$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa File: af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa (raw, json) Hash identifier: ZyGkDFb/Ran/AB7ujSz0K3KlQziZaGYVgGVHscRJFZs= Subject key identifier: 43:94:61:16:C4:A2:C0:52:28:F0:87:B3:C1:7C:ED:77:8C:65:A5:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B967C9EBB8E1958A30D40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa Signing time: Tue 19 Aug 2025 17:39:42 +0000 ROA not before: Tue 19 Aug 2025 17:39:42 +0000 ROA not after: Mon 17 Nov 2025 18:39:42 +0000 asID: 31898 IP address blocks: 192.29.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:96:7c:9e:bb:8e:19:58:a3:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:42 2025 GMT Not After : Nov 17 18:39:42 2025 GMT Subject: CN=721fb235-7fca-4adc-b51a-64e8b334e0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:3c:c0:a2:4f:3f:0c:b4:14:86:82:43:b4: e0:b4:21:e5:de:81:e9:a1:06:cb:78:d9:d9:a4:30: 2b:9f:97:db:bf:38:50:c5:d7:c5:7a:b5:88:d0:19: 52:59:d4:22:c3:89:38:89:b7:58:d9:70:f9:8c:f2: 28:c8:33:2c:ca:3b:70:40:68:d5:38:ca:34:37:80: d9:de:cf:54:b2:02:cb:e9:50:66:bd:80:da:6d:86: 0b:05:46:5b:5b:69:24:ff:cd:53:00:cf:c9:eb:13: 71:34:19:4d:a5:cf:67:43:e2:e3:8d:19:11:86:38: d8:51:45:f7:cf:55:47:76:bc:7a:32:9d:44:de:b2: 8f:9d:50:f8:ab:bf:98:a7:e3:fc:54:22:7a:49:79: b0:d9:39:ed:c5:07:39:81:ad:ec:ea:49:1f:ac:a8: 7c:5d:bf:ad:03:54:e2:d5:a6:98:c3:20:5c:7e:ad: 69:dd:64:a9:9c:10:0b:cd:50:9c:ed:e3:be:26:2c: ed:d5:4a:86:6d:73:73:f9:d4:b6:34:c3:25:c2:9c: 03:c3:1e:dc:42:c4:ce:10:34:a9:82:19:37:83:7b: 29:33:81:3e:d1:a4:36:42:be:c7:94:42:ec:51:71: 2c:ca:6e:98:9a:89:74:e2:fd:7b:41:f6:2b:10:4a: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:61:16:C4:A2:C0:52:28:F0:87:B3:C1:7C:ED:77:8C:65:A5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/af9e12de-00c0-3faa-aa5a-1fcdda6e6df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a6:fb:48:99:a8:f8:99:2f:7a:f1:aa:20:68:0b:8a:0a:5f: 3d:e4:0b:c0:28:d8:9b:ba:9b:61:94:41:8e:ed:6c:f6:7c:7c: ff:70:2d:6b:e9:f3:d8:41:e0:d4:fe:13:3a:84:a4:ae:6b:bb: 59:af:19:c3:aa:78:83:ad:46:5b:f2:14:cf:16:e8:fb:1b:d3: f9:a1:d6:77:73:46:c4:8c:d9:c8:34:90:a5:41:01:94:58:21: 3e:bd:5b:24:cc:41:89:25:57:16:d4:7d:78:87:1a:5c:fb:4e: 99:a1:07:0d:91:00:3c:c1:12:a6:44:2d:e3:4e:27:e6:a0:bc: 75:5f:05:b2:6a:65:5e:fb:1f:a4:cb:62:1c:02:37:e6:07:d9: 85:1b:19:e8:bc:b0:be:b7:d5:7b:ae:9d:b2:78:6c:46:31:b7: c9:80:db:63:ec:ef:b1:1f:ca:8f:20:bb:6e:cc:9d:9d:3e:54: 04:71:25:46:4d:6c:d3:d9:9a:ee:88:80:a2:bc:0f:38:87:2d: 18:f7:90:2e:2b:48:35:ec:2b:3a:45:55:68:74:54:f8:5d:07: ee:f7:49:e6:f3:75:90:ba:9e:62:bc:f5:8d:e6:81:81:bb:ee: 76:f5:b6:56:26:11:01:05:0d:45:9c:48:3b:78:26:a1:bd:ce: 70:28:b2:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG5Z8nruOGVijDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3Mzk0MloXDTI1MTExNzE4Mzk0MlowLzEtMCsGA1UEAxMk NzIxZmIyMzUtN2ZjYS00YWRjLWI1MWEtNjRlOGIzMzRlMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxU8wKJPPwy0FIaCQ7TgtCHl3oHpoQbLeNnZ pDArn5fbvzhQxdfFerWI0BlSWdQiw4k4ibdY2XD5jPIoyDMsyjtwQGjVOMo0N4DZ 3s9UsgLL6VBmvYDabYYLBUZbW2kk/81TAM/J6xNxNBlNpc9nQ+LjjRkRhjjYUUX3 z1VHdrx6Mp1E3rKPnVD4q7+Yp+P8VCJ6SXmw2TntxQc5ga3s6kkfrKh8Xb+tA1Ti 1aaYwyBcfq1p3WSpnBALzVCc7eO+Jizt1UqGbXNz+dS2NMMlwpwDwx7cQsTOEDSp ghk3g3spM4E+0aQ2Qr7HlELsUXEsym6Ymol04v17QfYrEEpvZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOUYRbEosBSKPCHs8F87XeMZaWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWY5ZTEyZGUtMDBjMC0z ZmFhLWFhNWEtMWZjZGRhNmU2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+m+0iZqPiZL3rxqiBoC4oKXz3kC8Ao2Ju6m2GUQY7tbPZ8fP9wLWvp 89hB4NT+EzqEpK5ru1mvGcOqeIOtRlvyFM8W6Psb0/mh1ndzRsSM2cg0kKVBAZRY IT69WyTMQYklVxbUfXiHGlz7TpmhBw2RADzBEqZELeNOJ+agvHVfBbJqZV77H6TL YhwCN+YH2YUbGei8sL631XuunbJ4bEYxt8mA22Ps77Efyo8gu27MnZ0+VARxJUZN bNPZmu6IgKK8DziHLRj3kC4rSDXsKzpFVWh0VPhdB+73SebzdZC6nmK89Y3mgYG7 7nb1tlYmEQEFDUWcSDt4JqG9znAosq0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:45 2025 by rpki-client