$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa File: dcc4d504-58f3-3a51-8697-8c9325672738.roa (raw, json) Hash identifier: CP0jmPLGbcQqLnX+xvpzAbT2dFZSyQLfn8t+JG0+BpM= Subject key identifier: 25:9D:9C:14:6F:9E:59:4C:C0:97:44:E4:13:B3:43:4A:F9:35:34:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA767E5272F7F1F3F086B100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa Signing time: Fri 08 Aug 2025 18:12:48 +0000 ROA not before: Fri 08 Aug 2025 18:12:48 +0000 ROA not after: Thu 06 Nov 2025 19:12:48 +0000 asID: 31898 IP address blocks: 40.233.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:7e:52:72:f7:f1:f3:f0:86:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:48 2025 GMT Not After : Nov 6 19:12:48 2025 GMT Subject: CN=125f2659-272d-49f8-9d0d-6a88c346baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:36:2c:b3:e0:a7:92:b2:7e:d0:6c:2a:72: 53:c3:7c:8a:c1:53:14:d9:33:a9:c0:10:13:e6:f2: 69:da:07:ea:3f:ce:8f:4f:41:8c:ac:a7:f8:25:d9: 46:46:bc:74:82:c2:95:79:66:96:e5:7e:ab:69:ff: e8:a5:bb:4a:6e:00:43:32:d6:af:4f:22:f1:67:de: 20:e8:96:3c:50:f2:00:d8:2b:f1:f4:80:f8:65:e4: 30:43:33:b5:7c:17:19:81:5b:04:30:e7:9d:2f:09: 5e:93:5b:d6:bc:5e:ca:a2:5f:98:7d:91:68:dc:c5: f9:f3:a9:b0:b4:fc:19:c4:a0:f8:8c:90:41:92:0f: 17:23:06:0c:d3:90:c5:fd:a6:61:5b:c1:6d:31:38: 02:9b:8a:bd:96:01:49:18:b2:e3:10:ef:09:9b:f8: e9:bf:67:52:c0:5e:bd:28:8c:eb:00:50:29:9f:25: e4:0c:7d:2b:8c:e5:4b:6f:95:bd:24:e8:64:d2:13: d0:93:d7:95:2b:25:3f:bb:60:71:8b:5b:f6:55:5d: d5:98:60:59:61:3a:e8:cd:62:df:ff:be:2d:c3:32: 4f:d3:47:57:55:58:d0:b0:6a:fa:18:ac:40:90:77: 93:d4:76:5b:b4:09:26:8f:52:06:fa:39:85:b4:a5: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:9C:14:6F:9E:59:4C:C0:97:44:E4:13:B3:43:4A:F9:35:34:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:58:a4:81:7a:88:d9:ec:0d:70:45:13:4a:f3:d0:88:ef:14: 46:be:2c:31:9b:2f:6a:66:38:bd:8a:1c:fc:c0:b6:4b:f8:07: d1:38:fe:f2:21:a1:f7:4c:19:d0:c0:59:f4:3f:e0:8d:a9:d7: ac:7c:ff:7e:12:44:2c:18:79:29:ef:54:95:96:80:d2:37:4a: 86:48:c8:5f:e2:f2:6c:b1:24:10:46:8b:0e:ff:f5:5d:99:97: 90:6f:63:9f:90:9d:3c:49:67:3e:56:7c:ce:96:61:1c:17:bb: 4e:a5:de:64:08:dc:9f:c0:bd:80:a5:e1:df:79:c3:10:52:ef: 78:d2:3a:f4:d9:69:18:fb:94:7b:30:75:b6:05:52:5c:57:0a: 73:51:fb:a5:e9:97:7f:5a:fe:aa:ec:e3:fa:8b:3d:21:b9:af: 90:b7:2b:a4:98:53:a7:23:5f:58:a0:15:3a:86:f6:77:47:4e: b2:20:b3:22:ec:fe:c7:43:69:5a:95:c2:0d:49:d8:70:e9:00: 85:69:6a:6b:ec:44:52:e0:73:74:de:34:4b:9e:93:fc:c0:a1: 75:75:13:43:0f:14:70:24:09:8d:e4:13:05:99:63:c6:39:70: 70:33:94:54:0c:72:64:38:6f:25:cf:a7:1c:1c:8b:ec:1a:73: 4b:57:cb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdn5Scvfx8/CGsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTI0OFoXDTI1MTEwNjE5MTI0OFowLzEtMCsGA1UEAxMk MTI1ZjI2NTktMjcyZC00OWY4LTlkMGQtNmE4OGMzNDZiYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmo2LLPgp5KyftBsKnJTw3yKwVMU2TOpwBAT 5vJp2gfqP86PT0GMrKf4JdlGRrx0gsKVeWaW5X6raf/opbtKbgBDMtavTyLxZ94g 6JY8UPIA2Cvx9ID4ZeQwQzO1fBcZgVsEMOedLwlek1vWvF7Kol+YfZFo3MX586mw tPwZxKD4jJBBkg8XIwYM05DF/aZhW8FtMTgCm4q9lgFJGLLjEO8Jm/jpv2dSwF69 KIzrAFApnyXkDH0rjOVLb5W9JOhk0hPQk9eVKyU/u2Bxi1v2VV3VmGBZYTrozWLf /74twzJP00dXVVjQsGr6GKxAkHeT1HZbtAkmj1IG+jmFtKU63QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWdnBRvnllMwJdE5BOzQ0r5NTTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGNjNGQ1MDQtNThmMy0z YTUxLTg2OTctOGM5MzI1NjcyNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGKOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFYpIF6iNnsDXBFE0rz0IjvFEa+LDGbL2pmOL2KHPzAtkv4B9E4/vIh ofdMGdDAWfQ/4I2p16x8/34SRCwYeSnvVJWWgNI3SoZIyF/i8myxJBBGiw7/9V2Z l5BvY5+QnTxJZz5WfM6WYRwXu06l3mQI3J/AvYCl4d95wxBS73jSOvTZaRj7lHsw dbYFUlxXCnNR+6Xpl39a/qrs4/qLPSG5r5C3K6SYU6cjX1igFTqG9ndHTrIgsyLs /sdDaVqVwg1J2HDpAIVpamvsRFLgc3TeNEuek/zAoXV1E0MPFHAkCY3kEwWZY8Y5 cHAzlFQMcmQ4byXPpxwci+wac0tXy1E= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:00 2025 by rpki-client