$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ae7e29-dc1e-3d40-86c7-e022113627ca.roa File: e7ae7e29-dc1e-3d40-86c7-e022113627ca.roa (raw, json) Hash identifier: kOL9xb6GpxkVxMOVsipqnAvrXbTHkKB8uNYfivkqzjA= Subject key identifier: 51:96:F0:38:88:73:75:0C:AB:35:A3:F3:51:1D:50:E9:D4:AA:7D:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43C57956EB9DA667EF6760 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ae7e29-dc1e-3d40-86c7-e022113627ca.roa Signing time: Tue 26 Aug 2025 22:56:50 +0000 ROA not before: Tue 26 Aug 2025 22:56:50 +0000 ROA not after: Mon 24 Nov 2025 23:56:50 +0000 asID: 31898 IP address blocks: 192.22.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:c5:79:56:eb:9d:a6:67:ef:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:50 2025 GMT Not After : Nov 24 23:56:50 2025 GMT Subject: CN=e7b73bad-74c3-40ad-9675-96c9251e90c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:5b:18:9d:b0:f4:8a:16:88:ce:9a:7f:f9: ae:cf:fa:c7:86:85:02:f1:85:e9:eb:02:ff:f1:f6: a2:c7:3e:1a:f9:bc:d9:b3:9a:19:2c:5e:42:06:05: 10:c8:68:2a:b1:2b:cb:7b:e4:c2:4b:23:c3:93:9f: fb:41:4d:64:3d:eb:d7:83:08:0e:75:6a:84:ed:f9: 7e:59:4d:a3:89:08:fd:d5:81:f4:24:44:cd:29:70: 52:a4:18:43:da:4f:50:0a:24:4c:ac:43:88:85:ee: b6:f6:e3:cc:a3:05:bd:2d:ca:0d:88:fb:ac:5b:40: 82:5e:e4:63:fd:b9:53:39:21:db:7c:45:07:d7:c7: 7b:a0:9b:13:27:fd:1e:09:be:e7:55:c7:e3:43:4c: 1b:5d:87:9d:c0:2c:d1:3c:57:ed:60:bd:2e:2e:cd: 3c:44:7e:79:3f:9b:bd:d6:97:18:aa:f1:39:ae:4c: 78:12:54:60:fc:65:75:7a:b0:c6:01:b8:16:d5:1d: b0:ac:f3:b5:2c:7c:00:64:2b:79:4c:9e:9b:0d:ed: a6:ed:10:05:1a:46:c7:97:07:15:e6:07:78:f5:dd: 49:0e:ac:ab:49:8d:e4:0b:f7:54:4c:71:36:00:c8: 6c:a8:54:3e:da:26:3a:0b:1f:f0:61:b9:49:b6:d0: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:96:F0:38:88:73:75:0C:AB:35:A3:F3:51:1D:50:E9:D4:AA:7D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7ae7e29-dc1e-3d40-86c7-e022113627ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:31:c3:23:70:4a:59:62:ca:af:23:2b:2c:e9:ad:43:45:f1: 45:46:ad:a4:a0:30:85:e7:85:36:13:cd:46:2d:2a:b5:b7:c1: f4:0f:c6:a2:80:ee:c9:c6:da:42:31:ad:0b:cd:0e:5b:89:eb: 8d:b4:e9:0f:dc:1e:34:37:d9:2d:99:35:1b:fa:76:a1:f1:e4: 44:9d:3d:02:ee:61:f4:b4:13:7b:87:86:06:7f:3a:15:20:63: 73:3e:39:86:9d:c4:90:01:b5:e3:21:cd:0a:2f:c3:3e:fe:ba: 7e:7b:25:8a:4b:cf:fd:f7:82:df:a4:80:1b:fc:37:32:d9:56: fd:72:8f:e7:39:7a:a8:ab:20:93:3d:13:dc:70:4c:3c:ef:fd: 34:92:02:b7:ea:db:84:6a:de:be:11:77:96:b1:96:f7:98:75: 77:51:2f:57:09:dc:63:aa:06:30:a6:eb:33:88:60:db:e3:c9: d6:fc:a1:3a:46:94:b9:9f:9c:9a:ce:22:fe:6e:4e:ac:d3:f8: ed:e0:5c:d3:9d:ce:b9:9e:09:fd:91:70:dc:38:f0:4e:cd:c1: 2f:88:28:7a:68:4e:99:c6:09:81:32:0e:da:4a:d4:82:e0:3c: 23:33:7f:be:aa:28:03:29:41:28:57:16:af:86:46:f2:e8:cc: ba:2a:a3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q8V5VuudpmfvZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTY1MFoXDTI1MTEyNDIzNTY1MFowLzEtMCsGA1UEAxMk ZTdiNzNiYWQtNzRjMy00MGFkLTk2NzUtOTZjOTI1MWU5MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJZbGJ2w9IoWiM6af/muz/rHhoUC8YXp6wL/ 8faixz4a+bzZs5oZLF5CBgUQyGgqsSvLe+TCSyPDk5/7QU1kPevXgwgOdWqE7fl+ WU2jiQj91YH0JETNKXBSpBhD2k9QCiRMrEOIhe629uPMowW9LcoNiPusW0CCXuRj /blTOSHbfEUH18d7oJsTJ/0eCb7nVcfjQ0wbXYedwCzRPFftYL0uLs08RH55P5u9 1pcYqvE5rkx4ElRg/GV1erDGAbgW1R2wrPO1LHwAZCt5TJ6bDe2m7RAFGkbHlwcV 5gd49d1JDqyrSY3kC/dUTHE2AMhsqFQ+2iY6Cx/wYblJttB0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGW8DiIc3UMqzWj81EdUOnUqn0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTdhZTdlMjktZGMxZS0z ZDQwLTg2YzctZTAyMjExMzYyN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQxwyNwSlliyq8jKyzprUNF8UVGraSgMIXnhTYTzUYtKrW3wfQPxqKA 7snG2kIxrQvNDluJ64206Q/cHjQ32S2ZNRv6dqHx5ESdPQLuYfS0E3uHhgZ/OhUg Y3M+OYadxJABteMhzQovwz7+un57JYpLz/33gt+kgBv8NzLZVv1yj+c5eqirIJM9 E9xwTDzv/TSSArfq24Rq3r4Rd5axlveYdXdRL1cJ3GOqBjCm6zOIYNvjydb8oTpG lLmfnJrOIv5uTqzT+O3gXNOdzrmeCf2RcNw48E7NwS+IKHpoTpnGCYEyDtpK1ILg PCMzf76qKAMpQShXFq+GRvLozLoqo9M= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:41 2025 by rpki-client