$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa File: 8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa (raw, json) Hash identifier: APEwBQp0ORQXYonopbEVlIDiBm2NI8o8lpvPD1rbtW0= Subject key identifier: 80:27:A2:74:CF:1F:56:43:DF:35:FF:58:BD:34:40:F9:3A:F6:67:80 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE59A38DC9906585EC53FE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa Signing time: Fri 15 Aug 2025 21:10:50 +0000 ROA not before: Fri 15 Aug 2025 21:10:50 +0000 ROA not after: Thu 13 Nov 2025 22:10:50 +0000 asID: 31898 IP address blocks: 68.233.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:a3:8d:c9:90:65:85:ec:53:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:50 2025 GMT Not After : Nov 13 22:10:50 2025 GMT Subject: CN=8dedc18d-3318-48ce-8745-e138f88d2a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:3e:f1:65:9e:0d:ff:b9:20:61:b8:cf:d1: a3:c0:60:da:ba:2a:13:76:05:69:75:c6:c6:43:aa: fa:a0:9d:5a:34:6d:c3:88:dc:0b:bf:af:51:a5:59: 30:3e:29:23:3b:7a:b2:d1:d7:7e:da:1f:93:25:ef: 5b:4f:8e:f2:f9:b4:82:d4:9b:3e:e0:e2:9e:52:7c: fa:86:0a:da:e5:ef:b6:a3:e3:b1:2d:1d:aa:ee:18: 36:df:50:4f:c6:13:6f:20:bb:ba:6f:d8:1e:c2:67: a7:7b:58:29:fd:10:9a:85:ef:6f:ce:d9:8b:a5:b2: 3b:96:23:f0:ec:c4:c8:93:b1:28:b4:19:de:cf:60: df:e3:23:2e:6e:eb:0f:7e:3d:7c:fa:ef:14:91:d0: e9:33:5b:4b:28:d6:56:8d:3d:f7:16:24:66:38:64: a6:e7:fb:9c:d3:20:e9:4d:09:0f:2b:8f:5f:61:fb: 6b:7b:08:de:02:1e:53:8c:e6:0e:a5:b0:70:9d:b0: fd:6b:3d:25:f4:4e:96:f7:ad:d2:22:77:44:3f:07: 0e:c0:67:ec:65:90:bb:6a:32:8d:0f:35:31:41:2f: 25:9d:54:45:69:2b:a6:71:29:8c:df:30:42:04:91: 67:0d:86:54:c9:7e:a8:ed:cc:42:35:af:73:fd:5a: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:A2:74:CF:1F:56:43:DF:35:FF:58:BD:34:40:F9:3A:F6:67:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f2ab85e-02ef-3896-8c69-9fc85acdcc7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 68.233.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f8:ee:81:5f:90:e4:9f:9c:60:cb:3e:fa:18:cc:64:ed:4d: b6:7d:80:93:22:be:1a:6f:18:09:e0:70:72:5a:5a:94:4e:d4: 96:10:5a:10:19:44:08:f6:e1:1a:3c:3a:93:52:3f:03:df:ab: 8c:30:86:76:cb:0f:8a:f0:2a:9e:6f:1b:56:73:f2:60:0a:d5: ee:b9:4e:f7:e4:ab:fa:b7:91:59:98:68:71:9f:d2:25:4b:89: ea:12:2e:68:01:b2:54:62:5d:a5:1e:62:16:8d:00:e2:43:af: 0b:57:7f:07:60:4c:c4:87:46:b7:8a:1f:fe:f0:1a:6b:dc:5d: 1e:c4:d4:97:9a:f6:4b:aa:5a:02:64:e9:8b:67:3e:39:7e:a7: 05:4a:c0:c6:33:71:8a:1e:52:36:f6:72:ff:06:22:cc:c7:a4: 5f:b6:32:2a:49:97:b7:1e:e5:1e:7c:18:85:aa:a2:95:7f:72: 80:0f:59:12:c5:73:68:49:ff:04:58:b1:06:86:85:2d:a1:aa: 88:1e:8d:d3:05:9e:81:d8:e7:45:1c:a0:d6:e5:de:65:7c:78: 89:a8:b8:bc:cb:b2:d1:55:82:a8:0a:a5:6b:c1:07:e9:f1:52: 91:2e:27:3e:5d:0e:52:28:c9:f7:69:89:e6:55:98:69:c3:1c: 0b:1d:ad:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWaONyZBlhexT/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTA1MFoXDTI1MTExMzIyMTA1MFowLzEtMCsGA1UEAxMk OGRlZGMxOGQtMzMxOC00OGNlLTg3NDUtZTEzOGY4OGQyYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfI+8WWeDf+5IGG4z9GjwGDauioTdgVpdcbG Q6r6oJ1aNG3DiNwLv69RpVkwPikjO3qy0dd+2h+TJe9bT47y+bSC1Js+4OKeUnz6 hgra5e+2o+OxLR2q7hg231BPxhNvILu6b9gewmene1gp/RCahe9vztmLpbI7liPw 7MTIk7EotBnez2Df4yMubusPfj18+u8UkdDpM1tLKNZWjT33FiRmOGSm5/uc0yDp TQkPK49fYftrewjeAh5TjOYOpbBwnbD9az0l9E6W963SIndEPwcOwGfsZZC7ajKN DzUxQS8lnVRFaSumcSmM3zBCBJFnDYZUyX6o7cxCNa9z/VplgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAnonTPH1ZD3zX/WL00QPk69meAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGYyYWI4NWUtMDJlZi0z ODk2LThjNjktOWZjODVhY2RjYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP47oFfkOSfnGDLPvoYzGTtTbZ9gJMivhpvGAngcHJaWpRO1JYQWhAZ RAj24Ro8OpNSPwPfq4wwhnbLD4rwKp5vG1Zz8mAK1e65Tvfkq/q3kVmYaHGf0iVL ieoSLmgBslRiXaUeYhaNAOJDrwtXfwdgTMSHRreKH/7wGmvcXR7E1Jea9kuqWgJk 6YtnPjl+pwVKwMYzcYoeUjb2cv8GIszHpF+2MipJl7ce5R58GIWqopV/coAPWRLF c2hJ/wRYsQaGhS2hqogejdMFnoHY50UcoNbl3mV8eImouLzLstFVgqgKpWvBB+nx UpEuJz5dDlIoyfdpieZVmGnDHAsdrTU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:53 2025 by rpki-client