$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa File: 0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa (raw, json) Hash identifier: vmLWsck1mctqUWnIKWtIG/PjhHdHdI3lPBZU3vKMf64= Subject key identifier: 0C:B4:51:A9:25:A5:F3:A8:A7:23:84:0F:AC:1D:02:3F:DE:0E:48:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE661D8EDBC0F6D3585ADA100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa Signing time: Mon 18 Aug 2025 18:13:50 +0000 ROA not before: Mon 18 Aug 2025 18:13:50 +0000 ROA not after: Sun 16 Nov 2025 19:13:50 +0000 asID: 31898 IP address blocks: 192.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:61:d8:ed:bc:0f:6d:35:85:ad:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:13:50 2025 GMT Not After : Nov 16 19:13:50 2025 GMT Subject: CN=da647db1-f2d0-45dc-9b0c-5eb7075408bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:a2:aa:29:30:0b:c2:c5:69:51:06:00:d2: 43:d6:b0:46:89:ed:4f:57:8b:3e:44:72:cc:fd:84: 44:32:e2:d5:e2:64:1a:05:b4:f6:7c:5c:29:af:03: 24:3c:3b:1e:0c:c4:f7:e2:ca:90:98:5c:d2:0d:ab: bd:fa:ac:8a:52:b6:0a:43:1c:53:82:1f:46:ce:51: ea:21:f2:33:d7:6b:98:ee:90:07:49:44:0c:fc:a3: 94:d3:60:ca:86:13:11:61:4e:e7:9d:f5:0b:2d:41: bb:18:16:3a:26:bf:9e:7b:5f:b6:2d:76:02:4f:67: 5a:35:4c:ff:00:b1:6e:e3:bb:89:d2:bf:b1:e2:cb: ee:90:83:ef:06:c3:c9:f0:11:6a:53:5c:2e:ef:70: ab:a6:8d:70:28:42:11:70:08:ed:b9:69:96:98:33: 3c:e9:9d:c8:af:5f:2f:c8:41:24:fb:c9:8c:81:e7: f7:01:88:1c:31:26:36:42:33:c0:a1:7a:fd:42:f5: ee:17:7a:15:84:37:dd:ab:ec:e1:bf:d0:fe:68:a3: ab:74:c1:c3:6c:18:25:a5:c6:24:cd:1f:e8:70:d0: 3c:ad:85:f2:59:e5:8c:0c:50:5b:8b:f3:10:2a:b3: 3f:ec:a7:25:37:cb:d5:e0:b1:52:fc:d6:98:01:e1: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:51:A9:25:A5:F3:A8:A7:23:84:0F:AC:1D:02:3F:DE:0E:48:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1e:19:24:3a:93:ca:cd:42:1c:06:4f:81:49:58:77:57:de: 94:95:f0:66:82:34:8c:30:ba:a6:ee:f5:a8:e6:e6:ee:9d:ec: 01:58:a0:cf:31:13:7d:6c:40:36:3a:21:d2:20:d9:24:6e:3e: 48:91:f0:5a:72:36:72:73:5e:90:4c:ab:a2:65:8e:65:b7:e1: 0d:22:d7:16:9f:ef:65:97:80:f2:2d:ae:7c:6c:17:f7:19:2d: e2:eb:fd:d4:b3:a0:95:9e:7e:94:3b:5b:f9:a5:7f:1f:0a:ad: 7f:fb:4c:94:a9:62:29:ab:15:47:d4:97:50:aa:40:df:6a:9b: 57:c3:d3:40:2f:33:62:ba:2a:d5:88:68:e9:47:de:9b:64:9b: 57:ad:fb:60:16:d6:2b:25:0d:7b:d1:9b:e3:77:2c:22:f6:13: 84:1d:de:c1:f7:1d:f8:ef:5d:a2:0a:61:fa:a1:0c:c6:39:b7: b5:3a:c1:24:d2:ac:79:a2:76:17:9a:2e:fe:42:8e:99:9f:69: 10:38:e7:ec:23:20:70:83:eb:7d:07:2f:0b:89:41:80:12:c1: 97:20:54:df:2c:c8:b1:ef:dd:29:58:66:96:0d:16:b1:f0:89: a4:46:72:78:85:62:be:62:dd:0b:0f:1b:7b:74:19:d5:49:64: 1a:92:bb:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYdjtvA9tNYWtoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTM1MFoXDTI1MTExNjE5MTM1MFowLzEtMCsGA1UEAxMk ZGE2NDdkYjEtZjJkMC00NWRjLTliMGMtNWViNzA3NTQwOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6iqikwC8LFaVEGANJD1rBGie1PV4s+RHLM /YREMuLV4mQaBbT2fFwprwMkPDseDMT34sqQmFzSDau9+qyKUrYKQxxTgh9GzlHq IfIz12uY7pAHSUQM/KOU02DKhhMRYU7nnfULLUG7GBY6Jr+ee1+2LXYCT2daNUz/ ALFu47uJ0r+x4svukIPvBsPJ8BFqU1wu73Crpo1wKEIRcAjtuWmWmDM86Z3Ir18v yEEk+8mMgef3AYgcMSY2QjPAoXr9QvXuF3oVhDfdq+zhv9D+aKOrdMHDbBglpcYk zR/ocNA8rYXyWeWMDFBbi/MQKrM/7KclN8vV4LFS/NaYAeHtWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy0UaklpfOopyOED6wdAj/eDkhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGM1MmM5ZDUtMDg5Mi0z YmI4LWIzZjEtOGM0NDNkYThmOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgeGSQ6k8rNQhwGT4FJWHdX3pSV8GaCNIwwuqbu9ajm5u6d7AFYoM8x E31sQDY6IdIg2SRuPkiR8FpyNnJzXpBMq6JljmW34Q0i1xaf72WXgPItrnxsF/cZ LeLr/dSzoJWefpQ7W/mlfx8KrX/7TJSpYimrFUfUl1CqQN9qm1fD00AvM2K6KtWI aOlH3ptkm1et+2AW1islDXvRm+N3LCL2E4Qd3sH3HfjvXaIKYfqhDMY5t7U6wSTS rHmidheaLv5CjpmfaRA45+wjIHCD630HLwuJQYASwZcgVN8syLHv3SlYZpYNFrHw iaRGcniFYr5i3QsPG3t0GdVJZBqSu0w= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:19 2025 by rpki-client