$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa File: 127cd072-7bfc-37b0-9056-b94e5403a384.roa (raw, json) Hash identifier: AaUgZafzguxa+mzoE6iJedMUDamHR9AsEY5RZsFuNJc= Subject key identifier: F4:B7:ED:0B:2F:59:7A:79:8A:F5:7F:FB:A8:BD:D3:F4:BB:F5:FA:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE97700A0E9C7BF293D107740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa Signing time: Tue 19 Aug 2025 20:43:53 +0000 ROA not before: Tue 19 Aug 2025 20:43:53 +0000 ROA not after: Mon 17 Nov 2025 21:43:53 +0000 asID: 31898 IP address blocks: 132.226.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:00:a0:e9:c7:bf:29:3d:10:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:43:53 2025 GMT Not After : Nov 17 21:43:53 2025 GMT Subject: CN=c1fc9a80-4923-4dec-bbc0-7995c3f884a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:d4:f1:3e:13:95:d8:32:d3:14:b9:06:7b: 44:78:79:5a:5f:60:e9:54:2b:e0:fc:23:23:8f:0f: ce:00:6d:3e:3b:74:96:ac:57:52:f6:c3:88:23:aa: ad:4e:db:8f:86:84:ba:63:76:e2:75:e6:e5:77:44: b4:f4:a5:8a:35:8e:62:26:01:ec:bd:a8:69:10:8f: bb:b6:b8:fe:89:d4:00:e5:4b:d9:7c:6e:e0:c4:c9: ba:a2:31:66:5d:18:f2:25:8b:5a:39:36:54:8e:70: 94:2d:89:34:78:3f:ad:04:05:fd:43:2f:85:bb:b4: 28:08:67:42:72:03:ab:e0:a2:6a:63:44:05:0d:37: dd:14:84:71:bf:28:87:40:75:d7:d0:e8:c1:d3:b1: af:f0:45:96:4c:19:a6:84:15:a3:ad:de:2b:33:40: 70:5d:a8:95:1e:e7:f1:8e:8c:ff:11:0a:61:33:e5: 01:8d:c4:64:3a:de:33:60:df:32:32:82:bc:0d:78: 5b:0f:70:1d:d3:85:f3:29:6c:12:4f:a4:6c:c0:79: 13:16:90:09:50:3e:83:4b:c4:4c:97:a7:c0:02:6f: 09:47:33:d4:65:e1:4e:c8:ec:d0:fd:cc:74:4a:b2: 2a:b8:6f:d7:fd:40:11:d3:88:76:71:95:0d:98:2e: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:ED:0B:2F:59:7A:79:8A:F5:7F:FB:A8:BD:D3:F4:BB:F5:FA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:02:24:b8:b6:06:77:0a:36:e4:7f:20:98:bd:6e:fd:d7:49: 85:2f:69:12:d0:c0:99:46:2d:b7:b9:1d:15:30:15:d7:01:35: a9:93:ce:65:9b:a0:48:51:60:3a:c5:e3:46:80:92:eb:3c:f0: 5f:15:0b:9f:81:68:cf:31:38:d1:b3:f4:92:fb:3d:fa:c0:2e: b2:75:70:0a:99:d2:52:7b:77:ab:69:81:31:65:1f:49:a8:a4: 3a:10:ec:02:df:be:77:2d:cd:1a:85:92:90:79:77:c6:b4:ae: 3b:d3:75:c2:cd:91:2c:38:17:2a:bf:87:22:1f:c2:83:32:2b: fd:b4:38:5b:e2:d4:ce:c4:38:f1:dc:a5:5a:a6:d9:68:81:c6: ea:8a:12:31:44:ce:35:da:ac:74:2d:ab:b9:e2:c5:fe:2b:4d: ef:b2:6d:fc:2b:32:04:29:c2:e9:cd:c2:6d:68:5e:31:ba:4e: 06:73:1d:94:8e:15:cd:06:5e:23:9e:82:f7:3c:69:b2:cf:fa: 06:2d:4e:3f:b8:0e:40:c9:f1:96:b9:d3:41:b7:ec:d4:9a:59: 1b:99:01:c5:b2:e4:dd:f9:33:ec:6a:ad:1d:8f:7d:e2:d3:73: 49:b8:97:a5:5b:b1:ff:74:1c:16:12:6f:20:dd:c1:a6:8f:a9: e8:c7:b2:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdwCg6ce/KT0Qd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDM1M1oXDTI1MTExNzIxNDM1M1owLzEtMCsGA1UEAxMk YzFmYzlhODAtNDkyMy00ZGVjLWJiYzAtNzk5NWMzZjg4NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wzU8T4Tldgy0xS5BntEeHlaX2DpVCvg/CMj jw/OAG0+O3SWrFdS9sOII6qtTtuPhoS6Y3bidebld0S09KWKNY5iJgHsvahpEI+7 trj+idQA5UvZfG7gxMm6ojFmXRjyJYtaOTZUjnCULYk0eD+tBAX9Qy+Fu7QoCGdC cgOr4KJqY0QFDTfdFIRxvyiHQHXX0OjB07Gv8EWWTBmmhBWjrd4rM0BwXaiVHufx joz/EQphM+UBjcRkOt4zYN8yMoK8DXhbD3Ad04XzKWwST6RswHkTFpAJUD6DS8RM l6fAAm8JRzPUZeFOyOzQ/cx0SrIquG/X/UAR04h2cZUNmC60eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS37QsvWXp5ivV/+6i90/S79fraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI3Y2QwNzItN2JmYy0z N2IwLTkwNTYtYjk0ZTU0MDNhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhOLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0CJLi2BncKNuR/IJi9bv3XSYUvaRLQwJlGLbe5HRUwFdcBNamTzmWb oEhRYDrF40aAkus88F8VC5+BaM8xONGz9JL7PfrALrJ1cAqZ0lJ7d6tpgTFlH0mo pDoQ7ALfvnctzRqFkpB5d8a0rjvTdcLNkSw4Fyq/hyIfwoMyK/20OFvi1M7EOPHc pVqm2WiBxuqKEjFEzjXarHQtq7nixf4rTe+ybfwrMgQpwunNwm1oXjG6TgZzHZSO Fc0GXiOegvc8abLP+gYtTj+4DkDJ8Za500G37NSaWRuZAcWy5N35M+xqrR2PfeLT c0m4l6Vbsf90HBYSbyDdwaaPqejHshM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:17 2025 by rpki-client