$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa File: 86c0befc-6e9d-343e-800e-39ec04f1ce71.roa (raw, json) Hash identifier: tt+J9sFwvCRH8+ExryTHVwXTuuT6PKVqRQwLLpCknfI= Subject key identifier: 43:E1:84:E0:4D:5D:E0:38:ED:8E:32:73:A7:1E:06:06:2D:23:77:0E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE3FB132E6B7CFDCB221640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa Signing time: Fri 15 Aug 2025 17:13:46 +0000 ROA not before: Fri 15 Aug 2025 17:13:46 +0000 ROA not after: Thu 13 Nov 2025 18:13:46 +0000 asID: 31898 IP address blocks: 130.162.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e3:fb:13:2e:6b:7c:fd:cb:22:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:13:46 2025 GMT Not After : Nov 13 18:13:46 2025 GMT Subject: CN=cb056069-b077-455d-b085-c16e53d1ab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:de:a0:03:4b:a5:ce:67:22:3b:fc:42:39: c5:36:18:05:9d:fc:1d:6d:ba:8e:0c:64:89:7f:86: f0:1e:8c:09:5f:57:b8:64:18:8b:66:6b:02:bb:80: ee:2a:e1:07:44:a4:42:b5:db:70:6a:f9:16:10:ed: 58:28:31:69:12:20:69:c7:41:72:e2:03:f7:d0:c6: df:60:88:01:ff:eb:1a:26:a3:06:d9:e3:67:a0:83: 41:b3:69:2b:25:3e:3c:ce:44:c5:e8:63:fb:b2:95: 51:a4:09:17:1e:86:e7:1c:4b:3b:7b:db:26:7c:08: 23:5e:db:d9:95:51:ac:20:16:01:e9:f1:de:64:cc: 72:ae:e2:93:85:73:23:63:d7:0c:92:cd:1b:c7:e1: 85:9b:32:9f:f7:08:f3:4c:ac:72:87:6a:f0:ef:64: 7e:06:08:a8:8c:27:46:ec:4b:19:e6:c5:5b:ef:68: 0b:d6:ac:5d:f2:cb:cb:ef:87:62:77:86:c0:61:6b: 41:1f:a2:b0:dd:6a:f2:c6:3b:71:69:49:87:aa:ec: a2:86:77:61:0d:d9:c2:ae:1a:7e:3c:13:3c:0a:43: b0:35:81:fe:fe:73:1d:13:77:6f:1c:0c:77:a9:3e: 18:8e:77:8d:df:2f:b0:28:f5:19:e2:66:2c:61:9f: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:84:E0:4D:5D:E0:38:ED:8E:32:73:A7:1E:06:06:2D:23:77:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c0befc-6e9d-343e-800e-39ec04f1ce71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 130.162.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e9:33:75:9c:99:d5:e5:9b:ae:01:8f:77:d7:c1:c3:c7:15: c1:f7:ab:79:60:09:76:95:bc:bb:d2:36:07:82:85:5b:1a:0e: 82:d9:a8:d9:96:ed:09:18:ca:e2:34:ad:63:0a:64:1b:13:1c: 98:b0:91:67:ef:4a:ba:64:4b:58:fa:11:60:18:17:dd:c1:be: 9f:06:ae:c6:8b:5d:61:ab:02:88:da:62:8b:87:8e:c0:4c:c4: 66:94:58:de:23:84:cc:be:a8:ad:27:ab:8c:11:1d:56:84:0b: 2e:fc:68:2a:ca:64:46:73:96:fb:4c:d2:59:aa:4a:28:ac:0b: 96:13:df:4b:d2:e9:32:f0:9f:b0:b0:5b:01:d3:68:c8:47:e7: 69:40:84:12:9d:b3:d2:51:b8:2e:dd:e3:10:fe:20:bc:e7:84: 52:ed:d5:6e:0c:b8:04:06:84:7e:bc:03:25:c4:b4:01:27:7e: 87:ed:8c:7f:58:d6:f6:8e:7e:13:ed:14:cf:7f:7a:86:c6:af: 3b:2d:f0:a5:d4:50:6e:15:30:a5:1b:d5:26:f3:f2:36:64:2d: 5a:e7:6d:12:c6:3e:07:ab:18:e5:24:f9:2c:27:97:aa:46:1b: 33:07:e0:ca:ba:1f:d8:08:29:dd:58:1f:1a:70:36:a9:7b:b5: 5b:38:95:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd4/sTLmt8/csiFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTM0NloXDTI1MTExMzE4MTM0NlowLzEtMCsGA1UEAxMk Y2IwNTYwNjktYjA3Ny00NTVkLWIwODUtYzE2ZTUzZDFhYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOPeoANLpc5nIjv8QjnFNhgFnfwdbbqODGSJ f4bwHowJX1e4ZBiLZmsCu4DuKuEHRKRCtdtwavkWEO1YKDFpEiBpx0Fy4gP30Mbf YIgB/+saJqMG2eNnoINBs2krJT48zkTF6GP7spVRpAkXHobnHEs7e9smfAgjXtvZ lVGsIBYB6fHeZMxyruKThXMjY9cMks0bx+GFmzKf9wjzTKxyh2rw72R+BgiojCdG 7EsZ5sVb72gL1qxd8svL74did4bAYWtBH6Kw3WryxjtxaUmHquyihndhDdnCrhp+ PBM8CkOwNYH+/nMdE3dvHAx3qT4YjneN3y+wKPUZ4mYsYZ/prQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPhhOBNXeA47Y4yc6ceBgYtI3cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjMGJlZmMtNmU5ZC0z NDNlLTgwMGUtMzllYzA0ZjFjZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgqLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTpM3WcmdXlm64Bj3fXwcPHFcH3q3lgCXaVvLvSNgeChVsaDoLZqNmW 7QkYyuI0rWMKZBsTHJiwkWfvSrpkS1j6EWAYF93Bvp8GrsaLXWGrAojaYouHjsBM xGaUWN4jhMy+qK0nq4wRHVaECy78aCrKZEZzlvtM0lmqSiisC5YT30vS6TLwn7Cw WwHTaMhH52lAhBKds9JRuC7d4xD+ILznhFLt1W4MuAQGhH68AyXEtAEnfoftjH9Y 1vaOfhPtFM9/eobGrzst8KXUUG4VMKUb1Sbz8jZkLVrnbRLGPgerGOUk+Swnl6pG GzMH4Mq6H9gIKd1YHxpwNql7tVs4lWY= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client