$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab56c9b6-d88e-3d1e-92eb-7b3066cd61e9.roa File: ab56c9b6-d88e-3d1e-92eb-7b3066cd61e9.roa (raw, json) Hash identifier: TgkRNizHQdQhSsuF/L/hT3MLKBVGyoLQEAL1vjVFnLw= Subject key identifier: 3B:CE:DB:11:DA:05:6B:34:2D:FE:65:88:07:97:10:2C:35:88:39:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD60F9EEFBCFE7375175DE80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab56c9b6-d88e-3d1e-92eb-7b3066cd61e9.roa Signing time: Sat 09 Aug 2025 19:16:52 +0000 ROA not before: Sat 09 Aug 2025 19:16:52 +0000 ROA not after: Fri 07 Nov 2025 20:16:52 +0000 asID: 31898 IP address blocks: 168.138.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:60:f9:ee:fb:cf:e7:37:51:75:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:16:52 2025 GMT Not After : Nov 7 20:16:52 2025 GMT Subject: CN=54d27168-6328-49b0-a823-16a65da19359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:18:5f:85:b8:cb:55:f7:90:d1:68:10:47: 13:5d:56:47:76:d6:40:d5:be:83:00:7e:a0:94:fd: bb:a7:cf:d3:97:e1:09:e7:49:7f:3c:a4:26:76:de: 1e:5f:22:24:60:72:a9:38:56:80:45:ae:ad:40:7c: 56:83:47:87:b1:87:8e:e7:98:b2:29:ba:1d:de:97: 0f:e0:31:21:f6:0f:21:2e:83:da:8f:fe:b8:4f:24: 96:af:0e:89:21:ae:65:ae:5c:0b:9e:2d:7b:a0:99: 5d:8d:6f:94:89:49:ae:24:7e:3e:2e:2e:86:37:df: 66:39:a9:89:9e:f9:2b:23:c2:18:eb:a0:d7:26:50: 92:39:4e:3c:3e:3b:ff:a1:1e:50:fe:10:f7:02:d3: 81:b1:32:25:f6:fb:44:78:0c:8f:4d:1a:8b:72:a8: 0d:36:60:5f:63:05:fc:8e:f0:8c:30:65:73:9f:33: 38:80:db:58:c7:73:0a:bc:a8:a4:8e:ca:f6:b7:7b: 67:39:46:34:0f:39:43:4f:a9:3e:c3:6e:89:56:a5: 10:8e:43:04:03:1b:29:9a:bc:27:d0:66:41:17:68: 19:16:3e:15:dc:2c:b1:7d:10:37:76:b2:92:4b:72: b1:06:18:49:b4:71:11:06:44:3f:a4:8f:4e:31:0f: 08:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:DB:11:DA:05:6B:34:2D:FE:65:88:07:97:10:2C:35:88:39:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ab56c9b6-d88e-3d1e-92eb-7b3066cd61e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9d:40:9d:12:62:3c:18:b7:bc:35:45:20:e2:6b:44:23:d2: 4f:35:6f:6b:18:59:c4:de:46:d6:9a:87:a2:18:dd:73:64:a0: be:6d:59:4d:55:5d:7c:77:ef:25:04:86:50:af:39:b5:82:1d: ed:8a:b0:d2:52:0a:a8:d2:7f:2f:0e:0e:d7:43:02:bc:58:58: c1:64:7d:8d:47:d4:a1:6b:0d:86:f2:37:ba:61:44:d0:e1:b6: ab:20:8a:6c:c4:c4:75:62:90:da:73:56:1a:3d:78:ef:81:fd: be:5d:4d:bf:19:54:0e:55:86:9e:4f:cc:34:43:8c:6f:de:66: bb:f1:a2:2b:53:e3:3e:f0:74:c8:43:91:8a:84:18:8c:52:e7: 2b:22:1c:19:a3:24:14:d7:81:ff:5f:cf:e9:35:ec:38:f4:51: d4:78:4f:2d:33:0f:7a:ea:9b:4d:5e:2f:b3:77:c0:78:dd:04: 69:e6:a2:22:e9:f9:ec:dc:e9:53:30:e9:b7:c5:4f:34:4d:30: 1c:7f:be:6e:b7:de:5e:4c:c2:da:ee:a7:f0:36:79:a7:85:db: f5:cc:8d:62:1d:4b:b6:89:05:a4:94:8e:d1:02:23:7a:40:2b: 86:d0:ea:e3:f5:54:02:15:52:0b:fd:3e:6e:ed:51:24:9a:74: 1b:be:02:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYPnu+8/nN1F13oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTY1MloXDTI1MTEwNzIwMTY1MlowLzEtMCsGA1UEAxMk NTRkMjcxNjgtNjMyOC00OWIwLWE4MjMtMTZhNjVkYTE5MzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaoYX4W4y1X3kNFoEEcTXVZHdtZA1b6DAH6g lP27p8/Tl+EJ50l/PKQmdt4eXyIkYHKpOFaARa6tQHxWg0eHsYeO55iyKbod3pcP 4DEh9g8hLoPaj/64TySWrw6JIa5lrlwLni17oJldjW+UiUmuJH4+Li6GN99mOamJ nvkrI8IY66DXJlCSOU48Pjv/oR5Q/hD3AtOBsTIl9vtEeAyPTRqLcqgNNmBfYwX8 jvCMMGVznzM4gNtYx3MKvKikjsr2t3tnOUY0DzlDT6k+w26JVqUQjkMEAxspmrwn 0GZBF2gZFj4V3CyxfRA3drKSS3KxBhhJtHERBkQ/pI9OMQ8IDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvO2xHaBWs0Lf5liAeXECw1iDnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWI1NmM5YjYtZDg4ZS0z ZDFlLTkyZWItN2IzMDY2Y2Q2MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2dQJ0SYjwYt7w1RSDia0Qj0k81b2sYWcTeRtaah6IY3XNkoL5tWU1V XXx37yUEhlCvObWCHe2KsNJSCqjSfy8ODtdDArxYWMFkfY1H1KFrDYbyN7phRNDh tqsgimzExHVikNpzVho9eO+B/b5dTb8ZVA5Vhp5PzDRDjG/eZrvxoitT4z7wdMhD kYqEGIxS5ysiHBmjJBTXgf9fz+k17Dj0UdR4Ty0zD3rqm01eL7N3wHjdBGnmoiLp +ezc6VMw6bfFTzRNMBx/vm633l5Mwtrup/A2eaeF2/XMjWIdS7aJBaSUjtECI3pA K4bQ6uP1VAIVUgv9Pm7tUSSadBu+Ask= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:50 2025 by rpki-client