$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa File: 8ec2a157-3584-32e5-81a6-826583bef3c9.roa (raw, json) Hash identifier: j8EJzrOvpwu7l6+TVLB8LRbMZKCfNJTO1iRLVhUlIj4= Subject key identifier: 4F:43:59:6D:DD:32:A9:4E:2E:70:A7:13:AF:27:10:81:60:58:99:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDF92AAD80A05D600597C180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa Signing time: Fri 15 Aug 2025 17:56:27 +0000 ROA not before: Fri 15 Aug 2025 17:56:27 +0000 ROA not after: Thu 13 Nov 2025 18:56:27 +0000 asID: 31898 IP address blocks: 168.107.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:f9:2a:ad:80:a0:5d:60:05:97:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:56:27 2025 GMT Not After : Nov 13 18:56:27 2025 GMT Subject: CN=6213996d-95c1-46d6-94f3-5de9e25d133c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:de:0c:0b:24:3b:85:92:45:ab:f8:5b:5e: 98:4c:4b:0d:e9:82:2a:e9:cb:93:5c:11:89:cc:62: b7:51:20:f7:f4:82:08:a1:46:f5:bb:8b:64:f1:d8: e5:c3:ee:f3:e1:a0:eb:b7:a4:7d:94:fe:19:21:42: 2c:c1:6a:92:06:fc:ba:4c:24:1c:de:40:42:ea:65: 0e:80:1f:2c:a6:52:2d:0d:aa:23:02:3b:1c:4a:ea: fe:92:b0:a7:ed:92:8e:4e:d4:f3:c7:45:5e:17:b7: 12:d3:3d:9b:8a:56:ab:ea:8e:dc:0a:8f:02:10:19: d2:ef:7a:c7:cd:9a:2e:d3:b0:3f:9d:3b:f3:6d:de: e1:6f:a0:84:9d:d8:a2:26:9b:3d:52:81:52:f8:08: 55:44:25:c3:42:72:cc:0f:e7:39:a2:04:6c:67:eb: 6f:56:45:84:01:0c:2c:5c:84:a0:ea:57:0e:44:b0: 5b:73:0e:9e:0e:83:35:3e:51:ca:7e:64:2a:fe:94: 5c:3f:0b:2f:af:72:51:2a:ff:f4:fa:c2:53:1c:f3: 4a:66:c5:a4:0f:c2:ea:96:02:2b:ca:9c:ff:e9:00: 17:c3:1e:ef:c8:a4:22:79:97:d9:77:5b:50:d0:b4: 03:52:bb:01:54:5f:dc:e5:79:ca:b9:6f:16:f5:8b: 38:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:59:6D:DD:32:A9:4E:2E:70:A7:13:AF:27:10:81:60:58:99:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ec2a157-3584-32e5-81a6-826583bef3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3f:78:bd:ce:c8:7d:11:0b:fb:90:5f:bf:6f:b6:05:10:78: 10:73:89:0f:b4:1f:40:4d:ed:e8:ed:cf:c2:eb:78:47:bd:ff: 4a:01:92:22:6d:b8:77:91:c0:39:79:de:4b:0d:2c:4e:b0:c6: 88:4f:e2:d7:e4:98:9d:ff:32:e0:4b:b4:35:64:b7:40:dc:30: 2e:3e:c4:5d:b3:17:83:b9:4e:e6:da:3d:03:fd:67:ab:92:2c: 63:3d:2d:6a:88:6d:fd:d7:30:b5:73:a9:a3:f1:b8:64:b8:73: 54:ac:b3:1b:e3:7b:69:b8:6f:36:a5:bd:31:ab:1e:9f:7c:4e: 57:05:3f:ea:9f:f9:09:a6:34:09:d6:20:21:7e:e8:ea:d3:b1: e6:78:57:8c:82:9a:04:c3:0a:0e:5e:9e:9d:b2:f9:40:fb:84: e0:a1:0e:17:3a:0b:24:75:13:d6:b0:fb:31:2c:45:8d:dd:88: 6f:62:d8:62:08:90:51:49:0c:2d:2d:d1:e7:2e:fc:0a:2d:1f: 77:b9:30:ca:a2:16:bf:f5:77:a3:49:6e:f7:1f:dd:cb:b2:3c: 69:9d:77:49:90:37:df:70:05:8e:6e:b8:ed:fb:93:59:9b:4c: d4:2b:ea:a1:bb:81:01:83:c5:b3:a7:dd:2b:cb:e6:aa:10:a4: 9d:9a:60:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd+SqtgKBdYAWXwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3NTYyN1oXDTI1MTExMzE4NTYyN1owLzEtMCsGA1UEAxMk NjIxMzk5NmQtOTVjMS00NmQ2LTk0ZjMtNWRlOWUyNWQxMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2TeDAskO4WSRav4W16YTEsN6YIq6cuTXBGJ zGK3USD39IIIoUb1u4tk8djlw+7z4aDrt6R9lP4ZIUIswWqSBvy6TCQc3kBC6mUO gB8splItDaojAjscSur+krCn7ZKOTtTzx0VeF7cS0z2bilar6o7cCo8CEBnS73rH zZou07A/nTvzbd7hb6CEndiiJps9UoFS+AhVRCXDQnLMD+c5ogRsZ+tvVkWEAQws XISg6lcORLBbcw6eDoM1PlHKfmQq/pRcPwsvr3JRKv/0+sJTHPNKZsWkD8LqlgIr ypz/6QAXwx7vyKQieZfZd1tQ0LQDUrsBVF/c5XnKuW8W9Ys4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9DWW3dMqlOLnCnE68nEIFgWJnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGVjMmExNTctMzU4NC0z MmU1LTgxYTYtODI2NTgzYmVmM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8/eL3OyH0RC/uQX79vtgUQeBBziQ+0H0BN7ejtz8LreEe9/0oBkiJt uHeRwDl53ksNLE6wxohP4tfkmJ3/MuBLtDVkt0DcMC4+xF2zF4O5TubaPQP9Z6uS LGM9LWqIbf3XMLVzqaPxuGS4c1Sssxvje2m4bzalvTGrHp98TlcFP+qf+QmmNAnW ICF+6OrTseZ4V4yCmgTDCg5enp2y+UD7hOChDhc6CyR1E9aw+zEsRY3diG9i2GII kFFJDC0t0ecu/AotH3e5MMqiFr/1d6NJbvcf3cuyPGmdd0mQN99wBY5uuO37k1mb TNQr6qG7gQGDxbOn3SvL5qoQpJ2aYH0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:43 2025 by rpki-client