:82:8a:cf:9d:13:63:90:0f:c2:66:46:a7:5f: 90:98:c7:58:24:c8:d5:e5:61:92:5f:96:1a:4f:b1:e9:15:00: 71:d7:53:e0:c8:83:83:55:e6:84:a7:30:f3:69:2d:9e:32:25: 0e:1b:99:61:9d:a9:bc:1c:cf:df:ed:75:5f:6f:d3:25:ea:9c: 9b:f7:17:15:88:6d:0a:cd:90:d1:78:6e:c1:78:b3:df:df:c7: 3f:d9:3b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6GUmo8BEFi3RavoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE5NDM0OFoXDTI1MTEyMzIwNDM0OFowLzEtMCsGA1UEAxMk NzkyNGRlZjMtMTJlZC00NDgzLWI2YzMtOWRkMzE2ODA1NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/wxEHw+SWbKQrWI32BeCSgj/vrQx/kUCaE0 9mB9O3E8kuJLSiCsE0EHWT8z0PMd1pX6KLrFWn+No8xClL5B/6HZo0iKZTi6qrQa ytEDvTUhB4jK40ipJZ/uL52fcC2fzsWmNPG+eHwkrKyDawujyv3yQFYWrKXUg0cG vwfKPFa7f9AslfFY3R8qnJlTLZTOcSJHk/8a0TvFZqcdbYIaX5ETj9JFDxbnRe0s 0IYsSURrkkN3fDadBx4cLntkdAtafgWVTvpcHOSHukdLBkJmGPVe+xIHlXeGeFSM ttQwJCYS2auNREXpH10qV6pKpW3cgTRdDBBYkdKAszr51sXHlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYrHQ0EDbUMGXOt8D9MNXdKkxoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjJmMjExMzMtMmQxMy0z NjQ2LWFmYjQtMGYyYThkMDI0OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuJ+3CWrGVubM2N/V9dk19hNVeHuROxegx0wPov0vGYAjJkVAc/D6Wc F4u2ZfUkXED8qOCN6GLc3y4e3u3cbM7JV1md4Zpa7W9/CVnDlnoI22Fws/diqRFK ugOkj1RPGL//DfcpkDzSkB3xBofDtwLpMnjDBYfZjRZsDSQheTXH0a2QJ9vUKeMb Cf1icIJg237PVSZUfpkwgoWEVz8mZGQv69CcFtkFgorPnRNjkA/CZkanX5CYx1gk yNXlYZJflhpPsekVAHHXU+DIg4NV5oSnMPNpLZ4yJQ4bmWGdqbwcz9/tdV9v0yXq nJv3FxWIbQrNkNF4bsF4s9/fxz/ZOxY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:18 2025 by rpki-client