$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/733c7680-3cc4-396c-a3b6-5c6818bc7e44.roa File: 733c7680-3cc4-396c-a3b6-5c6818bc7e44.roa (raw, json) Hash identifier: DPefQwuHBso56jg86kDecWUTk4IVUiGLftgs7G/TSds= Subject key identifier: A1:B7:FA:2B:24:F1:B0:93:E5:2B:F2:C9:66:24:63:31:D1:41:4B:FA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6614ED26C90F42D0BCD1F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/733c7680-3cc4-396c-a3b6-5c6818bc7e44.roa Signing time: Mon 18 Aug 2025 18:12:45 +0000 ROA not before: Mon 18 Aug 2025 18:12:45 +0000 ROA not after: Sun 16 Nov 2025 19:12:45 +0000 asID: 31898 IP address blocks: 131.186.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:61:4e:d2:6c:90:f4:2d:0b:cd:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:12:45 2025 GMT Not After : Nov 16 19:12:45 2025 GMT Subject: CN=a71e2563-3157-4a1e-9ba8-8666873b11d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:7c:95:a8:b2:10:02:aa:df:ec:ab:5a:0e: 6f:68:3c:9f:1f:86:f3:5c:49:ed:5d:38:33:8e:39: 39:b3:db:7d:6f:6e:14:ea:2d:70:27:a1:ad:93:be: 2e:f5:d2:96:ae:6f:0d:dc:42:25:80:c2:63:da:1f: 7a:b9:77:9e:1a:4a:48:c7:ea:e9:10:98:c8:93:55: 47:ca:4e:f6:ba:d1:83:1a:0c:09:4a:56:af:a4:00: 96:68:06:bb:8b:e9:d6:fa:de:0f:15:7e:03:6e:33: c1:db:42:92:5f:5f:75:99:9b:e5:47:7d:23:b7:e3: ee:c3:d1:f9:e2:75:99:8f:5c:3d:aa:8a:a8:0e:00: e4:de:cd:3a:7c:be:31:3f:0f:4c:61:c9:a8:25:a6: b1:a6:3a:73:de:57:ab:10:9a:af:62:7d:8a:e1:e6: 53:41:1e:88:c9:e3:7b:a8:6f:cd:61:b4:d3:a4:43: 95:3f:f8:3e:f6:98:6d:3b:a0:8a:4e:a6:cb:3a:be: f1:a1:bd:8b:10:21:c0:a9:1d:27:f4:ee:fb:31:5b: 2d:82:77:b9:8d:d4:d8:eb:09:be:2f:fd:3f:83:a0: 96:88:ba:31:a6:98:29:a4:80:10:ac:cc:42:c6:45: b2:1d:fb:a4:24:82:16:ae:67:75:ce:64:72:24:7d: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B7:FA:2B:24:F1:B0:93:E5:2B:F2:C9:66:24:63:31:D1:41:4B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/733c7680-3cc4-396c-a3b6-5c6818bc7e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ef:7e:2d:9e:cf:5b:4b:16:16:e6:9e:5d:75:58:80:8d:3c: 1a:8d:ad:97:a4:a1:ff:53:90:80:9d:32:94:5b:91:82:75:48: e6:97:fa:99:6f:c6:b9:97:8d:39:d6:b4:c3:72:2c:4a:c4:68: ea:60:5f:8a:2b:37:7b:1f:29:30:22:3d:de:4e:95:83:6f:85: c7:43:b3:97:aa:ec:bc:71:3c:0f:32:8f:31:51:66:6a:8c:7c: d5:26:bf:7b:d2:ec:1f:72:d3:fc:0f:24:c7:d2:ce:93:0f:b0: c7:ea:66:4a:bc:16:e0:8d:d2:c9:5a:ab:ee:a6:54:6b:af:19: 36:06:ea:ac:4e:6c:29:bd:10:8b:88:13:ec:8f:e7:7e:d7:c2: 7f:7e:70:cc:5a:52:72:1c:98:62:ca:f9:1e:7b:62:40:10:c1: fe:6d:36:ed:80:b4:a5:98:27:18:7c:7c:f1:e2:74:36:ca:b6: e8:6a:be:6d:f6:d6:d0:32:b8:60:38:d7:0f:bb:e5:e3:a3:09: b4:64:3e:13:d2:94:95:b1:a3:52:5f:4d:2e:73:e2:ea:04:b3: d5:a3:3f:18:86:39:17:c2:3d:0c:0b:31:66:02:39:81:a6:28: df:09:03:07:8f:e3:58:2f:97:3e:49:72:7a:07:f3:ee:a9:e1: 16:ef:0a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYU7SbJD0LQvNH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTI0NVoXDTI1MTExNjE5MTI0NVowLzEtMCsGA1UEAxMk YTcxZTI1NjMtMzE1Ny00YTFlLTliYTgtODY2Njg3M2IxMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpR8laiyEAKq3+yrWg5vaDyfH4bzXEntXTgz jjk5s9t9b24U6i1wJ6Gtk74u9dKWrm8N3EIlgMJj2h96uXeeGkpIx+rpEJjIk1VH yk72utGDGgwJSlavpACWaAa7i+nW+t4PFX4DbjPB20KSX191mZvlR30jt+Puw9H5 4nWZj1w9qoqoDgDk3s06fL4xPw9MYcmoJaaxpjpz3lerEJqvYn2K4eZTQR6IyeN7 qG/NYbTTpEOVP/g+9phtO6CKTqbLOr7xob2LECHAqR0n9O77MVstgne5jdTY6wm+ L/0/g6CWiLoxppgppIAQrMxCxkWyHfukJIIWrmd1zmRyJH1OWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG3+isk8bCT5SvyyWYkYzHRQUv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzMzYzc2ODAtM2NjNC0z OTZjLWEzYjYtNWM2ODE4YmM3ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg7o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADvfi2ez1tLFhbmnl11WICNPBqNrZekof9TkICdMpRbkYJ1SOaX+plv xrmXjTnWtMNyLErEaOpgX4orN3sfKTAiPd5OlYNvhcdDs5eq7LxxPA8yjzFRZmqM fNUmv3vS7B9y0/wPJMfSzpMPsMfqZkq8FuCN0slaq+6mVGuvGTYG6qxObCm9EIuI E+yP537Xwn9+cMxaUnIcmGLK+R57YkAQwf5tNu2AtKWYJxh8fPHidDbKtuhqvm32 1tAyuGA41w+75eOjCbRkPhPSlJWxo1JfTS5z4uoEs9WjPxiGORfCPQwLMWYCOYGm KN8JAweP41gvlz5JcnoH8+6p4RbvCj0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client