$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d06a9c97-6bcb-3fb6-b8dd-13d369e0f69e.roa File: d06a9c97-6bcb-3fb6-b8dd-13d369e0f69e.roa (raw, json) Hash identifier: UE2xq2VAPUfPvJKMJdajMmt6S1lK7lVooNp659syj6M= Subject key identifier: CE:19:02:45:33:85:B3:BE:8F:50:FB:0A:79:36:E8:C6:E2:30:E7:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFA1946D9080DE4C7D185B380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d06a9c97-6bcb-3fb6-b8dd-13d369e0f69e.roa Signing time: Mon 25 Aug 2025 19:43:47 +0000 ROA not before: Mon 25 Aug 2025 19:43:47 +0000 ROA not after: Sun 23 Nov 2025 20:43:47 +0000 asID: 31898 IP address blocks: 192.22.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:19:46:d9:08:0d:e4:c7:d1:85:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 19:43:47 2025 GMT Not After : Nov 23 20:43:47 2025 GMT Subject: CN=8049d4d2-ca8f-463a-a46e-c79bfe05bff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:0c:95:7a:ad:58:7b:3b:71:15:d4:b1:90: b6:49:f9:d4:39:21:ed:99:e8:a8:21:75:5c:e3:6f: c0:a7:28:f3:87:0e:a6:68:7e:1b:d3:f0:37:33:eb: 38:7c:fe:c2:91:ac:ed:82:d1:46:ea:ab:3a:26:82: 71:78:91:8f:6a:7a:35:b9:1b:3f:36:8c:22:b8:93: 61:ef:35:53:08:0f:4e:ee:57:27:0c:fd:28:1d:f9: a4:7b:16:2b:2f:4e:6f:76:94:f9:8a:11:8b:d2:8e: f0:98:83:4f:d7:ca:63:fb:d5:31:03:11:68:69:6a: c5:fd:c5:9b:ee:7e:c0:8c:e4:89:66:6a:11:74:a0: fa:10:43:08:fe:0e:60:d4:78:51:8d:80:af:b6:d6: 1f:2c:52:fc:0e:41:92:dd:3e:c4:c0:80:0f:1b:61: 07:61:09:32:7a:dd:6b:ec:5d:d9:1a:df:9c:2c:3b: 80:81:71:11:71:9b:ea:ec:a9:94:de:bb:af:ab:45: df:3f:31:c8:5b:af:92:c5:70:30:fa:3c:9d:51:24: 75:7b:15:33:4b:b8:4a:27:0a:0d:ef:37:26:32:2f: b1:ce:fa:3f:33:2b:1e:bf:dc:cb:58:4a:52:3e:1b: 09:dc:b1:dc:a5:d5:a3:19:24:44:d4:bb:d2:d0:6d: 73:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:02:45:33:85:B3:BE:8F:50:FB:0A:79:36:E8:C6:E2:30:E7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d06a9c97-6bcb-3fb6-b8dd-13d369e0f69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b2:41:24:17:86:c9:38:02:51:bb:1d:f2:f4:cd:29:21:ca: b7:13:e1:15:40:b5:c3:ff:ae:37:da:ed:40:df:86:38:9a:27: 74:de:53:c0:43:af:54:b1:9f:ee:4a:42:31:3b:a0:01:f3:c6: ce:bd:90:31:9b:9f:0a:b4:3a:44:96:93:2c:37:49:2b:55:3f: 28:c4:f1:5a:fa:e2:6a:ea:3e:19:fd:93:f1:6b:f5:04:be:f4: 40:3e:e8:d4:58:3c:b0:10:75:ec:7a:82:78:eb:33:f2:48:d5: 5c:cd:83:35:de:04:e0:23:99:42:93:ab:fd:e5:8d:23:cf:fb: 20:f3:4c:f9:f4:09:a0:2a:47:b7:f9:aa:35:83:58:82:02:e1: 18:c9:fa:7e:77:b6:1b:18:11:ba:06:be:05:3b:15:23:0d:a6: a2:1d:58:c4:17:50:0d:50:7a:fb:c0:ba:43:40:92:b2:04:64: 18:91:fd:c1:47:85:7b:86:2f:6a:62:4c:b3:75:a2:d0:02:36: 75:cd:75:5d:a1:10:8d:f3:08:14:f7:cc:45:cc:aa:a2:80:50: a1:51:61:12:f6:ce:3d:e9:af:67:b0:22:05:32:8b:12:0b:38: 50:7c:d0:89:ce:2b:70:e5:44:04:e1:9d:47:9d:fa:19:ba:79: 90:43:a3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6GUbZCA3kx9GFs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE5NDM0N1oXDTI1MTEyMzIwNDM0N1owLzEtMCsGA1UEAxMk ODA0OWQ0ZDItY2E4Zi00NjNhLWE0NmUtYzc5YmZlMDViZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5sMlXqtWHs7cRXUsZC2SfnUOSHtmeioIXVc 42/Apyjzhw6maH4b0/A3M+s4fP7CkaztgtFG6qs6JoJxeJGPano1uRs/NowiuJNh 7zVTCA9O7lcnDP0oHfmkexYrL05vdpT5ihGL0o7wmINP18pj+9UxAxFoaWrF/cWb 7n7AjOSJZmoRdKD6EEMI/g5g1HhRjYCvttYfLFL8DkGS3T7EwIAPG2EHYQkyet1r 7F3ZGt+cLDuAgXERcZvq7KmU3ruvq0XfPzHIW6+SxXAw+jydUSR1exUzS7hKJwoN 7zcmMi+xzvo/Mysev9zLWEpSPhsJ3LHcpdWjGSRE1LvS0G1zPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4ZAkUzhbO+j1D7Cnk26MbiMOfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDA2YTljOTctNmJjYi0z ZmI2LWI4ZGQtMTNkMzY5ZTBmNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSyQSQXhsk4AlG7HfL0zSkhyrcT4RVAtcP/rjfa7UDfhjiaJ3TeU8BD r1Sxn+5KQjE7oAHzxs69kDGbnwq0OkSWkyw3SStVPyjE8Vr64mrqPhn9k/Fr9QS+ 9EA+6NRYPLAQdex6gnjrM/JI1VzNgzXeBOAjmUKTq/3ljSPP+yDzTPn0CaAqR7f5 qjWDWIIC4RjJ+n53thsYEboGvgU7FSMNpqIdWMQXUA1QevvAukNAkrIEZBiR/cFH hXuGL2piTLN1otACNnXNdV2hEI3zCBT3zEXMqqKAUKFRYRL2zj3pr2ewIgUyixIL OFB80InOK3DlRAThnUed+hm6eZBDo8Q= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:25 2025 by rpki-client