$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa File: 77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa (raw, json) Hash identifier: UDdnWjw6fU9ad4xejwnVKrmmLT2cjVBM0XQO8Y30AcI= Subject key identifier: 7C:A6:78:20:37:0B:3E:B5:59:BA:00:84:0A:78:B2:58:53:06:8D:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9772D975801156DA46DCF60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa Signing time: Tue 19 Aug 2025 20:44:14 +0000 ROA not before: Tue 19 Aug 2025 20:44:14 +0000 ROA not after: Mon 17 Nov 2025 21:44:14 +0000 asID: 31898 IP address blocks: 192.29.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:2d:97:58:01:15:6d:a4:6d:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:14 2025 GMT Not After : Nov 17 21:44:14 2025 GMT Subject: CN=acf67d7b-1ff6-41c3-ba81-fe7251fcd5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:62:11:27:ec:c0:60:51:b5:1b:3a:1c:94: ee:9f:b4:e6:fa:c3:64:1b:0b:6e:a2:96:bc:93:84: 7a:8c:74:01:1d:c3:2e:08:63:f7:31:aa:e9:bb:1e: 8a:f0:15:26:94:a7:ce:36:b6:42:01:83:83:9a:f4: 05:1a:2c:e8:22:42:47:11:0f:f5:e2:c2:1f:99:63: 02:98:e2:bb:ac:15:9f:8f:d6:df:03:76:fc:46:56: 59:51:d3:f6:de:7b:5e:28:19:03:89:10:6f:be:03: 66:da:8d:6d:8c:2e:78:fa:d8:29:82:a6:e6:9b:bb: 83:08:63:81:8a:87:fa:a3:c7:0c:84:dc:49:7c:55: e4:23:62:f9:5b:fe:2a:f9:a3:02:e2:66:df:13:b6: 60:49:89:16:14:f9:ed:36:f4:6e:7b:be:53:1f:44: ce:c7:dc:0b:ce:5f:05:6c:d0:e9:ba:60:e4:63:74: af:3d:ae:ce:79:c2:b1:fd:f5:c4:c3:ee:cf:ec:d1: 5c:fe:62:84:0b:01:e9:eb:8a:4d:cb:c4:30:ad:30: cd:1e:62:26:de:b6:58:76:89:39:10:24:6c:34:b1: 02:e3:72:5d:e5:bd:e2:0e:a4:59:98:91:68:24:7c: bf:99:a1:e6:0e:9c:0c:ca:5d:c1:16:de:2c:ca:10: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:78:20:37:0B:3E:B5:59:BA:00:84:0A:78:B2:58:53:06:8D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/77ce02b0-966a-3653-a9cc-0eba28c7c8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:07:c9:f2:05:7c:ca:c6:0e:97:ee:7b:f5:99:69:ba:9e:49: 53:7c:9b:3b:81:60:6a:ee:1a:70:73:30:fb:6b:e5:57:c8:68: 92:23:f1:80:d2:e8:4b:60:00:33:a1:f2:88:ef:76:09:14:b9: 9b:31:d9:99:ed:1c:13:0c:9c:8d:81:65:a3:72:23:57:e4:5b: c6:e9:7d:50:5c:ce:4f:43:3f:79:9b:ae:ac:7a:81:da:9a:64: 54:4d:11:d7:ac:24:79:6b:e1:5d:b1:92:f3:34:5f:85:29:3a: 10:93:7e:b3:ba:23:89:79:07:d8:bb:14:9d:34:a0:fd:1c:7f: ba:b4:8f:d8:99:78:9f:0f:4f:5a:56:3c:b6:ea:98:8b:a5:d9: d6:9d:a7:f3:68:c1:f1:29:e2:7a:9b:f9:72:ba:0d:e0:19:ac: 27:cf:de:45:db:f0:32:bb:a9:4e:ef:1e:4c:dd:19:3d:13:12: ad:db:72:20:60:62:a6:c8:21:58:c4:80:28:12:d0:11:92:6c: 00:10:e1:6d:7a:ff:7b:15:51:8d:e7:3c:ec:96:65:8a:de:14: 72:cc:79:4d:8c:a7:2c:48:63:a6:ce:56:01:c6:52:4b:e5:ca: ac:f9:15:28:cf:2f:1e:90:33:78:0e:1c:03:ab:8e:38:88:df: 7a:07:83:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdy2XWAEVbaRtz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQxNFoXDTI1MTExNzIxNDQxNFowLzEtMCsGA1UEAxMk YWNmNjdkN2ItMWZmNi00MWMzLWJhODEtZmU3MjUxZmNkNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkJiESfswGBRtRs6HJTun7Tm+sNkGwtuopa8 k4R6jHQBHcMuCGP3Marpux6K8BUmlKfONrZCAYODmvQFGizoIkJHEQ/14sIfmWMC mOK7rBWfj9bfA3b8RlZZUdP23nteKBkDiRBvvgNm2o1tjC54+tgpgqbmm7uDCGOB iof6o8cMhNxJfFXkI2L5W/4q+aMC4mbfE7ZgSYkWFPntNvRue75TH0TOx9wLzl8F bNDpumDkY3SvPa7OecKx/fXEw+7P7NFc/mKECwHp64pNy8QwrTDNHmIm3rZYdok5 ECRsNLEC43Jd5b3iDqRZmJFoJHy/maHmDpwMyl3BFt4syhBcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHymeCA3Cz61WboAhAp4slhTBo3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzdjZTAyYjAtOTY2YS0z NjUzLWE5Y2MtMGViYTI4YzdjOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIHyfIFfMrGDpfue/WZabqeSVN8mzuBYGruGnBzMPtr5VfIaJIj8YDS 6EtgADOh8ojvdgkUuZsx2ZntHBMMnI2BZaNyI1fkW8bpfVBczk9DP3mbrqx6gdqa ZFRNEdesJHlr4V2xkvM0X4UpOhCTfrO6I4l5B9i7FJ00oP0cf7q0j9iZeJ8PT1pW PLbqmIul2dadp/NowfEp4nqb+XK6DeAZrCfP3kXb8DK7qU7vHkzdGT0TEq3bciBg YqbIIVjEgCgS0BGSbAAQ4W16/3sVUY3nPOyWZYreFHLMeU2MpyxIY6bOVgHGUkvl yqz5FSjPLx6QM3gOHAOrjjiI33oHgz4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client