$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa File: 23c5e5ea-0067-3a34-834a-532581a87ad9.roa (raw, json) Hash identifier: KTGck5a34DnGCZb4IZtXnChTIgnRh2Lnp2YnRkLtC9U= Subject key identifier: 6A:13:5D:80:00:11:1A:94:51:AD:70:B8:3F:32:D3:D7:4E:AB:CC:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE4322C209447FD349D5D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa Signing time: Fri 15 Aug 2025 17:14:12 +0000 ROA not before: Fri 15 Aug 2025 17:14:12 +0000 ROA not after: Thu 13 Nov 2025 18:14:12 +0000 asID: 31898 IP address blocks: 207.211.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e4:32:2c:20:94:47:fd:34:9d:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:14:12 2025 GMT Not After : Nov 13 18:14:12 2025 GMT Subject: CN=44e84146-ad26-45ed-b0f3-b2c930ab1a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:ac:bb:ec:02:b2:72:c3:09:11:44:bb:a9: 43:0a:4d:d2:ef:43:46:bc:b1:75:34:6e:54:f4:48: a4:57:84:8c:53:55:30:0e:20:6d:08:d7:06:fe:0d: fa:6e:f2:b9:3a:23:24:c5:8f:e4:8c:5a:5d:fd:75: 91:27:79:82:22:55:35:20:8d:1c:2c:e7:4c:c1:54: 6c:c8:b6:90:70:48:aa:2f:48:97:ec:24:c8:a1:0a: de:53:76:55:79:3c:05:e4:2a:f6:d1:99:94:54:33: 9c:9d:ca:41:0a:84:fd:be:56:b8:4e:24:1a:26:81: 1b:78:81:40:1b:26:7e:b9:65:4e:22:16:3a:25:ef: 7b:30:71:0a:89:f1:e1:92:f0:45:94:cf:07:14:52: 41:25:7b:90:f7:7c:85:8e:8e:90:87:41:76:e0:3b: 1f:8c:cd:01:37:1e:3f:9f:84:7f:a4:02:f0:b3:af: e9:23:5e:75:79:39:14:57:ad:42:88:bf:eb:78:77: 46:2d:87:58:b3:f8:f6:66:97:7a:28:ce:43:78:4d: 70:56:72:90:73:79:7d:1f:3c:5e:45:29:8f:e3:97: ed:dd:55:2f:ab:f6:ac:9a:3c:c0:da:63:da:45:f6: c6:d9:e9:73:37:42:34:4e:0a:b1:ce:44:88:a9:0b: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:13:5D:80:00:11:1A:94:51:AD:70:B8:3F:32:D3:D7:4E:AB:CC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23c5e5ea-0067-3a34-834a-532581a87ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.211.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5c:80:9d:8c:3d:32:5d:ee:81:b7:a5:03:9a:e8:87:68:26: 49:04:54:bb:25:2e:d0:7f:08:f5:06:72:6f:00:58:78:ec:2c: 28:77:d8:9b:09:12:cb:8b:36:46:f7:21:df:2f:cb:0e:b3:2f: 80:24:c9:8b:f2:89:53:30:38:bb:ef:54:34:5b:94:1e:d9:77: 74:2c:a9:35:8f:d0:8a:b5:42:a1:6d:56:f6:0e:fd:06:d2:dd: e1:0f:de:c0:ff:70:ca:6f:9b:e5:c7:a9:cf:ca:47:00:f2:a7: 4f:48:0d:31:f9:e4:3f:47:68:13:02:85:a9:8d:28:5d:e3:3e: cc:8e:0f:1c:54:09:4d:0e:7b:5d:e8:c7:f2:d4:65:31:89:da: 93:ff:9d:22:10:fd:2e:89:1c:aa:20:aa:4c:b8:bc:2e:3d:97: 92:cb:c5:83:7f:7f:8d:cb:32:e9:79:c3:46:56:a8:b5:a3:c1: 98:fa:9d:c5:5c:40:6f:ee:91:d0:b3:a2:0f:55:e1:fa:94:e4: db:42:29:92:89:6a:6c:1b:72:4a:49:b5:f0:d5:84:01:f8:b1: 7a:96:93:92:9c:82:40:dc:9f:05:59:21:ef:9c:79:b8:bd:54: 96:a0:f3:db:a1:35:8c:37:e0:36:42:4b:98:37:d2:6a:bb:b5: 75:65:8b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd5DIsIJRH/TSdXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTQxMloXDTI1MTExMzE4MTQxMlowLzEtMCsGA1UEAxMk NDRlODQxNDYtYWQyNi00NWVkLWIwZjMtYjJjOTMwYWIxYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraysu+wCsnLDCRFEu6lDCk3S70NGvLF1NG5U 9EikV4SMU1UwDiBtCNcG/g36bvK5OiMkxY/kjFpd/XWRJ3mCIlU1II0cLOdMwVRs yLaQcEiqL0iX7CTIoQreU3ZVeTwF5Cr20ZmUVDOcncpBCoT9vla4TiQaJoEbeIFA GyZ+uWVOIhY6Je97MHEKifHhkvBFlM8HFFJBJXuQ93yFjo6Qh0F24DsfjM0BNx4/ n4R/pALws6/pI151eTkUV61CiL/reHdGLYdYs/j2Zpd6KM5DeE1wVnKQc3l9Hzxe RSmP45ft3VUvq/asmjzA2mPaRfbG2elzN0I0TgqxzkSIqQvZ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoTXYAAERqUUa1wuD8y09dOq8wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNjNWU1ZWEtMDA2Ny0z YTM0LTgzNGEtNTMyNTgxYTg3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNcgJ2MPTJd7oG3pQOa6IdoJkkEVLslLtB/CPUGcm8AWHjsLCh32JsJ EsuLNkb3Id8vyw6zL4AkyYvyiVMwOLvvVDRblB7Zd3QsqTWP0Iq1QqFtVvYO/QbS 3eEP3sD/cMpvm+XHqc/KRwDyp09IDTH55D9HaBMChamNKF3jPsyODxxUCU0Oe13o x/LUZTGJ2pP/nSIQ/S6JHKogqky4vC49l5LLxYN/f43LMul5w0ZWqLWjwZj6ncVc QG/ukdCzog9V4fqU5NtCKZKJamwbckpJtfDVhAH4sXqWk5KcgkDcnwVZIe+cebi9 VJag89uhNYw34DZCS5g30mq7tXVli50= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:11 2025 by rpki-client