$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b10b450-9d9c-33cf-819f-6d6112fa20ed.roa File: 0b10b450-9d9c-33cf-819f-6d6112fa20ed.roa (raw, json) Hash identifier: hKFRb5JBBYVjEax9k3o12xBySM3Q6xhOtkfm9Qo5ZMU= Subject key identifier: D9:5D:D9:D0:51:59:05:E9:53:20:D1:5C:73:0B:E8:C7:C0:B9:56:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD613AF28BE8DB8B2DAB7BA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b10b450-9d9c-33cf-819f-6d6112fa20ed.roa Signing time: Sat 09 Aug 2025 19:17:23 +0000 ROA not before: Sat 09 Aug 2025 19:17:23 +0000 ROA not after: Fri 07 Nov 2025 20:17:23 +0000 asID: 31898 IP address blocks: 132.145.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:3a:f2:8b:e8:db:8b:2d:ab:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:23 2025 GMT Not After : Nov 7 20:17:23 2025 GMT Subject: CN=b11f387d-5bd4-4c74-b0e2-71aa54392c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:ab:28:7b:03:e9:6b:75:1d:9c:24:51:62: 12:d7:f3:8d:ed:4d:fd:25:86:9e:61:27:8d:37:cb: 70:0d:05:24:ec:0e:e1:c4:48:a0:16:df:7f:1c:fe: b2:51:05:bf:21:0a:be:b0:85:81:6b:00:cb:f4:4d: fc:ca:9e:f8:7c:03:9e:af:40:f0:1c:23:1f:77:79: 52:2f:4a:06:92:01:ae:0d:32:7e:bc:34:f8:fc:48: c5:c6:65:66:28:a8:bc:6c:c8:c4:61:00:16:9f:af: 0e:df:a9:ab:62:a1:63:0a:6a:f2:8c:95:09:4f:cc: 9b:f3:e4:32:3c:78:82:92:8a:f9:be:3a:b2:44:c7: 5f:23:cf:19:ce:bb:e4:bf:00:19:bb:98:58:aa:56: 02:ca:ce:01:65:04:8e:41:a3:6e:dc:02:cb:e8:ce: 81:59:84:db:51:d2:bb:97:f0:bf:c6:e4:2d:9e:c6: b3:f9:57:82:34:46:60:9f:08:db:cf:13:77:cc:0e: 06:df:43:c4:41:c2:1d:37:81:24:59:b3:21:6d:18: d2:9f:08:ab:62:02:0a:6d:e7:06:fa:7d:43:5c:5a: a5:6f:5a:06:f8:b6:0c:ae:72:e8:d6:98:2d:db:0f: 3d:2d:5c:77:1c:a5:8a:5d:21:f2:1b:00:ad:43:c5: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5D:D9:D0:51:59:05:E9:53:20:D1:5C:73:0B:E8:C7:C0:B9:56:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b10b450-9d9c-33cf-819f-6d6112fa20ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e8:54:27:be:d6:8a:4b:ee:2a:55:e8:6e:70:c4:c8:2d:dd: a4:ea:25:e8:52:3a:60:15:17:16:76:b8:02:d2:ab:ed:84:ed: bb:b3:d0:17:12:b4:de:dd:00:cb:b3:01:d6:06:17:d2:e1:85: a6:d9:5c:ed:d2:33:c8:d2:b0:20:01:ee:12:f2:a4:05:8b:b5: 78:91:f1:81:86:04:03:73:1d:22:3d:9d:81:e0:71:75:6c:58: 02:21:f2:3c:02:3b:72:c6:c5:ae:ec:76:1a:dd:b6:83:00:df: 8f:dc:7d:e3:a0:93:b1:d4:65:cd:1c:1e:0d:2e:9a:eb:03:ee: 64:9b:df:c3:2c:18:25:91:cf:a5:9b:85:2f:28:fd:a6:00:8a: 93:92:d5:fa:5b:fd:18:cf:3e:d3:24:e7:9d:4e:c9:df:23:81: f7:48:d6:19:8c:8c:f6:5b:06:d6:a0:af:8a:96:a9:01:87:99: f8:07:c8:2a:e0:df:b4:14:b1:4c:cc:64:98:76:22:b5:18:d2: 7e:ac:5e:30:b3:72:eb:2a:ae:10:4f:8e:fc:11:0d:7c:5f:94: 70:0c:51:3a:85:15:d2:33:f2:6e:cd:54:da:3d:7b:0f:11:4a: 3d:e3:77:58:29:30:94:bc:b6:b5:d4:9b:12:66:a3:60:d4:b4: 64:6e:0f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYTryi+jbiy2re6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcyM1oXDTI1MTEwNzIwMTcyM1owLzEtMCsGA1UEAxMk YjExZjM4N2QtNWJkNC00Yzc0LWIwZTItNzFhYTU0MzkyYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPyrKHsD6Wt1HZwkUWIS1/ON7U39JYaeYSeN N8twDQUk7A7hxEigFt9/HP6yUQW/IQq+sIWBawDL9E38yp74fAOer0DwHCMfd3lS L0oGkgGuDTJ+vDT4/EjFxmVmKKi8bMjEYQAWn68O36mrYqFjCmryjJUJT8yb8+Qy PHiCkor5vjqyRMdfI88ZzrvkvwAZu5hYqlYCys4BZQSOQaNu3ALL6M6BWYTbUdK7 l/C/xuQtnsaz+VeCNEZgnwjbzxN3zA4G30PEQcIdN4EkWbMhbRjSnwirYgIKbecG +n1DXFqlb1oG+LYMrnLo1pgt2w89LVx3HKWKXSHyGwCtQ8USbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNld2dBRWQXpUyDRXHML6MfAuVahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGIxMGI0NTAtOWQ5Yy0z M2NmLTgxOWYtNmQ2MTEyZmEyMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/oVCe+1opL7ipV6G5wxMgt3aTqJehSOmAVFxZ2uALSq+2E7buz0BcS tN7dAMuzAdYGF9LhhabZXO3SM8jSsCAB7hLypAWLtXiR8YGGBANzHSI9nYHgcXVs WAIh8jwCO3LGxa7sdhrdtoMA34/cfeOgk7HUZc0cHg0umusD7mSb38MsGCWRz6Wb hS8o/aYAipOS1fpb/RjPPtMk551Oyd8jgfdI1hmMjPZbBtagr4qWqQGHmfgHyCrg 37QUsUzMZJh2IrUY0n6sXjCzcusqrhBPjvwRDXxflHAMUTqFFdIz8m7NVNo9ew8R Sj3jd1gpMJS8trXUmxJmo2DUtGRuD+s= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:53 2025 by rpki-client