$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa File: d1882f25-f49a-3a62-ba6e-ad528bca164c.roa (raw, json) Hash identifier: BIAWqZYBx8M60UtXtp+u5MAMsRJp7GjVQs+P+GnjKvE= Subject key identifier: 57:78:EE:D7:0E:B0:C3:89:BF:44:27:EC:C9:43:71:1A:C2:48:9B:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD616E223DA3F66F390ED380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa Signing time: Sat 09 Aug 2025 19:17:47 +0000 ROA not before: Sat 09 Aug 2025 19:17:47 +0000 ROA not after: Fri 07 Nov 2025 20:17:47 +0000 asID: 31898 IP address blocks: 132.145.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:6e:22:3d:a3:f6:6f:39:0e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:47 2025 GMT Not After : Nov 7 20:17:47 2025 GMT Subject: CN=c781a987-b904-4594-aa4f-9fa8ca5c4ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:71:78:08:09:e0:c7:f0:86:c2:14:d5:3b: 10:f7:c3:61:a0:df:4e:62:be:58:1b:cd:26:f4:e8: 1d:8e:ed:3c:f0:d5:ca:53:ea:37:1e:17:07:ad:1b: 37:ef:c1:1f:f2:07:fa:9b:73:83:64:7c:df:91:6c: 62:48:d9:50:ab:d3:10:31:ae:34:1c:4f:5b:c9:60: 52:f0:e4:10:6c:73:c3:58:9b:36:f9:5e:10:ab:83: 91:3e:21:63:e4:37:1d:20:da:96:e7:74:50:18:14: 6e:27:e2:2c:f0:07:e9:75:bc:19:68:22:79:b8:2a: 4b:24:33:8c:81:95:95:d7:f7:90:21:f6:9f:56:2c: 7a:33:f1:cc:cd:b4:53:4f:44:07:2d:4c:5e:b8:b8: e5:94:5d:51:f4:6e:7d:cb:c2:2e:c8:be:4e:28:fe: 83:eb:69:4d:03:13:0e:20:73:b7:43:18:43:79:59: e3:d7:c0:e9:d8:49:12:32:ef:53:7a:f9:de:9d:03: 63:4e:82:61:93:9c:55:04:0a:28:35:5e:97:04:e4: 4d:14:a6:c6:75:56:50:b9:18:15:45:f3:d2:ea:d0: 40:f2:71:17:1e:9f:f2:f2:8b:a1:cf:57:e9:72:0a: 4c:85:a9:6c:81:c1:d6:95:ab:a7:57:f5:cc:67:4a: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:78:EE:D7:0E:B0:C3:89:BF:44:27:EC:C9:43:71:1A:C2:48:9B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0c:bf:df:fb:bb:9b:cc:62:d9:7c:74:33:a1:98:e1:23:d0: 71:e4:19:56:ab:56:f1:d4:2f:b2:84:ef:47:6d:6f:41:85:9d: 86:18:7d:81:9c:14:e7:b6:2f:13:4b:e7:27:12:c0:25:2d:f9: c3:0f:4d:c0:6f:e7:f0:4c:57:c3:c0:10:b7:cb:f6:37:7b:70: e9:80:18:20:1f:8e:57:93:a6:d4:83:62:4d:9e:c5:fa:57:75: e2:22:ae:ab:86:cf:e3:6d:c5:8a:b2:4f:d2:be:67:aa:a3:b8: 4e:e0:39:46:26:a3:92:8b:25:dd:87:d6:de:7b:0c:4e:67:b8: 7f:64:a0:1e:00:75:53:20:24:53:cf:f0:db:6d:37:79:13:01: 78:29:79:d1:06:4a:8d:2c:a7:98:aa:2b:3a:a0:51:b7:18:bf: b1:8e:67:0a:12:9b:66:0b:18:19:05:f6:87:e1:41:f7:aa:73: 20:87:a6:92:83:6b:8d:93:76:4c:ac:79:ee:54:45:e0:3a:36: 1c:6a:07:c1:a0:27:78:01:73:4c:42:ce:bf:d5:99:1d:b5:f8: 2c:2e:25:01:54:a9:5f:73:4c:f0:70:10:0f:f6:ae:27:b7:e8: 2b:3f:fa:28:f0:7f:79:48:ac:55:fb:eb:aa:2a:b4:98:b7:68: 52:4e:7e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYW4iPaP2bzkO04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTc0N1oXDTI1MTEwNzIwMTc0N1owLzEtMCsGA1UEAxMk Yzc4MWE5ODctYjkwNC00NTk0LWFhNGYtOWZhOGNhNWM0YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXFxeAgJ4MfwhsIU1TsQ98NhoN9OYr5YG80m 9Ogdju088NXKU+o3HhcHrRs378Ef8gf6m3ODZHzfkWxiSNlQq9MQMa40HE9byWBS 8OQQbHPDWJs2+V4Qq4ORPiFj5DcdINqW53RQGBRuJ+Is8AfpdbwZaCJ5uCpLJDOM gZWV1/eQIfafVix6M/HMzbRTT0QHLUxeuLjllF1R9G59y8IuyL5OKP6D62lNAxMO IHO3QxhDeVnj18Dp2EkSMu9TevnenQNjToJhk5xVBAooNV6XBORNFKbGdVZQuRgV RfPS6tBA8nEXHp/y8ouhz1fpcgpMhalsgcHWlaunV/XMZ0rpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd47tcOsMOJv0Qn7MlDcRrCSJucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE4ODJmMjUtZjQ5YS0z YTYyLWJhNmUtYWQ1MjhiY2ExNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAMv9/7u5vMYtl8dDOhmOEj0HHkGVarVvHUL7KE70dtb0GFnYYYfYGc FOe2LxNL5ycSwCUt+cMPTcBv5/BMV8PAELfL9jd7cOmAGCAfjleTptSDYk2exfpX deIirquGz+NtxYqyT9K+Z6qjuE7gOUYmo5KLJd2H1t57DE5nuH9koB4AdVMgJFPP 8NttN3kTAXgpedEGSo0sp5iqKzqgUbcYv7GOZwoSm2YLGBkF9ofhQfeqcyCHppKD a42Tdkysee5UReA6NhxqB8GgJ3gBc0xCzr/VmR21+CwuJQFUqV9zTPBwEA/2rie3 6Cs/+ijwf3lIrFX766oqtJi3aFJOfjU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:15 2025 by rpki-client