$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96a4c90-4aec-35ac-8437-4fa39454bf9c.roa File: d96a4c90-4aec-35ac-8437-4fa39454bf9c.roa (raw, json) Hash identifier: ksco3d4t4BPrMms7zd2IJMvJMLAI3AK3V/0RUljhiXM= Subject key identifier: 11:43:68:10:34:9C:6F:FA:37:81:51:D1:C2:1B:5E:18:AE:90:AD:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDF92D613DE0052DFF25DC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96a4c90-4aec-35ac-8437-4fa39454bf9c.roa Signing time: Fri 15 Aug 2025 17:56:28 +0000 ROA not before: Fri 15 Aug 2025 17:56:28 +0000 ROA not after: Thu 13 Nov 2025 18:56:28 +0000 asID: 31898 IP address blocks: 168.110.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:f9:2d:61:3d:e0:05:2d:ff:25:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:56:28 2025 GMT Not After : Nov 13 18:56:28 2025 GMT Subject: CN=d609cb7c-8d31-4e41-b0b4-2c40607fd2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:0d:9f:b4:2c:c7:e9:0f:52:95:bc:25:8e: 2c:47:ad:1c:31:84:73:c9:d9:27:2b:ab:bd:3c:f8: 65:13:0f:fe:2c:ba:62:c4:1e:31:b9:7c:88:08:4e: 66:9e:af:02:18:ff:1a:98:1c:10:31:2d:cc:4d:21: 17:52:ac:57:b0:b2:ef:66:e1:47:79:ce:c9:d1:6a: c1:a3:f4:1b:44:98:8a:35:4e:ff:b5:a4:e6:e7:aa: 41:17:ec:2c:e0:3e:35:a1:7d:ae:1b:5a:56:13:bb: f1:ae:40:b5:a7:61:50:db:61:b4:a2:3b:a0:91:cf: 49:a0:0c:3e:99:74:38:f8:9d:43:6c:28:05:8e:2a: d1:0c:36:3c:58:36:8b:a8:21:67:f9:18:24:6e:eb: e7:93:66:3e:5e:6f:61:02:37:e8:a0:dd:39:4c:d0: 79:2e:9b:5b:cd:54:c2:aa:98:ac:7e:b4:74:d0:af: cb:f9:ce:a9:b2:a1:50:c3:b5:91:61:56:fe:49:5c: d7:8c:4b:34:c1:f5:4b:f8:da:b1:3f:79:fc:a3:78: ab:3e:b3:25:e2:2b:b5:b5:c9:6a:91:be:e8:73:3f: dd:c1:63:14:d8:c5:74:18:08:9d:92:fa:37:55:02: 2a:a4:6d:35:61:89:d6:78:c0:a9:23:ca:0f:e8:14: 9e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:43:68:10:34:9C:6F:FA:37:81:51:D1:C2:1B:5E:18:AE:90:AD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d96a4c90-4aec-35ac-8437-4fa39454bf9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:66:06:a9:f9:da:69:dd:7a:21:f4:21:75:ce:44:c7:ca:60: ce:ff:3b:f1:fe:99:fe:c0:8e:ec:d7:b6:8c:73:a3:dc:0f:8a: 82:d7:f9:1a:53:ae:56:09:48:82:23:b8:44:1b:ea:c8:36:d2: 7e:70:83:81:d2:9b:4a:bc:b5:d4:9c:5f:8b:fc:18:e5:ea:30: 6e:bf:87:54:b7:3a:fb:9c:59:ed:65:9d:f3:a7:93:d4:5a:71: fa:07:e3:fb:f7:df:e8:34:50:b7:b9:56:71:27:53:f6:ec:bf: 6f:50:d5:43:d3:7e:e9:95:ba:cf:90:93:ba:84:3f:2b:ff:60: a3:3a:6a:26:52:00:0c:a9:9f:76:12:00:96:7f:cd:35:25:69: ee:59:48:aa:b6:d9:cb:28:ee:8b:d7:b7:ff:9c:10:05:b6:e7: 5a:3f:86:0c:49:ce:5a:6d:4b:4e:5e:8e:4e:e1:92:59:5c:38: bf:a7:aa:88:a7:1b:09:9d:64:64:57:02:21:40:a2:35:e1:ed: f5:e5:f7:d8:e5:54:93:eb:91:ed:34:3f:c0:23:7d:65:a1:0f: f4:7d:89:5b:2f:e0:30:59:b8:f6:d1:a6:af:69:f2:ed:86:69: 31:66:28:80:66:a0:c2:11:8c:e9:71:26:94:d1:f6:69:e8:c0: 3d:09:be:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd+S1hPeAFLf8l3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3NTYyOFoXDTI1MTExMzE4NTYyOFowLzEtMCsGA1UEAxMk ZDYwOWNiN2MtOGQzMS00ZTQxLWIwYjQtMmM0MDYwN2ZkMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhoNn7Qsx+kPUpW8JY4sR60cMYRzydknK6u9 PPhlEw/+LLpixB4xuXyICE5mnq8CGP8amBwQMS3MTSEXUqxXsLLvZuFHec7J0WrB o/QbRJiKNU7/taTm56pBF+ws4D41oX2uG1pWE7vxrkC1p2FQ22G0ojugkc9JoAw+ mXQ4+J1DbCgFjirRDDY8WDaLqCFn+Rgkbuvnk2Y+Xm9hAjfooN05TNB5LptbzVTC qpisfrR00K/L+c6psqFQw7WRYVb+SVzXjEs0wfVL+NqxP3n8o3irPrMl4iu1tclq kb7ocz/dwWMU2MV0GAidkvo3VQIqpG01YYnWeMCpI8oP6BSeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFDaBA0nG/6N4FR0cIbXhiukK1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDk2YTRjOTAtNGFlYy0z NWFjLTg0MzctNGZhMzk0NTRiZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqG5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpmBqn52mndeiH0IXXORMfKYM7/O/H+mf7AjuzXtoxzo9wPioLX+RpT rlYJSIIjuEQb6sg20n5wg4HSm0q8tdScX4v8GOXqMG6/h1S3OvucWe1lnfOnk9Ra cfoH4/v33+g0ULe5VnEnU/bsv29Q1UPTfumVus+Qk7qEPyv/YKM6aiZSAAypn3YS AJZ/zTUlae5ZSKq22cso7ovXt/+cEAW251o/hgxJzlptS05ejk7hkllcOL+nqoin GwmdZGRXAiFAojXh7fXl99jlVJPrke00P8AjfWWhD/R9iVsv4DBZuPbRpq9p8u2G aTFmKIBmoMIRjOlxJpTR9mnowD0JvjU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:03 2025 by rpki-client