$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa File: db008e14-8d19-3ca8-825e-4ae02e1cb000.roa (raw, json) Hash identifier: KfulbvUgfFLha+6D7tSDf9smeqdwh6QkmLjiZ+rdGQk= Subject key identifier: 1A:E8:CB:A5:24:2B:71:8E:E0:DD:24:EC:DC:16:E1:09:E6:8B:75:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE86359BF0B1636C2E823D780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa Signing time: Tue 19 Aug 2025 11:28:29 +0000 ROA not before: Tue 19 Aug 2025 11:28:29 +0000 ROA not after: Mon 17 Nov 2025 12:28:29 +0000 asID: 31898 IP address blocks: 157.137.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:59:bf:0b:16:36:c2:e8:23:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:28:29 2025 GMT Not After : Nov 17 12:28:29 2025 GMT Subject: CN=93d9efea-e2c9-4419-9ec6-bbcbc1ca6232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:0f:a1:ad:e9:d7:ac:5e:08:3d:87:3d:f0: b9:f8:06:2d:d8:6d:e9:ec:df:3b:ff:63:2f:43:c3: 92:ab:02:03:4c:41:e0:9b:fa:8f:a6:c0:be:b7:6a: 2a:1a:44:f1:6f:f5:c7:4d:10:06:a2:d1:4f:db:2d: bf:95:b0:26:10:85:6b:eb:3e:f0:99:63:56:52:56: c0:02:9b:4a:eb:26:70:46:c9:b3:95:e8:12:50:62: e7:97:a2:64:10:f3:9d:80:6b:c0:15:63:2d:e4:01: bd:32:2b:da:c2:df:0b:d2:93:2e:fa:60:f2:67:ec: 27:31:93:4b:0c:20:81:2f:f9:d1:30:97:53:6c:84: f8:b2:fa:db:25:65:b9:50:30:80:e6:ab:fb:97:2d: d1:ea:c7:3b:c5:c6:e0:6b:ed:70:63:e8:68:7c:fa: b3:76:31:80:fe:50:94:c3:ac:4f:bb:14:0c:eb:eb: 48:14:e9:43:01:12:b1:70:8d:87:51:b8:bd:a8:81: 2c:38:9e:fe:b2:49:cf:bb:08:f9:17:6f:f8:87:15: b4:f7:00:58:98:e1:8c:1c:82:90:d0:91:9c:58:ed: 16:16:55:e6:3f:7a:24:f7:b8:83:fb:2d:f1:61:7c: c7:ff:a6:69:1a:32:a6:09:45:fa:a5:38:17:db:b9: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:CB:A5:24:2B:71:8E:E0:DD:24:EC:DC:16:E1:09:E6:8B:75:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db008e14-8d19-3ca8-825e-4ae02e1cb000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b6:31:62:40:16:f9:64:b2:f6:89:02:a2:90:4f:ec:3b:a9: 28:e9:45:0d:61:e8:90:2d:13:e4:16:37:b4:c6:07:98:34:c1: ed:11:3e:5c:3b:91:67:fb:52:6f:e7:e5:5b:1f:8c:9e:4b:e5: 1d:18:41:56:d9:ee:d3:4a:18:ec:bb:5d:09:85:c5:57:9d:19: 2e:57:e8:db:8b:bc:19:12:47:d8:f8:f5:ab:9d:8c:97:1f:80: a7:28:af:73:2a:41:9e:fc:7c:b6:e3:a0:18:5b:7c:8a:0c:05: 56:f3:60:d8:82:ed:6c:04:78:23:fc:d7:b3:8b:4e:60:d9:6b: f0:00:78:4f:f2:fe:5b:b6:25:52:62:6e:34:ac:7b:44:fa:56: cc:58:16:b2:f5:31:24:21:15:9e:4e:e7:d1:bd:31:fe:7c:fc: b6:3d:8d:8e:ec:ff:ba:f9:29:fa:b8:f8:ba:a7:c1:37:41:d9: 91:ef:21:41:72:7f:b0:89:48:2d:4b:53:d9:cb:a0:d0:4c:4c: 32:95:96:67:8d:4f:6e:54:a2:c6:8e:cc:54:d0:e1:f0:33:f4: f3:6c:12:ab:d8:ea:f8:45:66:3d:b8:de:a4:51:f3:ef:91:a6: a0:6f:91:0d:1d:7c:0e:7d:1c:e7:43:19:d2:53:68:a4:08:03: b3:85:18:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY1m/CxY2wugj14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjgyOVoXDTI1MTExNzEyMjgyOVowLzEtMCsGA1UEAxMk OTNkOWVmZWEtZTJjOS00NDE5LTllYzYtYmJjYmMxY2E2MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgosPoa3p16xeCD2HPfC5+AYt2G3p7N87/2Mv Q8OSqwIDTEHgm/qPpsC+t2oqGkTxb/XHTRAGotFP2y2/lbAmEIVr6z7wmWNWUlbA AptK6yZwRsmzlegSUGLnl6JkEPOdgGvAFWMt5AG9Mivawt8L0pMu+mDyZ+wnMZNL DCCBL/nRMJdTbIT4svrbJWW5UDCA5qv7ly3R6sc7xcbga+1wY+hofPqzdjGA/lCU w6xPuxQM6+tIFOlDARKxcI2HUbi9qIEsOJ7+sknPuwj5F2/4hxW09wBYmOGMHIKQ 0JGcWO0WFlXmP3ok97iD+y3xYXzH/6ZpGjKmCUX6pTgX27nIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBroy6UkK3GO4N0k7NwW4Qnmi3UcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIwMDhlMTQtOGQxOS0z Y2E4LTgyNWUtNGFlMDJlMWNiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq2MWJAFvlksvaJAqKQT+w7qSjpRQ1h6JAtE+QWN7TGB5g0we0RPlw7 kWf7Um/n5VsfjJ5L5R0YQVbZ7tNKGOy7XQmFxVedGS5X6NuLvBkSR9j49audjJcf gKcor3MqQZ78fLbjoBhbfIoMBVbzYNiC7WwEeCP817OLTmDZa/AAeE/y/lu2JVJi bjSse0T6VsxYFrL1MSQhFZ5O59G9Mf58/LY9jY7s/7r5Kfq4+LqnwTdB2ZHvIUFy f7CJSC1LU9nLoNBMTDKVlmeNT25UosaOzFTQ4fAz9PNsEqvY6vhFZj243qRR8++R pqBvkQ0dfA59HOdDGdJTaKQIA7OFGOM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:45 2025 by rpki-client