$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa File: 6a291944-a71f-31b4-b568-db5f8fd7a909.roa (raw, json) Hash identifier: PIl3u9Emd+iG5lv/vZttRUpIekUwxs0fYw/1YJKW/Gc= Subject key identifier: 46:20:B3:6E:E6:C4:42:DA:45:93:31:5A:42:CF:B7:97:AB:9D:19:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE977FAA41D243F7DFC152600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa Signing time: Tue 19 Aug 2025 20:45:51 +0000 ROA not before: Tue 19 Aug 2025 20:45:51 +0000 ROA not after: Mon 17 Nov 2025 21:45:51 +0000 asID: 31898 IP address blocks: 168.138.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:fa:a4:1d:24:3f:7d:fc:15:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:51 2025 GMT Not After : Nov 17 21:45:51 2025 GMT Subject: CN=b8bf804a-aca3-45ca-97cc-45bf2934e1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:be:e5:63:cf:df:c9:96:4c:06:9e:a7:a3: 7e:57:be:29:07:32:22:2d:e7:90:84:8b:b2:94:b0: 2e:ac:b9:85:7b:3a:c7:34:0b:91:80:cb:d0:46:6a: e7:62:1f:70:93:6a:e7:bf:3c:1d:d7:96:b6:60:bd: f3:b3:d6:4b:98:e1:40:30:1f:8a:52:f6:f9:2c:53: 24:f6:20:74:60:6c:8e:52:bb:2a:f8:3c:15:fc:72: ac:86:89:3b:51:9f:b0:84:15:00:c2:2e:71:08:30: 37:79:d6:8d:2d:1e:13:ca:34:83:a7:c0:8f:f5:6b: e2:66:dd:01:1f:72:6b:1b:5e:17:0e:cd:57:52:54: 91:43:ce:d2:c6:3f:0f:c0:01:f5:82:a7:d8:68:23: e7:58:de:8f:85:81:65:b1:b3:9d:62:bd:11:03:47: 85:f7:cf:aa:5e:77:50:bf:2e:ff:c4:c6:1a:68:58: 68:72:7f:40:e2:21:4e:08:da:66:ff:95:25:60:39: 1e:a1:b2:54:ef:5e:56:0f:06:9e:bc:1e:ce:45:aa: da:48:3d:88:9a:32:ee:f2:4a:60:a8:95:b6:57:37: 1c:09:80:71:bc:0b:12:f5:3c:54:ad:b8:b8:b0:50: f1:30:40:19:ab:5a:0a:b4:4d:b0:f5:3e:51:c0:97: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:B3:6E:E6:C4:42:DA:45:93:31:5A:42:CF:B7:97:AB:9D:19:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a291944-a71f-31b4-b568-db5f8fd7a909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1f:46:3a:32:e0:5e:82:6e:3a:3e:d5:78:c7:84:6b:02:77: 55:12:61:a5:c3:5a:9a:31:e1:b0:e3:ac:76:45:f9:1b:5d:f9: e2:00:dd:55:f9:e6:3f:69:8f:90:3a:bc:e3:4a:b6:48:53:7d: e2:9e:c8:28:e8:7c:7f:7d:9e:6a:1b:2f:9b:0a:16:b1:46:c9: 88:3a:e1:b4:2a:4e:a0:f0:14:e5:cc:de:91:8a:22:54:a4:2f: 87:ab:22:7a:09:32:e9:b4:76:4b:67:b8:5d:6b:d7:5a:4e:f4: 1b:3a:7b:28:ba:4a:98:86:d3:0e:f2:52:3d:77:c3:86:9e:bd: 34:60:05:08:1d:20:6a:d8:38:d1:ec:14:27:5d:59:bd:9f:85: 56:ba:3d:4d:fd:be:ba:97:14:73:9e:a4:83:4d:32:c3:f1:f3: 59:2a:9b:ca:b3:56:a9:70:08:35:e4:ef:ce:24:7b:b1:03:82: d3:7a:6a:75:05:87:af:31:2a:b3:fa:a2:99:54:74:f8:8d:f9: 19:0a:90:c8:f5:53:ad:0c:19:dc:c3:3f:58:57:2d:01:a7:92: 57:58:16:e2:d4:0a:85:b0:a1:1a:2e:b3:ff:90:d7:17:dc:61: 73:86:d1:f7:55:b0:8d:e9:06:3f:74:0d:a1:cd:46:21:d3:33: 50:e8:db:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd/qkHSQ/ffwVJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDU1MVoXDTI1MTExNzIxNDU1MVowLzEtMCsGA1UEAxMk YjhiZjgwNGEtYWNhMy00NWNhLTk3Y2MtNDViZjI5MzRlMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNi+5WPP38mWTAaep6N+V74pBzIiLeeQhIuy lLAurLmFezrHNAuRgMvQRmrnYh9wk2rnvzwd15a2YL3zs9ZLmOFAMB+KUvb5LFMk 9iB0YGyOUrsq+DwV/HKshok7UZ+whBUAwi5xCDA3edaNLR4TyjSDp8CP9WviZt0B H3JrG14XDs1XUlSRQ87Sxj8PwAH1gqfYaCPnWN6PhYFlsbOdYr0RA0eF98+qXndQ vy7/xMYaaFhocn9A4iFOCNpm/5UlYDkeobJU715WDwaevB7ORaraSD2ImjLu8kpg qJW2VzccCYBxvAsS9TxUrbi4sFDxMEAZq1oKtE2w9T5RwJdniwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYgs27mxELaRZMxWkLPt5ernRnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmEyOTE5NDQtYTcxZi0z MWI0LWI1NjgtZGI1ZjhmZDdhOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQfRjoy4F6Cbjo+1XjHhGsCd1USYaXDWpox4bDjrHZF+Rtd+eIA3VX5 5j9pj5A6vONKtkhTfeKeyCjofH99nmobL5sKFrFGyYg64bQqTqDwFOXM3pGKIlSk L4erInoJMum0dktnuF1r11pO9Bs6eyi6SpiG0w7yUj13w4aevTRgBQgdIGrYONHs FCddWb2fhVa6PU39vrqXFHOepINNMsPx81kqm8qzVqlwCDXk784ke7EDgtN6anUF h68xKrP6oplUdPiN+RkKkMj1U60MGdzDP1hXLQGnkldYFuLUCoWwoRous/+Q1xfc YXOG0fdVsI3pBj90DaHNRiHTM1Do2zs= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:27 2025 by rpki-client