$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa File: 20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa (raw, json) Hash identifier: +at2VltVKPB8Ay05P3AztMPB4QTjcLGOVi0+aVkPow8= Subject key identifier: F4:27:0E:E3:6B:F2:F5:54:05:EC:C0:A5:F9:0B:7C:05:D7:87:DD:69 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584B047BFC0D32FF277D9F57A920 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 14061 IP address blocks: 170.64.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fc:0d:32:ff:27:7d:9f:57:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6fdcdacb-9453-4e6b-86d2-8651c4af4a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:ac:70:17:4b:a2:ad:cc:35:e3:78:4a:dc: 6d:96:48:ba:36:d8:c8:c3:81:39:e5:aa:91:7f:87: c3:fc:48:41:e5:51:aa:f7:ab:51:13:8f:c8:63:40: ef:cd:3a:06:3a:80:ed:f5:de:b2:b6:68:7d:14:6f: ad:8e:c6:c1:e1:f6:20:e8:33:33:61:14:04:14:98: c6:75:21:30:f0:60:8c:c0:91:87:5d:ba:27:4b:79: a7:47:f6:55:de:98:28:04:91:f1:b9:0b:f1:d5:bc: 74:10:26:98:32:16:b3:28:64:59:dc:82:45:df:a8: 47:69:ce:81:d9:e1:a2:00:c5:c7:c6:a6:84:95:e8: 6b:a4:e5:a1:9f:66:01:98:f6:b9:75:e6:72:73:33: fc:97:95:55:2e:1d:d3:eb:6d:41:ab:9a:c8:34:8f: 7c:fb:a7:e3:0d:27:37:d7:d6:1f:91:55:15:77:0f: 77:10:dc:bc:e1:76:a3:84:4e:7b:27:a1:88:35:9c: 04:99:72:65:df:8c:02:f9:15:41:dd:19:bb:50:30: 1b:fd:69:f6:30:9d:38:74:5d:4a:44:43:91:08:d6: bb:77:3d:10:be:60:e8:76:9e:93:8e:91:16:49:e0: 25:ad:bd:d3:d5:cd:e9:82:bc:47:6c:38:6c:29:da: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:0E:E3:6B:F2:F5:54:05:EC:C0:A5:F9:0B:7C:05:D7:87:DD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 170.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:69:7c:52:43:16:f5:be:ba:f8:95:b3:ad:2b:c1:65:ca:c6: 7d:d1:d5:5d:22:14:5a:9c:99:66:7e:33:d5:a8:60:dd:a1:1c: 8d:6a:19:23:e9:79:dd:d3:7c:32:7f:bf:0b:18:92:4c:57:03: 56:c8:32:4a:56:1a:18:0b:89:3e:d4:18:5a:b8:b2:42:2a:34: 0d:5d:d1:51:14:d8:e9:a2:de:48:a2:39:47:c2:66:b3:3a:26: ea:be:b1:96:0f:16:f5:48:1c:8d:8a:9a:55:92:ba:f4:ce:a0: f6:d3:58:92:7c:7d:59:26:5a:0d:a5:f3:72:0c:7f:a6:ad:83: 6d:0b:32:1a:a8:3e:76:fe:16:00:8c:54:28:09:22:3d:67:00: bf:5e:22:01:29:5f:13:88:86:0e:07:b7:35:19:69:dd:b9:3b: 81:91:69:8f:ad:ff:4d:87:a6:29:3b:fc:1d:0f:96:1f:0f:5d: aa:c5:20:d2:a6:81:ee:62:42:46:98:53:5d:68:0d:82:2c:b3: 1c:ac:cd:1c:76:d3:a1:eb:51:13:a5:1b:d5:1d:9e:c4:2e:ea: 87:2e:eb:50:18:79:be:8f:d4:ba:8f:9b:3f:02:09:cd:6b:2b: 0a:fc:26:fc:01:09:db:54:bf:94:e6:7c:e9:09:84:f9:c1:83: 45:23:9c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/wNMv8nfZ9XqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmZkY2RhY2ItOTQ1My00ZTZiLTg2ZDItODY1MWM0YWY0YTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtyscBdLoq3MNeN4Stxtlki6NtjIw4E55aqR f4fD/EhB5VGq96tRE4/IY0DvzToGOoDt9d6ytmh9FG+tjsbB4fYg6DMzYRQEFJjG dSEw8GCMwJGHXbonS3mnR/ZV3pgoBJHxuQvx1bx0ECaYMhazKGRZ3IJF36hHac6B 2eGiAMXHxqaElehrpOWhn2YBmPa5deZyczP8l5VVLh3T621Bq5rINI98+6fjDSc3 19YfkVUVdw93ENy84XajhE57J6GINZwEmXJl34wC+RVB3Rm7UDAb/Wn2MJ04dF1K REORCNa7dz0QvmDodp6TjpEWSeAlrb3T1c3pgrxHbDhsKdrt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQnDuNr8vVUBezApfkLfAXXh91pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjBkNDQwYjItYzJhYi0z YjgwLWFhYTQtMzkxOWM1YWJjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxpfFJDFvW+uviVs60rwWXKxn3R1V0iFFqcmWZ+M9WoYN2hHI1qGSPp ed3TfDJ/vwsYkkxXA1bIMkpWGhgLiT7UGFq4skIqNA1d0VEU2Omi3kiiOUfCZrM6 Juq+sZYPFvVIHI2KmlWSuvTOoPbTWJJ8fVkmWg2l83IMf6atg20LMhqoPnb+FgCM VCgJIj1nAL9eIgEpXxOIhg4HtzUZad25O4GRaY+t/02Hpik7/B0Plh8PXarFINKm ge5iQkaYU11oDYIssxyszRx206HrUROlG9UdnsQu6ocu61AYeb6P1LqPmz8CCc1r Kwr8JvwBCdtUv5TmfOkJhPnBg0UjnBQ= -----END CERTIFICATE-----Generated at Sun Sep 7 12:37:36 2025 by rpki-client