$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa File: f2014323-deb1-36cf-bef2-39124ace9056.roa (raw, json) Hash identifier: WBLIQIY/So72B4FJGs+XFfut8JcaBn5+rM1nR2z9/dE= Subject key identifier: 75:6F:69:58:12:FB:FB:51:7D:DD:93:6D:66:86:45:6C:A6:FF:CC:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE97730896A37833F565D24C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa Signing time: Tue 19 Aug 2025 20:44:16 +0000 ROA not before: Tue 19 Aug 2025 20:44:16 +0000 ROA not after: Mon 17 Nov 2025 21:44:16 +0000 asID: 31898 IP address blocks: 192.29.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:30:89:6a:37:83:3f:56:5d:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:16 2025 GMT Not After : Nov 17 21:44:16 2025 GMT Subject: CN=bc89b174-807b-485d-982f-e8aa5431e20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:09:98:a9:32:05:75:a1:5a:69:28:1d:65: 3d:fe:17:35:a1:9f:1f:e9:ca:35:36:28:94:14:d9: 9d:9f:26:41:39:27:e5:89:c6:eb:c1:35:5e:b3:46: e6:fe:08:ec:32:97:0b:d3:80:43:a8:d5:b5:1b:b0: 98:fd:5d:7b:49:5d:74:c8:9f:1c:a5:b9:94:1d:7e: e3:99:ba:93:d8:23:af:20:69:a2:b2:0a:69:21:e2: 13:c9:22:a0:2f:4b:2c:14:e7:1e:7b:b1:86:5a:e5: c2:ca:69:d5:32:26:42:ff:8d:7d:b6:80:fb:30:a8: 74:08:e5:21:42:f3:e8:13:38:13:3c:2d:98:21:d5: 9b:b0:70:91:ae:58:d9:ac:26:a7:bc:4e:5c:4d:2f: 7b:5c:b4:93:62:74:e2:42:22:75:fb:4c:ff:92:de: c7:82:6b:1b:5c:9b:81:74:44:0e:14:4b:86:4d:64: f9:32:39:b5:53:9b:ce:06:47:c2:e3:d4:80:0d:af: ec:e8:4a:0b:b5:19:41:ce:da:b7:b0:6f:04:2b:bb: 6d:4c:61:48:69:ec:18:1e:01:4e:20:35:f0:78:d7: ab:9f:bd:73:e9:c1:6e:ec:72:d8:3c:22:37:ac:79: 5b:71:36:a7:33:dd:b1:ec:5e:d9:91:aa:1a:67:7d: 32:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:69:58:12:FB:FB:51:7D:DD:93:6D:66:86:45:6C:A6:FF:CC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2014323-deb1-36cf-bef2-39124ace9056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:8e:26:ae:98:5c:ce:11:cf:81:b1:12:83:74:6d:b0:93:d0: 31:9b:70:ff:80:45:3d:06:fa:20:a6:6f:e8:04:78:3e:a3:f4: 47:2f:c9:98:c1:8a:77:9b:07:03:56:35:6f:66:f5:75:1f:bb: 38:78:0b:75:73:2a:03:5b:22:1d:7c:ba:07:91:fa:b7:1c:66: 7b:2e:cb:71:03:15:dd:25:68:1a:ab:9e:12:e4:eb:ca:5b:2e: 3f:bb:a4:7f:87:13:dc:50:04:1d:95:5c:fe:80:72:4f:94:5f: 9d:40:ab:1a:f2:fd:8f:19:3a:82:1d:dc:6a:81:ee:65:cf:4a: 09:a0:fc:3e:f6:df:f9:64:0e:ac:6b:63:4b:41:16:3b:e0:21: 6d:eb:b8:e4:88:eb:07:c4:de:ea:60:5d:49:06:2f:9d:81:19: 9f:18:0d:84:e4:6b:d5:13:50:6b:96:00:54:b7:b5:0b:31:cf: 9e:c3:fb:cc:4c:eb:10:0b:24:f0:01:db:93:76:3d:13:4b:59: 6e:a1:c2:84:e0:54:16:d5:4b:e3:22:07:81:e7:42:d9:9c:ac: 1f:21:de:6a:c6:fe:ef:d8:d0:05:d8:21:86:94:a1:2a:a6:4f: d1:3c:24:3c:f4:18:b1:14:e5:52:d9:8c:84:66:07:ef:5f:82: cd:ac:04:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdzCJajeDP1ZdJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQxNloXDTI1MTExNzIxNDQxNlowLzEtMCsGA1UEAxMk YmM4OWIxNzQtODA3Yi00ODVkLTk4MmYtZThhYTU0MzFlMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/8JmKkyBXWhWmkoHWU9/hc1oZ8f6co1NiiU FNmdnyZBOSflicbrwTVes0bm/gjsMpcL04BDqNW1G7CY/V17SV10yJ8cpbmUHX7j mbqT2COvIGmisgppIeITySKgL0ssFOcee7GGWuXCymnVMiZC/419toD7MKh0COUh QvPoEzgTPC2YIdWbsHCRrljZrCanvE5cTS97XLSTYnTiQiJ1+0z/kt7HgmsbXJuB dEQOFEuGTWT5Mjm1U5vOBkfC49SADa/s6EoLtRlBztq3sG8EK7ttTGFIaewYHgFO IDXweNern71z6cFu7HLYPCI3rHlbcTanM92x7F7ZkaoaZ30ylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVvaVgS+/tRfd2TbWaGRWym/8yJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjIwMTQzMjMtZGViMS0z NmNmLWJlZjItMzkxMjRhY2U5MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeOJq6YXM4Rz4GxEoN0bbCT0DGbcP+ART0G+iCmb+gEeD6j9EcvyZjB inebBwNWNW9m9XUfuzh4C3VzKgNbIh18ugeR+rccZnsuy3EDFd0laBqrnhLk68pb Lj+7pH+HE9xQBB2VXP6Ack+UX51Aqxry/Y8ZOoId3GqB7mXPSgmg/D723/lkDqxr Y0tBFjvgIW3ruOSI6wfE3upgXUkGL52BGZ8YDYTka9UTUGuWAFS3tQsxz57D+8xM 6xALJPAB25N2PRNLWW6hwoTgVBbVS+MiB4HnQtmcrB8h3mrG/u/Y0AXYIYaUoSqm T9E8JDz0GLEU5VLZjIRmB+9fgs2sBAg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:36:01 2025 by rpki-client