$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa File: d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa (raw, json) Hash identifier: CYJr6GcpFfetpXYokMZ5PLQZxiJv1PdvxJ5za4QGu3c= Subject key identifier: 48:4F:33:4B:7C:19:C8:68:A0:2F:2E:22:C4:20:01:88:52:C5:52:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD614881A1F8037E586FD040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa Signing time: Sat 09 Aug 2025 19:17:29 +0000 ROA not before: Sat 09 Aug 2025 19:17:29 +0000 ROA not after: Fri 07 Nov 2025 20:17:29 +0000 asID: 31898 IP address blocks: 132.145.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:48:81:a1:f8:03:7e:58:6f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:29 2025 GMT Not After : Nov 7 20:17:29 2025 GMT Subject: CN=286e4937-2d4e-40d0-a695-c6b44c177adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:9a:0b:3d:02:90:37:70:65:1f:11:36:67: 2d:5f:a7:7d:91:95:d9:24:91:e7:34:90:84:46:eb: 19:ea:7a:02:ba:9e:8f:bb:cf:63:20:c6:6b:3b:63: 3d:86:a2:53:40:a2:6f:a9:01:4c:b3:ec:4d:37:2f: 34:43:47:18:91:2c:f8:d7:64:81:13:fc:c8:7c:6f: 6b:3a:5e:c8:c3:47:6e:f3:e0:4a:72:da:4f:4c:b1: 24:7d:64:98:11:d3:fd:45:48:8d:25:64:0f:cd:77: 0f:2a:2d:5c:53:71:1d:0a:96:25:a7:c9:0e:65:2e: 7e:73:49:f5:aa:98:81:a3:1b:36:5c:5c:6a:81:82: 5a:95:3a:99:93:02:4e:c5:be:52:df:36:95:ed:ab: 92:bb:7c:8c:0d:04:ff:d5:34:5a:52:69:b6:30:15: fa:05:ed:fe:65:e1:52:7f:42:6e:e6:f9:12:b9:6f: 5b:ee:69:a5:11:01:e9:23:8c:ac:c2:69:b2:a9:dc: 5b:a9:3a:ab:66:15:ee:5b:92:d9:81:12:d2:a1:36: ce:c3:a1:ca:18:ad:4f:56:fe:8f:d4:aa:31:20:b5: d1:22:f2:05:96:9c:a4:68:9a:f7:50:39:fb:e9:12: 3e:94:9e:b6:15:74:2f:e7:6a:98:da:6a:8e:40:3a: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:33:4B:7C:19:C8:68:A0:2F:2E:22:C4:20:01:88:52:C5:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ae:51:02:21:f7:3c:b4:49:57:a9:4e:15:74:52:4b:a4:f4: 41:b7:a0:75:7d:32:94:15:ae:02:68:99:df:30:68:36:f3:61: 3c:d9:86:88:84:d9:46:d0:c0:57:51:48:66:bf:dc:59:5f:93: 3c:74:25:be:65:d0:ea:a4:dc:39:e4:de:85:bc:f8:05:db:14: fe:51:b8:b5:ef:94:d5:af:88:e5:54:5f:d6:f8:4d:b9:a2:87: 81:ff:1f:b1:92:38:5e:87:1b:7f:60:66:ba:61:30:06:02:a4: cc:d6:8f:39:75:2d:c6:6f:f2:1b:d9:01:b3:0e:95:8f:b1:8d: 88:07:d6:80:9b:bf:c3:79:a7:f3:c5:e1:a5:d3:42:27:fd:f2: 2c:1b:6b:0d:31:4a:e3:29:6f:fb:5b:6c:a9:ec:69:18:b2:0a: eb:27:ac:23:22:4a:6a:1d:2a:ef:4a:67:b9:03:b2:2d:cd:0b: 10:65:75:2c:f8:a2:76:0a:cb:44:b0:ea:b0:45:b3:15:3a:6c: 85:40:b3:dc:0f:f0:9f:ce:05:96:6b:0b:b8:40:67:47:1f:05: 45:fa:17:3c:08:ab:48:3b:ac:c3:82:05:2b:87:e1:aa:3b:27: c5:d0:b0:e4:86:4f:c8:dc:21:5e:49:21:e9:c9:ec:a2:3d:69: a1:ec:cc:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYUiBofgDflhv0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcyOVoXDTI1MTEwNzIwMTcyOVowLzEtMCsGA1UEAxMk Mjg2ZTQ5MzctMmQ0ZS00MGQwLWE2OTUtYzZiNDRjMTc3YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42aCz0CkDdwZR8RNmctX6d9kZXZJJHnNJCE RusZ6noCup6Pu89jIMZrO2M9hqJTQKJvqQFMs+xNNy80Q0cYkSz412SBE/zIfG9r Ol7Iw0du8+BKctpPTLEkfWSYEdP9RUiNJWQPzXcPKi1cU3EdCpYlp8kOZS5+c0n1 qpiBoxs2XFxqgYJalTqZkwJOxb5S3zaV7auSu3yMDQT/1TRaUmm2MBX6Be3+ZeFS f0Ju5vkSuW9b7mmlEQHpI4yswmmyqdxbqTqrZhXuW5LZgRLSoTbOw6HKGK1PVv6P 1KoxILXRIvIFlpykaJr3UDn76RI+lJ62FXQv52qY2mqOQDrn0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhPM0t8GchooC8uIsQgAYhSxVKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDMzZjg2MWYtMGY3MS0z Zjc1LThmOTEtZDc0MDZmZDIyZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCuUQIh9zy0SVepThV0Ukuk9EG3oHV9MpQVrgJomd8waDbzYTzZhoiE 2UbQwFdRSGa/3Flfkzx0Jb5l0Oqk3Dnk3oW8+AXbFP5RuLXvlNWviOVUX9b4Tbmi h4H/H7GSOF6HG39gZrphMAYCpMzWjzl1LcZv8hvZAbMOlY+xjYgH1oCbv8N5p/PF 4aXTQif98iwbaw0xSuMpb/tbbKnsaRiyCusnrCMiSmodKu9KZ7kDsi3NCxBldSz4 onYKy0Sw6rBFsxU6bIVAs9wP8J/OBZZrC7hAZ0cfBUX6FzwIq0g7rMOCBSuH4ao7 J8XQsOSGT8jcIV5JIenJ7KI9aaHszEM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:12 2025 by rpki-client