$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1e071d16-c26a-3180-b902-d2841770c37a.roa File: 1e071d16-c26a-3180-b902-d2841770c37a.roa (raw, json) Hash identifier: EH3TQUAXZfMXgLpnsB/RMA5t94QCKgWXOp4aU/hCp1s= Subject key identifier: 5E:EB:AB:D7:DB:1E:5E:B8:A7:9C:51:2B:09:36:7D:90:15:D9:73:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C512B06B1D03832028A5F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1e071d16-c26a-3180-b902-d2841770c37a.roa Signing time: Mon 25 Aug 2025 08:18:19 +0000 ROA not before: Mon 25 Aug 2025 08:18:19 +0000 ROA not after: Sun 23 Nov 2025 09:18:19 +0000 asID: 31898 IP address blocks: 205.147.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c5:12:b0:6b:1d:03:83:20:28:a5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:18:19 2025 GMT Not After : Nov 23 09:18:19 2025 GMT Subject: CN=a50e31c9-2233-4cd9-bfd9-f34757ef3a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:2d:72:6e:77:c8:b1:c0:d2:c5:34:92:f0: e8:4c:2a:4a:e0:a7:be:86:ea:39:8f:a1:64:0c:73: 96:68:21:b9:2a:c8:b2:10:00:d7:f3:e9:eb:6b:10: 4c:e7:a1:ea:2e:9e:e0:de:a6:10:23:3a:05:a1:80: 38:aa:f7:2b:a2:47:27:6c:5a:e4:9c:2b:f6:46:f5: 0f:e4:13:2f:d0:ad:77:af:55:a7:ba:46:85:fa:2a: b2:3c:df:8d:83:1f:53:6f:4d:d0:e3:aa:14:16:2b: a8:7b:e9:56:7b:82:fc:bb:8d:44:8f:54:f8:ca:b0: 13:6d:ea:96:08:65:2d:02:e3:ad:f0:bd:a9:55:22: b9:29:60:b3:a9:f6:49:5f:36:4a:b2:26:3b:a3:5b: c6:94:15:ca:bb:c1:37:e3:fe:53:a1:11:e2:ec:40: c5:43:4f:76:19:be:c9:86:4a:36:2e:23:98:62:b7: 17:90:18:e5:24:95:8c:ed:0b:4a:14:94:49:fe:e9: af:01:42:70:5e:cc:3b:55:0c:c3:da:73:53:a2:17: 70:7f:2b:b3:cd:98:9b:f6:4c:22:12:f7:f7:e9:4e: 33:11:c8:6c:ca:8e:7d:7a:71:56:3a:ba:2f:4f:cc: c2:8c:72:53:6d:0f:c0:e5:c3:53:ef:9b:4f:b5:01: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:AB:D7:DB:1E:5E:B8:A7:9C:51:2B:09:36:7D:90:15:D9:73:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1e071d16-c26a-3180-b902-d2841770c37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 205.147.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9e:71:1e:7d:c5:1b:02:09:9f:e7:d3:48:ba:69:bd:ad:ae: 4f:9d:1b:74:49:f8:38:0a:79:ef:c1:f8:05:f7:16:ae:15:16: 1a:91:c9:fb:0f:7f:84:33:5d:7c:c5:d7:0b:ed:5a:09:04:c2: d5:40:ef:1f:ad:ab:f6:ae:98:8f:67:57:a7:0e:9c:0d:69:90: dd:00:ca:99:b5:34:6c:32:c7:8c:ae:5e:fa:be:cd:57:0e:fd: da:86:61:16:2b:d4:45:19:a7:bb:88:f9:00:88:c2:3c:c9:84: 28:d4:c6:da:37:a9:24:fb:06:32:37:74:7e:53:c6:2a:9c:04: e0:b5:0f:bd:72:01:94:cf:b8:33:d0:ec:d6:c7:3e:38:b5:9e: ea:ad:7e:39:59:5d:d6:8d:01:5b:a8:b1:91:42:f6:28:0c:e7: be:06:ba:e5:65:3a:2a:ee:1b:2a:49:81:4e:4b:bf:ca:61:ca: 54:82:90:48:e4:1e:c6:5b:85:da:5b:c3:35:56:a3:8f:d2:ef: 65:b0:f8:f9:f5:e3:25:67:ca:0b:4f:b7:1e:70:f2:23:de:9b: ce:22:11:f8:5d:a5:b2:74:b5:b3:53:25:e6:8f:e9:a7:28:ac: a0:db:78:0c:56:f1:44:2b:a2:75:c9:a8:f3:41:c1:23:af:e7: 59:18:e5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xRKwax0DgyAopfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTgxOVoXDTI1MTEyMzA5MTgxOVowLzEtMCsGA1UEAxMk YTUwZTMxYzktMjIzMy00Y2Q5LWJmZDktZjM0NzU3ZWYzYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMotcm53yLHA0sU0kvDoTCpK4Ke+huo5j6Fk DHOWaCG5KsiyEADX8+nraxBM56HqLp7g3qYQIzoFoYA4qvcrokcnbFrknCv2RvUP 5BMv0K13r1WnukaF+iqyPN+Ngx9Tb03Q46oUFiuoe+lWe4L8u41Ej1T4yrATbeqW CGUtAuOt8L2pVSK5KWCzqfZJXzZKsiY7o1vGlBXKu8E34/5ToRHi7EDFQ092Gb7J hko2LiOYYrcXkBjlJJWM7QtKFJRJ/umvAUJwXsw7VQzD2nNTohdwfyuzzZib9kwi Evf36U4zEchsyo59enFWOrovT8zCjHJTbQ/A5cNT75tPtQHwJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7rq9fbHl64p5xRKwk2fZAV2XNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWUwNzFkMTYtYzI2YS0z MTgwLWI5MDItZDI4NDE3NzBjMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCecR59xRsCCZ/n00i6ab2trk+dG3RJ+DgKee/B+AX3Fq4VFhqRyfsP f4QzXXzF1wvtWgkEwtVA7x+tq/aumI9nV6cOnA1pkN0Aypm1NGwyx4yuXvq+zVcO /dqGYRYr1EUZp7uI+QCIwjzJhCjUxto3qST7BjI3dH5TxiqcBOC1D71yAZTPuDPQ 7NbHPji1nuqtfjlZXdaNAVuosZFC9igM574GuuVlOiruGypJgU5Lv8phylSCkEjk HsZbhdpbwzVWo4/S72Ww+Pn14yVnygtPtx5w8iPem84iEfhdpbJ0tbNTJeaP6aco rKDbeAxW8UQronXJqPNBwSOv51kY5Ys= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:40 2025 by rpki-client