$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/867c81ed-f75a-382a-a994-119937ab7d30.roa File: 867c81ed-f75a-382a-a994-119937ab7d30.roa (raw, json) Hash identifier: B8OD+MFl24KFfWqbJzw1g2KpmAiCoaRtHvfA2ChtPzk= Subject key identifier: 09:03:DE:81:C3:A5:1D:10:1D:4C:09:F2:0E:94:56:AA:9A:8B:68:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE699A9889AD1AC884BD53B10 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/867c81ed-f75a-382a-a994-119937ab7d30.roa Signing time: Mon 18 Aug 2025 20:06:18 +0000 ROA not before: Mon 18 Aug 2025 20:06:18 +0000 ROA not after: Sun 16 Nov 2025 21:06:18 +0000 asID: 31898 IP address blocks: 64.110.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:99:a9:88:9a:d1:ac:88:4b:d5:3b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 20:06:18 2025 GMT Not After : Nov 16 21:06:18 2025 GMT Subject: CN=555611da-1935-4edc-8688-6e2d1fcf5b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:a8:37:0c:ff:99:c2:f9:6f:d7:cd:6a:1e: 90:12:1d:5a:cb:de:bf:25:a0:c7:d6:7e:9c:e8:09: 5c:43:d5:e4:25:c4:80:8c:20:b2:31:69:3e:53:f1: c4:cb:60:1a:88:be:43:c2:81:a5:54:e1:e9:c1:8a: c8:8b:8f:e9:a6:98:aa:3b:64:8a:67:e3:75:9e:54: e3:39:09:16:aa:a2:c0:7c:c9:0c:c6:a1:31:79:8c: a4:21:97:d5:ed:4e:b7:ff:7a:41:50:80:cc:a5:49: 1d:89:41:ca:5d:14:44:b0:49:9d:5e:8f:8f:8e:85: c3:99:49:dd:d5:92:5e:28:a0:a0:c9:a2:1f:b7:78: b6:83:c5:5b:be:bb:20:f9:96:0f:70:bc:d0:ce:a3: 65:60:96:5e:fc:87:e8:1e:7d:78:50:e5:46:a7:77: 95:b6:0d:eb:46:9d:55:90:92:4f:6b:61:b3:7b:21: 85:1e:9d:c3:df:06:af:1f:b3:68:f4:e7:64:99:75: 98:d9:b7:3e:97:7e:20:f9:d3:b0:b8:be:a7:73:65: 28:b2:a9:26:4f:10:b4:8f:41:b2:bd:ec:b6:13:fb: 67:9a:c2:f4:9b:ab:a5:a3:16:01:a5:f3:cb:e9:71: bc:9d:35:cc:2a:f6:44:73:6d:b8:50:23:e1:78:0e: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:DE:81:C3:A5:1D:10:1D:4C:09:F2:0E:94:56:AA:9A:8B:68:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/867c81ed-f75a-382a-a994-119937ab7d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.110.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ce:2b:52:6b:17:19:fa:b0:c8:b9:2e:5f:6a:1d:26:cd:ca: 87:0a:cd:e7:24:fa:a6:9b:1a:87:98:7c:d1:07:9a:cd:b1:4b: f7:9d:59:a2:9c:f4:a2:3e:52:a9:3f:78:88:82:cc:4a:1e:cb: e7:f4:de:15:45:a7:ac:cd:bc:b5:91:42:cd:7b:1b:88:80:0d: d0:d2:fb:f5:9d:68:23:ac:6b:31:2c:be:f6:c4:8b:66:d0:7c: be:ce:f7:bb:26:80:d9:75:2d:1a:c1:f3:ef:ff:a5:92:4f:99: 3c:f5:fd:52:6c:f9:d7:6b:da:bd:db:f2:ad:86:08:a7:c6:fd: 50:66:8b:ce:7c:11:0f:93:44:45:b1:62:4d:a8:dc:22:27:c2: 63:43:27:e1:73:f1:c5:e4:16:59:e7:bd:7e:d0:d7:63:a2:31: 51:ce:d1:59:77:4e:a6:16:7d:a6:c2:a2:45:15:90:af:65:7d: 32:19:df:99:29:b6:38:a7:ea:d0:db:2f:4d:1d:07:01:53:1b: ea:c6:ca:88:38:f1:23:d5:05:e2:3d:00:49:d9:fe:86:ef:66: a3:e5:07:7b:87:64:ca:53:a4:0d:e1:e7:b4:0f:25:9e:84:8e: 01:ce:e6:8c:6f:28:04:e3:99:33:50:b1:5f:f9:3f:8c:e5:d4: 6e:c0:28:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmmamImtGsiEvVOxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIwMDYxOFoXDTI1MTExNjIxMDYxOFowLzEtMCsGA1UEAxMk NTU1NjExZGEtMTkzNS00ZWRjLTg2ODgtNmUyZDFmY2Y1YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSioNwz/mcL5b9fNah6QEh1ay96/JaDH1n6c 6AlcQ9XkJcSAjCCyMWk+U/HEy2AaiL5DwoGlVOHpwYrIi4/pppiqO2SKZ+N1nlTj OQkWqqLAfMkMxqExeYykIZfV7U63/3pBUIDMpUkdiUHKXRREsEmdXo+PjoXDmUnd 1ZJeKKCgyaIft3i2g8Vbvrsg+ZYPcLzQzqNlYJZe/IfoHn14UOVGp3eVtg3rRp1V kJJPa2GzeyGFHp3D3wavH7No9OdkmXWY2bc+l34g+dOwuL6nc2UosqkmTxC0j0Gy vey2E/tnmsL0m6uloxYBpfPL6XG8nTXMKvZEc224UCPheA7zxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkD3oHDpR0QHUwJ8g6UVqqai2hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY3YzgxZWQtZjc1YS0z ODJhLWE5OTQtMTE5OTM3YWI3ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQG5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjOK1JrFxn6sMi5Ll9qHSbNyocKzeck+qabGoeYfNEHms2xS/edWaKc 9KI+Uqk/eIiCzEoey+f03hVFp6zNvLWRQs17G4iADdDS+/WdaCOsazEsvvbEi2bQ fL7O97smgNl1LRrB8+//pZJPmTz1/VJs+ddr2r3b8q2GCKfG/VBmi858EQ+TREWx Yk2o3CInwmNDJ+Fz8cXkFlnnvX7Q12OiMVHO0Vl3TqYWfabCokUVkK9lfTIZ35kp tjin6tDbL00dBwFTG+rGyog48SPVBeI9AEnZ/obvZqPlB3uHZMpTpA3h57QPJZ6E jgHO5oxvKATjmTNQsV/5P4zl1G7AKLg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:42 2025 by rpki-client