$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa File: effd7bc5-11e9-3891-a632-10a2d9bd0398.roa (raw, json) Hash identifier: 755TTgK+yTsmUUj0uUDGLHbGeo3Nw8Ba0B67sJXaVB0= Subject key identifier: 9A:B5:16:50:F9:7C:A1:07:03:B8:C0:F8:2D:6C:8C:0E:C6:F5:1A:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CB83662AF3611DC682980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa Signing time: Tue 19 Aug 2025 17:41:58 +0000 ROA not before: Tue 19 Aug 2025 17:41:58 +0000 ROA not after: Mon 17 Nov 2025 18:41:58 +0000 asID: 31898 IP address blocks: 168.110.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:b8:36:62:af:36:11:dc:68:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:58 2025 GMT Not After : Nov 17 18:41:58 2025 GMT Subject: CN=3aca65a5-2048-46d1-8b37-8a986d248a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:52:02:62:67:6e:ea:b5:3c:bd:e4:54:c6: 23:fa:b2:af:47:4d:cf:21:35:69:31:81:d4:07:8e: b3:a8:10:bd:7d:b3:e7:81:7c:55:25:80:8e:04:75: 66:92:e3:7d:71:e9:b2:8a:30:7b:15:ce:c0:24:64: da:df:10:2e:0c:e3:f4:bf:55:ca:6e:70:41:a2:ba: c8:13:bf:03:64:74:a5:b9:75:d0:dd:02:7e:e5:07: 23:b0:a3:25:b4:4a:e6:3d:93:e4:32:95:48:1a:e9: 10:c1:b1:3e:8e:05:08:26:85:d1:61:8c:37:d0:62: f0:d9:73:ad:20:22:0e:dc:a8:5c:67:a8:25:59:d7: db:93:15:9f:7e:49:ab:2a:75:17:72:58:9d:98:91: ad:21:0b:2c:24:de:77:17:d1:6e:71:28:34:e1:08: 24:11:78:d8:29:e0:10:19:9e:d6:fe:c8:80:b2:0f: 0b:07:9f:1c:e9:37:08:73:8a:47:2d:c7:fb:da:5a: 53:f0:c6:eb:9e:07:36:f8:17:16:ce:3d:9d:76:50: 42:bc:01:26:a4:f9:a8:4b:d9:0a:16:6e:c2:e1:a6: 46:2e:a6:b8:a0:24:ca:96:6d:02:70:68:89:c6:16: b0:3e:e4:ed:7a:33:e8:5f:57:43:d6:95:63:66:f8: 0c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:16:50:F9:7C:A1:07:03:B8:C0:F8:2D:6C:8C:0E:C6:F5:1A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/effd7bc5-11e9-3891-a632-10a2d9bd0398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.110.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0e:e3:23:80:68:1a:67:ac:08:f5:9c:d3:e7:e8:7e:71:61: 30:6e:73:d6:b5:56:15:5b:76:1c:6e:4b:ec:29:5d:6c:ab:f8: c6:d0:5c:7e:da:86:07:ee:f2:4d:47:22:45:aa:c0:f6:4d:7a: ed:17:59:77:53:03:d3:90:44:ae:3d:e6:fa:fb:d2:89:52:87: ab:73:eb:d2:87:2c:74:9c:7b:94:3f:3d:a4:2d:4b:cb:60:53: 20:6d:77:7f:4b:e9:fc:a1:80:11:f8:7e:ae:52:74:2e:59:3a: 3d:8e:aa:ec:15:89:cc:89:d5:72:97:fb:21:2f:15:a4:6a:ab: a5:3a:cf:8e:ff:fa:f1:4a:c0:64:e8:87:75:75:80:f5:a6:d2: 1c:30:2e:94:98:e7:80:82:b8:92:d0:8d:8e:15:68:50:05:e0: c5:54:f5:87:1b:61:99:17:82:f5:92:65:ef:b5:d8:e7:9b:6e: 9e:cf:9a:d7:cd:a3:12:e5:10:24:63:f1:b2:a4:e7:d6:7e:2d: e9:15:43:3f:f6:e0:3a:0a:b1:73:04:4a:d2:0e:88:a2:12:c3: 3f:2a:52:f6:15:99:8c:75:4c:d1:f9:48:e7:9a:c8:99:fe:f2: aa:0c:17:6c:0e:c2:55:2b:15:2d:6c:27:8c:ae:f5:83:59:24: c9:96:6c:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHLg2Yq82EdxoKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE1OFoXDTI1MTExNzE4NDE1OFowLzEtMCsGA1UEAxMk M2FjYTY1YTUtMjA0OC00NmQxLThiMzctOGE5ODZkMjQ4YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvVSAmJnbuq1PL3kVMYj+rKvR03PITVpMYHU B46zqBC9fbPngXxVJYCOBHVmkuN9cemyijB7Fc7AJGTa3xAuDOP0v1XKbnBBorrI E78DZHSluXXQ3QJ+5QcjsKMltErmPZPkMpVIGukQwbE+jgUIJoXRYYw30GLw2XOt ICIO3KhcZ6glWdfbkxWffkmrKnUXclidmJGtIQssJN53F9FucSg04QgkEXjYKeAQ GZ7W/siAsg8LB58c6TcIc4pHLcf72lpT8Mbrngc2+BcWzj2ddlBCvAEmpPmoS9kK Fm7C4aZGLqa4oCTKlm0CcGiJxhawPuTtejPoX1dD1pVjZvgM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq1FlD5fKEHA7jA+C1sjA7G9RpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWZmZDdiYzUtMTFlOS0z ODkxLWE2MzItMTBhMmQ5YmQwMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqG5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8O4yOAaBpnrAj1nNPn6H5xYTBuc9a1VhVbdhxuS+wpXWyr+MbQXH7a hgfu8k1HIkWqwPZNeu0XWXdTA9OQRK495vr70olSh6tz69KHLHSce5Q/PaQtS8tg UyBtd39L6fyhgBH4fq5SdC5ZOj2OquwVicyJ1XKX+yEvFaRqq6U6z47/+vFKwGTo h3V1gPWm0hwwLpSY54CCuJLQjY4VaFAF4MVU9YcbYZkXgvWSZe+12Oebbp7PmtfN oxLlECRj8bKk59Z+LekVQz/24DoKsXMEStIOiKISwz8qUvYVmYx1TNH5SOeayJn+ 8qoMF2wOwlUrFS1sJ4yu9YNZJMmWbOY= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:22 2025 by rpki-client