$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa File: dd44df42-3f54-37f6-881c-e708b3079e2c.roa (raw, json) Hash identifier: FQkBjCh7CF/lOjDMn9KsGE+ME416u3CBkSELOQ2XEaI= Subject key identifier: 27:16:58:96:C1:1F:4D:EB:AF:59:A0:C4:78:B7:02:A6:74:AA:85:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4FF0B4D6EC5A95DE4641C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa Signing time: Mon 04 Aug 2025 18:21:14 +0000 ROA not before: Mon 04 Aug 2025 18:21:14 +0000 ROA not after: Sun 02 Nov 2025 19:21:14 +0000 asID: 46558 IP address blocks: 132.226.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4f:f0:b4:d6:ec:5a:95:de:46:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:21:14 2025 GMT Not After : Nov 2 19:21:14 2025 GMT Subject: CN=087e2774-b42b-40a5-bcb3-aa516a614268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:1c:61:bc:3d:89:32:66:1d:a7:8a:06:1d: d4:c4:d5:c9:04:56:9b:cb:71:5e:72:96:a0:ff:d5: c3:5d:15:79:ab:d4:b4:76:30:df:2a:1c:2e:21:35: 37:73:f5:f4:fb:19:3c:61:28:fa:cc:5a:12:e9:a4: 0c:e9:68:f3:8b:2d:e6:db:65:7c:7e:6f:0d:eb:fd: 6d:2d:6f:d7:17:91:66:3f:0d:4f:d3:c9:f9:39:90: 0d:42:93:ba:fd:01:f0:d8:e1:17:66:60:8b:d9:11: 13:9c:b5:d4:31:e4:4d:e4:39:63:70:f6:4b:ad:dc: 0c:fc:d9:46:20:29:af:61:c8:20:ae:60:f2:ba:e5: e1:4a:9e:22:57:c5:05:9b:69:af:bb:7c:e8:c1:1b: 67:cb:8f:40:c2:cb:ac:4e:74:25:bc:b0:35:b9:69: 31:bb:f2:52:7e:af:b1:a4:33:63:be:66:b6:78:f1: 29:ab:b9:24:f7:89:35:c7:cf:80:1a:74:4e:9b:b6: 09:9b:79:54:db:68:42:bf:4d:17:1c:0b:9a:33:67: 50:c8:c4:7c:65:df:11:8b:be:8d:77:31:f6:d7:73: 2a:21:58:d7:ae:a7:b4:6d:6b:16:7b:ad:a9:ec:2b: d8:c5:63:71:49:7f:b9:bd:16:97:a1:7d:85:94:9e: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:16:58:96:C1:1F:4D:EB:AF:59:A0:C4:78:B7:02:A6:74:AA:85:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dd44df42-3f54-37f6-881c-e708b3079e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ed:0b:b1:b5:df:82:75:4d:59:02:de:fd:a6:14:ac:1e:9d: c5:f2:fa:b2:ee:91:fb:05:43:71:d0:4c:d8:60:82:f4:21:13: 07:35:d5:c1:7b:98:d4:27:80:0e:15:87:46:11:b2:40:6a:18: 39:20:d4:97:e0:79:fb:c2:c2:f6:45:dc:cc:e4:45:ad:b1:61: 18:e2:80:ad:d8:b7:ed:62:6d:23:bc:75:66:d4:a7:7d:1e:3f: bf:bf:f4:a5:13:49:7b:63:ed:1a:98:22:be:d2:45:b2:14:3e: 8b:5d:7a:97:ad:cf:6a:d4:19:53:d5:bb:b8:d0:b5:99:e5:20: e5:e9:b7:bb:1e:97:6d:bf:a4:6c:f3:ec:c8:2e:7f:b6:aa:6e: 97:5f:7a:9e:a9:08:93:51:f7:41:b6:7c:82:d5:ba:22:0b:aa: 31:99:17:36:59:6b:c0:99:f8:b6:6d:17:b2:da:76:1c:db:ae: 99:2c:b4:56:1f:0a:0b:8f:93:d9:64:7a:13:9f:ef:b2:ff:f1: 15:09:bb:a7:f6:b8:96:2d:ce:3b:b4:50:91:4f:48:d4:8b:ad: b4:0b:fc:cc:50:74:cc:76:da:64:f7:4e:33:9f:12:1b:8f:52: c4:87:92:18:ce:a7:e6:29:8d:7f:d8:85:2a:c5:b2:93:81:e6: 12:78:fd:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/T/C01uxald5GQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MjExNFoXDTI1MTEwMjE5MjExNFowLzEtMCsGA1UEAxMk MDg3ZTI3NzQtYjQyYi00MGE1LWJjYjMtYWE1MTZhNjE0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojUcYbw9iTJmHaeKBh3UxNXJBFaby3Fecpag /9XDXRV5q9S0djDfKhwuITU3c/X0+xk8YSj6zFoS6aQM6Wjziy3m22V8fm8N6/1t LW/XF5FmPw1P08n5OZANQpO6/QHw2OEXZmCL2RETnLXUMeRN5DljcPZLrdwM/NlG ICmvYcggrmDyuuXhSp4iV8UFm2mvu3zowRtny49AwsusTnQlvLA1uWkxu/JSfq+x pDNjvma2ePEpq7kk94k1x8+AGnROm7YJm3lU22hCv00XHAuaM2dQyMR8Zd8Ri76N dzH213MqIVjXrqe0bWsWe62p7CvYxWNxSX+5vRaXoX2FlJ61iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcWWJbBH03rr1mgxHi3AqZ0qoUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGQ0NGRmNDItM2Y1NC0z N2Y2LTg4MWMtZTcwOGIzMDc5ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChOKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACntC7G134J1TVkC3v2mFKwencXy+rLukfsFQ3HQTNhggvQhEwc11cF7 mNQngA4Vh0YRskBqGDkg1JfgefvCwvZF3MzkRa2xYRjigK3Yt+1ibSO8dWbUp30e P7+/9KUTSXtj7RqYIr7SRbIUPotdepetz2rUGVPVu7jQtZnlIOXpt7sel22/pGzz 7Mguf7aqbpdfep6pCJNR90G2fILVuiILqjGZFzZZa8CZ+LZtF7LadhzbrpkstFYf CguPk9lkehOf77L/8RUJu6f2uJYtzju0UJFPSNSLrbQL/MxQdMx22mT3TjOfEhuP UsSHkhjOp+YpjX/YhSrFspOB5hJ4/Xc= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:28 2025 by rpki-client