$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa File: 1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa (raw, json) Hash identifier: +WHbaPZvh883cr37y7vz6ZDFvbjC3yiby9Ee+wJaHMc= Subject key identifier: C7:CA:3A:13:B5:A9:2F:AB:BD:47:57:A5:BC:33:5A:02:CE:84:B3:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDB28E2C53EE178EFD23680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa Signing time: Thu 21 Aug 2025 10:28:55 +0000 ROA not before: Thu 21 Aug 2025 10:28:55 +0000 ROA not after: Wed 19 Nov 2025 11:28:55 +0000 asID: 31898 IP address blocks: 168.138.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:db:28:e2:c5:3e:e1:78:ef:d2:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:28:55 2025 GMT Not After : Nov 19 11:28:55 2025 GMT Subject: CN=873789aa-c9ef-4f6d-a923-4e430890bc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:a7:30:25:93:f0:f8:93:59:c2:52:ac:5a: fd:99:b5:f7:27:b4:e1:32:b1:c8:e1:59:42:c4:b1: 09:d7:37:b6:d4:71:c4:63:34:2c:b1:c0:39:9f:9e: a7:ce:2f:3f:82:e7:9b:bf:9b:38:f2:2b:7e:b9:9a: 29:0f:73:48:1d:c7:06:a5:80:7e:ae:b6:60:3d:d4: 8b:60:75:d6:4a:3a:13:51:dd:40:8a:55:34:30:e0: a8:b5:f3:35:cd:34:6e:5b:29:19:ad:68:9a:6d:7a: ba:0c:d1:9a:cc:1f:7e:75:e3:f4:b5:ed:6e:6b:76: 92:73:70:bc:12:77:d9:2d:62:3a:75:4c:3a:90:f5: dc:5c:99:10:0b:53:76:88:58:7b:30:0d:21:07:7a: ae:4e:d8:cc:08:d6:c4:ae:fd:d2:16:b3:37:14:0f: 5c:98:88:e4:6c:16:31:66:ec:ff:95:75:66:8d:1d: bb:3d:bc:50:c4:87:af:22:c7:3d:a5:bd:73:52:4a: b6:f4:18:0c:a7:e5:8a:7e:8b:ee:e9:e0:6c:eb:c6: f7:6b:08:ec:59:cc:7e:0c:5a:3c:22:86:8b:27:89: 2f:c6:67:3c:d6:9f:37:97:d1:f4:8f:a9:2b:2e:13: 98:69:2e:e6:53:97:16:fb:3d:fc:f8:b1:1a:1f:7f: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CA:3A:13:B5:A9:2F:AB:BD:47:57:A5:BC:33:5A:02:CE:84:B3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c8:33:18:63:29:7b:22:0b:9c:5a:2c:0f:e4:26:a2:c7:53: dd:9d:c5:2a:9b:f7:79:04:6b:5c:d3:c5:2b:c3:26:aa:42:2b: 18:68:f8:94:67:89:34:ad:52:e2:20:fa:b6:f0:54:bc:93:87: a8:9a:f0:41:74:88:f9:ce:1b:76:50:85:7e:15:ff:d1:09:a8: ab:e3:77:c4:f0:f1:9f:c4:fc:4e:40:16:4c:ff:e0:7e:65:10: e0:a6:d0:c5:5c:f2:63:ea:3e:3c:34:a5:14:e9:dd:65:53:18: ee:93:bc:2e:27:30:7e:64:42:6c:d1:2f:85:0c:f8:13:fb:d4: 79:f8:1d:27:2a:b2:c3:09:8e:34:b3:78:ae:9f:86:87:a3:60: 8d:ac:43:71:f5:58:4b:d3:52:a2:a3:33:3c:62:b4:3d:03:f2: 5e:4a:8e:b1:d2:a6:8f:7d:03:aa:f9:ad:b6:8e:82:5b:1a:a4: 3e:2c:0a:a7:c2:72:27:04:62:8e:c2:a2:a0:be:d2:af:3c:97: e0:2a:ca:b3:5f:0b:93:68:b6:5a:2b:19:9c:50:1f:a9:67:b3: a8:b1:8a:05:3a:05:25:5e:43:5b:4e:df:eb:ec:cd:96:72:3b: ab:95:ac:5c:99:b3:bc:6a:87:8d:86:c1:8f:6c:68:a0:b1:32: 81:47:f7:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2yjixT7heO/SNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjg1NVoXDTI1MTExOTExMjg1NVowLzEtMCsGA1UEAxMk ODczNzg5YWEtYzllZi00ZjZkLWE5MjMtNGU0MzA4OTBiYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqninMCWT8PiTWcJSrFr9mbX3J7ThMrHI4VlC xLEJ1ze21HHEYzQsscA5n56nzi8/guebv5s48it+uZopD3NIHccGpYB+rrZgPdSL YHXWSjoTUd1AilU0MOCotfM1zTRuWykZrWiabXq6DNGazB9+deP0te1ua3aSc3C8 EnfZLWI6dUw6kPXcXJkQC1N2iFh7MA0hB3quTtjMCNbErv3SFrM3FA9cmIjkbBYx Zuz/lXVmjR27PbxQxIevIsc9pb1zUkq29BgMp+WKfovu6eBs68b3awjsWcx+DFo8 IoaLJ4kvxmc81p83l9H0j6krLhOYaS7mU5cW+z38+LEaH3+k6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfKOhO1qS+rvUdXpbwzWgLOhLOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVjMjBlNzQtYThhZC0z ZmM5LTkxYTEtNTYyODg2ZTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvIMxhjKXsiC5xaLA/kJqLHU92dxSqb93kEa1zTxSvDJqpCKxho+JRn iTStUuIg+rbwVLyTh6ia8EF0iPnOG3ZQhX4V/9EJqKvjd8Tw8Z/E/E5AFkz/4H5l EOCm0MVc8mPqPjw0pRTp3WVTGO6TvC4nMH5kQmzRL4UM+BP71Hn4HScqssMJjjSz eK6fhoejYI2sQ3H1WEvTUqKjMzxitD0D8l5KjrHSpo99A6r5rbaOglsapD4sCqfC cicEYo7CoqC+0q88l+AqyrNfC5NotlorGZxQH6lns6ixigU6BSVeQ1tO3+vszZZy O6uVrFyZs7xqh42GwY9saKCxMoFH9wE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:43 2025 by rpki-client