$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa File: 11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa (raw, json) Hash identifier: 9zaI6+4+2Rsv2yyCAuKXgU+DEfk0sKAyVacspSvod8s= Subject key identifier: 51:6D:46:AA:3C:BB:A7:41:24:E3:1A:AB:10:76:42:A0:63:78:CE:28 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD6123901E4D22B34A6B62E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa Signing time: Sat 09 Aug 2025 19:17:12 +0000 ROA not before: Sat 09 Aug 2025 19:17:12 +0000 ROA not after: Fri 07 Nov 2025 20:17:12 +0000 asID: 31898 IP address blocks: 152.67.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:23:90:1e:4d:22:b3:4a:6b:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:12 2025 GMT Not After : Nov 7 20:17:12 2025 GMT Subject: CN=f4bc195e-f905-42ee-aef5-1c45cef4bc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:ed:99:28:4d:52:b2:1e:07:da:b5:a8:c0: da:ff:64:29:65:f4:f4:cd:b1:b3:c7:59:bc:2f:de: d9:4c:08:e1:1e:c9:97:e6:cd:5d:15:3e:42:a3:f1: 20:1f:be:14:d9:3e:c1:1a:10:97:02:5f:fa:e9:60: c9:33:ee:c2:02:0e:65:08:09:d6:51:35:c6:eb:f8: d7:e5:72:78:cf:74:39:0e:2e:2a:4e:0d:4e:31:84: fa:fc:10:bb:c4:6e:74:92:bc:51:a8:d9:9f:d9:e2: 39:f4:f9:08:12:a0:5b:7d:bc:32:4e:b1:90:94:cf: 25:ed:f9:a6:92:a4:9d:f7:14:7a:52:7f:41:93:ab: 6f:71:68:60:5d:d0:39:51:97:e7:13:19:32:f2:80: 6e:fc:3b:b8:f6:e5:d3:73:82:fd:61:7e:ce:d5:0c: cd:fc:9d:fc:b3:7d:8d:8b:07:9a:53:e5:71:19:bc: 17:94:0c:59:ad:d6:7c:44:f6:36:df:e8:2b:00:52: 1c:f0:42:5d:36:e4:5e:b9:af:a1:e2:57:1c:96:73: 72:f1:80:7f:9d:d7:7e:cc:cd:d2:34:4d:34:91:0e: c0:ff:b7:cd:a8:6f:ac:9b:46:64:b2:03:70:b0:80: e0:4b:34:50:46:77:d3:df:4e:24:78:38:66:1e:26: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6D:46:AA:3C:BB:A7:41:24:E3:1A:AB:10:76:42:A0:63:78:CE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9b:c8:3a:be:6c:de:09:5b:3a:1a:db:69:0b:69:62:7b:34: f3:5a:d9:d9:cf:15:3b:bb:c8:7a:70:33:c8:3a:02:d6:5f:ea: fe:eb:1d:bf:56:00:50:37:58:c3:32:54:9d:46:83:4b:3c:03: eb:c9:51:72:10:90:74:66:7c:7c:5a:88:d7:d2:43:c1:fb:ed: 68:19:b8:e9:1c:39:a7:6f:f1:7c:8d:c5:3d:9e:ed:a5:e2:61: 04:59:e6:fd:cb:e3:24:c4:a6:e9:f2:2c:86:6a:0a:d6:80:0f: e8:88:d3:1a:4e:51:63:dd:c5:38:54:71:42:51:1c:6b:33:0e: 29:4e:1b:cd:0c:84:87:d4:0f:84:7b:54:b6:b9:fd:f3:5d:db: 6f:ea:c9:81:e8:05:94:2b:28:b7:4b:43:49:fe:08:aa:fd:22: e5:47:2a:af:ac:80:9d:17:a6:30:25:93:35:7f:e6:aa:29:dd: d6:14:fa:56:2c:ad:46:32:1c:da:73:ce:2a:05:aa:a8:9b:5b: ea:ed:47:5c:3a:1d:b2:98:2b:81:2f:07:ff:7a:f5:72:08:b8: d6:42:63:62:14:37:d2:27:a4:2a:44:48:a9:8e:a2:95:7c:cc: 3c:02:8b:4c:fc:ad:0b:54:03:51:ed:6e:95:23:6e:96:bc:f0: 13:1a:53:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYSOQHk0is0prYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcxMloXDTI1MTEwNzIwMTcxMlowLzEtMCsGA1UEAxMk ZjRiYzE5NWUtZjkwNS00MmVlLWFlZjUtMWM0NWNlZjRiYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph3tmShNUrIeB9q1qMDa/2QpZfT0zbGzx1m8 L97ZTAjhHsmX5s1dFT5Co/EgH74U2T7BGhCXAl/66WDJM+7CAg5lCAnWUTXG6/jX 5XJ4z3Q5Di4qTg1OMYT6/BC7xG50krxRqNmf2eI59PkIEqBbfbwyTrGQlM8l7fmm kqSd9xR6Un9Bk6tvcWhgXdA5UZfnExky8oBu/Du49uXTc4L9YX7O1QzN/J38s32N iweaU+VxGbwXlAxZrdZ8RPY23+grAFIc8EJdNuReua+h4lcclnNy8YB/ndd+zM3S NE00kQ7A/7fNqG+sm0ZksgNwsIDgSzRQRnfT304keDhmHiYLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFtRqo8u6dBJOMaqxB2QqBjeM4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTFmYThlMWEtMzViNy0z NTRlLThiNjItZmQxOTBiZGE2Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACubyDq+bN4JWzoa22kLaWJ7NPNa2dnPFTu7yHpwM8g6AtZf6v7rHb9W AFA3WMMyVJ1Gg0s8A+vJUXIQkHRmfHxaiNfSQ8H77WgZuOkcOadv8XyNxT2e7aXi YQRZ5v3L4yTEpunyLIZqCtaAD+iI0xpOUWPdxThUcUJRHGszDilOG80MhIfUD4R7 VLa5/fNd22/qyYHoBZQrKLdLQ0n+CKr9IuVHKq+sgJ0XpjAlkzV/5qop3dYU+lYs rUYyHNpzzioFqqibW+rtR1w6HbKYK4EvB/969XIIuNZCY2IUN9InpCpESKmOopV8 zDwCi0z8rQtUA1HtbpUjbpa88BMaU3o= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:09 2025 by rpki-client