$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa File: d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa (raw, json) Hash identifier: pSfPsdhlGBqQ/+N1CKFpwCmvQhSFjtE7c0n2omMfGME= Subject key identifier: E5:97:0D:DC:E3:43:77:AA:6C:1C:6F:0F:42:D6:D1:EB:D1:29:4E:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CD6F0CE34793F6CB5CC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa Signing time: Tue 19 Aug 2025 17:42:13 +0000 ROA not before: Tue 19 Aug 2025 17:42:13 +0000 ROA not after: Mon 17 Nov 2025 18:42:13 +0000 asID: 31898 IP address blocks: 207.127.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:d6:f0:ce:34:79:3f:6c:b5:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:42:13 2025 GMT Not After : Nov 17 18:42:13 2025 GMT Subject: CN=b2a3e0fb-68f6-4d2f-9585-1109a5a76919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:01:b5:ac:8e:a7:23:d8:a8:f5:ae:d8:92:a9: a8:56:3c:8e:03:31:18:2c:91:6e:84:60:20:f1:3f: 5c:e7:55:c1:41:d4:64:33:f6:95:cf:be:78:a6:91: 0a:91:1f:70:30:77:88:23:ac:cc:6f:bb:b2:92:e0: 80:36:85:b0:cb:d4:72:c9:ca:53:f8:93:1d:d0:a4: b7:21:9d:22:da:92:10:67:c4:30:d0:c1:33:be:cb: c4:24:76:9e:f8:dc:1c:c0:93:d7:9e:f8:fe:db:48: 8f:50:2b:d3:39:4f:2c:1a:ba:d1:fc:1a:43:05:a3: d1:e7:21:62:16:10:46:4e:6a:76:34:ce:1b:af:77: e9:09:3c:0c:90:b7:70:bc:cd:71:5a:4a:75:e4:75: f5:15:ad:dd:60:22:bb:99:af:04:6b:27:59:c4:44: bc:c1:3e:cd:2d:09:cb:19:a4:d8:5c:8b:95:30:72: a8:df:eb:35:99:35:5a:f8:18:5f:f5:41:a3:a3:ed: 07:5f:47:cc:18:c8:4b:62:20:8d:8d:28:8b:fe:20: 2d:07:aa:2f:4f:f0:b6:42:aa:d6:8a:15:a9:a2:18: 46:b9:28:ae:82:db:85:90:aa:c0:68:0b:00:92:ad: d8:03:27:f3:10:87:dc:74:c0:60:17:7a:8d:66:6c: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:0D:DC:E3:43:77:AA:6C:1C:6F:0F:42:D6:D1:EB:D1:29:4E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d825c937-f261-35ea-bb30-5c6f8ed8a0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.127.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b3:eb:a1:9c:1a:76:4a:1f:dc:a5:46:f3:13:3c:16:42:e0: 82:1c:ce:bc:f2:d1:29:4c:90:4b:1d:bc:d8:e1:dc:46:08:32: 0e:3d:3a:99:40:53:f4:ed:ec:35:d7:63:d5:4e:4c:8d:d3:04: 24:53:f2:05:2a:85:bf:6e:c2:51:5e:b0:65:b5:e1:b0:57:3d: 93:b6:20:89:49:57:d0:9f:55:0b:93:12:b1:79:ca:c0:8f:1c: 0d:9a:42:18:95:31:4e:3f:0c:bf:0e:fd:04:e1:dd:73:88:92: 07:92:40:72:78:ca:45:75:a3:43:75:f4:f9:6a:c3:d5:9a:ae: 87:33:38:6e:3c:82:12:53:b9:1e:54:dd:da:04:03:22:09:d9: 5b:69:04:d3:db:fa:57:f6:b8:91:23:db:89:2f:61:f7:25:e2: e5:5c:08:f4:56:55:c9:90:95:c0:e6:f1:f2:fc:78:99:28:e9: fd:53:f1:96:8b:cf:73:49:28:ab:e1:1b:7e:fd:83:d3:1f:68: 22:d1:bf:bf:32:9c:14:eb:1c:ad:40:90:57:be:9f:d1:4c:9f: 74:a7:ef:76:c1:ec:7d:e1:23:20:8c:0f:73:44:28:44:6c:9d: 95:38:3d:8d:e7:f9:98:7b:4b:eb:b8:2f:ea:6c:e9:49:18:64: 60:2e:8a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHNbwzjR5P2y1zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDIxM1oXDTI1MTExNzE4NDIxM1owLzEtMCsGA1UEAxMk YjJhM2UwZmItNjhmNi00ZDJmLTk1ODUtMTEwOWE1YTc2OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQG1rI6nI9io9a7YkqmoVjyOAzEYLJFuhGAg 8T9c51XBQdRkM/aVz754ppEKkR9wMHeII6zMb7uykuCANoWwy9RyycpT+JMd0KS3 IZ0i2pIQZ8Qw0MEzvsvEJHae+NwcwJPXnvj+20iPUCvTOU8sGrrR/BpDBaPR5yFi FhBGTmp2NM4br3fpCTwMkLdwvM1xWkp15HX1Fa3dYCK7ma8EaydZxES8wT7NLQnL GaTYXIuVMHKo3+s1mTVa+Bhf9UGjo+0HX0fMGMhLYiCNjSiL/iAtB6ovT/C2QqrW ihWpohhGuSiugtuFkKrAaAsAkq3YAyfzEIfcdMBgF3qNZmzqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWXDdzjQ3eqbBxvD0LW0evRKU5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDgyNWM5MzctZjI2MS0z NWVhLWJiMzAtNWM2ZjhlZDhhMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz39oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiz66GcGnZKH9ylRvMTPBZC4IIczrzy0SlMkEsdvNjh3EYIMg49OplA U/Tt7DXXY9VOTI3TBCRT8gUqhb9uwlFesGW14bBXPZO2IIlJV9CfVQuTErF5ysCP HA2aQhiVMU4/DL8O/QTh3XOIkgeSQHJ4ykV1o0N19Plqw9WaroczOG48ghJTuR5U 3doEAyIJ2VtpBNPb+lf2uJEj24kvYfcl4uVcCPRWVcmQlcDm8fL8eJko6f1T8ZaL z3NJKKvhG379g9MfaCLRv78ynBTrHK1AkFe+n9FMn3Sn73bB7H3hIyCMD3NEKERs nZU4PY3n+Zh7S+u4L+ps6UkYZGAuitQ= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:44 2025 by rpki-client