$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa File: a22d0a82-e1ee-3794-9394-20c3ba786983.roa (raw, json) Hash identifier: DLz9TMLE+77Cc0G0ReDgKzCf58WXOnLqZbPzyKo7584= Subject key identifier: 80:4A:8C:BA:DB:D6:CD:41:C0:88:38:51:08:68:CF:40:31:74:09:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE426DA9D2BDB912FE3B000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa Signing time: Fri 15 Aug 2025 17:14:06 +0000 ROA not before: Fri 15 Aug 2025 17:14:06 +0000 ROA not after: Thu 13 Nov 2025 18:14:06 +0000 asID: 31898 IP address blocks: 169.224.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e4:26:da:9d:2b:db:91:2f:e3:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:14:06 2025 GMT Not After : Nov 13 18:14:06 2025 GMT Subject: CN=b844ea2f-7c4f-4afe-b191-62c4edcb72b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:05:bd:86:b3:35:f4:e3:23:8a:2f:d9:ec: 94:63:67:48:c2:b4:f5:b7:c8:a3:04:c3:15:51:8e: a7:bd:1a:2f:33:ae:72:fa:98:5c:45:c9:16:5e:d9: be:c5:50:95:67:ea:7f:23:83:00:8c:25:1e:12:56: b6:e2:00:fd:08:d8:93:ac:c3:72:88:eb:56:50:19: 26:82:2f:c4:d3:84:eb:97:b6:3d:7e:73:25:ce:f1: 60:63:45:c5:21:91:56:40:40:31:b2:e6:ae:d4:e0: 2a:5f:bd:fd:ed:d0:f1:ae:01:66:0e:79:48:fb:8c: 3c:ac:19:a1:6d:55:18:1f:be:05:4f:bc:aa:66:96: 1c:4a:9c:77:5a:fe:d4:97:4b:1e:72:ff:ff:dd:85: 72:b0:86:19:15:38:dc:83:a4:b5:58:13:b9:01:13: 1e:e9:fc:78:fc:f5:9e:8d:81:8f:47:8a:00:30:bc: fc:01:59:7f:f2:06:e0:10:d6:26:22:68:e5:b6:ce: ed:b8:98:de:12:1f:3c:11:04:c6:7b:ad:d6:1a:a8: ec:4e:1e:56:69:f0:fc:a7:3f:7a:82:71:20:9e:29: 16:1c:d9:98:fa:2d:3c:10:a4:13:94:3c:3c:a5:21: f2:c9:84:19:af:67:02:9a:f1:60:0f:1a:0c:69:2f: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4A:8C:BA:DB:D6:CD:41:C0:88:38:51:08:68:CF:40:31:74:09:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 169.224.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:33:0c:d9:c1:0e:58:69:51:79:1f:ba:b7:2f:65:d0:e9: 6f:7e:fe:a6:16:99:5c:14:cb:de:2d:25:2d:0e:39:65:6c:38: 65:e0:f5:7f:97:65:37:29:61:ce:36:23:a9:84:bb:25:7c:40: 84:ce:b0:9c:3e:2b:8b:3f:fd:b0:55:fb:e6:da:67:26:4d:c0: 36:cb:8c:2b:87:11:2e:a7:28:a0:a8:65:bb:f2:db:53:73:b1: 6c:06:3c:0c:bc:b8:8d:61:1e:95:3d:85:fe:e8:cc:0b:b2:01: 93:fe:7f:fe:7f:c6:ff:98:eb:d2:86:9e:cf:12:c0:44:f8:8e: 9c:3d:83:ad:8a:c4:78:9a:96:26:0e:e5:28:7c:0e:76:24:f8: b6:c2:04:42:70:bf:e5:b3:e2:5d:dc:b3:7b:6d:c9:ab:1a:90: 99:83:af:4b:1f:88:36:8f:8a:4c:4e:0c:ff:39:7b:dc:10:e4: 7d:b3:af:4a:b5:2f:cb:f6:bd:53:ab:ac:3c:bd:db:87:1f:68: a3:17:98:2a:e1:b9:7f:1c:df:10:13:ef:4e:b3:4f:26:6f:3c: 8d:8b:89:70:f8:5d:b4:33:b0:7d:a7:60:b6:cd:e8:cf:31:6f: 78:c4:09:f5:4a:6b:2f:64:c5:d2:b2:f5:d1:fa:fb:e1:5c:b4: e1:4c:04:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd5CbanSvbkS/jsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTQwNloXDTI1MTExMzE4MTQwNlowLzEtMCsGA1UEAxMk Yjg0NGVhMmYtN2M0Zi00YWZlLWIxOTEtNjJjNGVkY2I3MmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAFvYazNfTjI4ov2eyUY2dIwrT1t8ijBMMV UY6nvRovM65y+phcRckWXtm+xVCVZ+p/I4MAjCUeEla24gD9CNiTrMNyiOtWUBkm gi/E04Trl7Y9fnMlzvFgY0XFIZFWQEAxsuau1OAqX7397dDxrgFmDnlI+4w8rBmh bVUYH74FT7yqZpYcSpx3Wv7Ul0secv//3YVysIYZFTjcg6S1WBO5ARMe6fx4/PWe jYGPR4oAMLz8AVl/8gbgENYmImjlts7tuJjeEh88EQTGe63WGqjsTh5WafD8pz96 gnEgnikWHNmY+i08EKQTlDw8pSHyyYQZr2cCmvFgDxoMaS/NHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBKjLrb1s1BwIg4UQhoz0AxdAnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTIyZDBhODItZTFlZS0z Nzk0LTkzOTQtMjBjM2JhNzg2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqeDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhEMwzZwQ5YaVF5H7q3L2XQ6W9+/qYWmVwUy94tJS0OOWVsOGXg9X+X ZTcpYc42I6mEuyV8QITOsJw+K4s//bBV++baZyZNwDbLjCuHES6nKKCoZbvy21Nz sWwGPAy8uI1hHpU9hf7ozAuyAZP+f/5/xv+Y69KGns8SwET4jpw9g62KxHialiYO 5Sh8DnYk+LbCBEJwv+Wz4l3cs3ttyasakJmDr0sfiDaPikxODP85e9wQ5H2zr0q1 L8v2vVOrrDy924cfaKMXmCrhuX8c3xAT706zTyZvPI2LiXD4XbQzsH2nYLbN6M8x b3jECfVKay9kxdKy9dH6++FctOFMBHo= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:00 2025 by rpki-client