$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa File: f118373f-fb93-35dc-9237-3c8b49c7e456.roa (raw, json) Hash identifier: LUeuBx9ayiuZg1Dv7S4j5fQimNpYG+WXLBmCpSJzglE= Subject key identifier: 39:60:A5:C7:2A:7D:29:6C:BF:27:7B:40:25:70:BF:D0:6A:DF:E4:34 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA0677C89FE7E7101C28200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa Signing time: Thu 21 Aug 2025 17:06:21 +0000 ROA not before: Thu 21 Aug 2025 17:06:21 +0000 ROA not after: Wed 19 Nov 2025 18:06:21 +0000 asID: 31898 IP address blocks: 192.29.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:67:7c:89:fe:7e:71:01:c2:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:21 2025 GMT Not After : Nov 19 18:06:21 2025 GMT Subject: CN=9c739262-59c2-4910-ad46-5f4b7dfcfbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:09:45:ae:db:4f:1f:88:74:8d:b5:b6:65: 2f:96:a4:51:c7:dd:76:46:95:a9:94:d3:14:f7:eb: ee:26:59:03:b3:8e:6d:28:10:f1:18:06:7e:d0:87: 57:5b:29:3c:42:9d:aa:71:25:cc:2f:d3:6d:0f:b0: d5:f3:09:a2:e6:73:63:38:d6:35:aa:f9:39:0c:9e: 0a:62:5a:ca:29:2b:10:57:28:6f:40:32:8b:e7:45: 5f:36:bc:2b:50:62:80:d0:bb:e2:32:66:ce:a7:bc: 39:f1:cb:61:0d:a5:68:c7:97:e3:98:f0:75:a9:90: 02:9a:ef:98:46:a6:1f:00:60:61:4b:47:96:d4:0b: ce:1b:db:17:33:e1:d3:a9:69:6c:55:4f:c9:5c:c0: f5:b8:76:bc:d3:61:88:94:03:ac:5f:f0:d5:90:fe: 22:30:96:9f:21:bf:45:4b:b3:a4:c6:f8:94:15:d5: 28:1b:02:ed:4e:00:fd:3d:ee:db:be:e5:30:4a:ae: 0f:6b:0c:69:a1:d5:f1:4c:e4:a3:ed:80:bb:22:5c: f0:9b:3f:ce:79:ab:47:0e:4f:60:1a:76:92:b1:5a: 72:f4:e9:12:d9:6c:64:ff:19:bf:a4:98:a1:e9:3e: 01:e0:2d:10:9f:2e:be:76:ea:2e:0f:29:b1:5c:1f: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:A5:C7:2A:7D:29:6C:BF:27:7B:40:25:70:BF:D0:6A:DF:E4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f118373f-fb93-35dc-9237-3c8b49c7e456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fb:a6:a9:34:02:b4:f0:f0:a4:35:b7:18:bf:44:97:3f:a7: e6:05:da:17:0d:6f:9c:bb:e8:d0:68:6b:d5:e9:c4:6e:61:b8: 5f:54:87:ce:10:42:98:58:1e:81:0a:39:5a:27:d3:bc:56:61: ca:8a:c9:1e:a6:1d:4f:96:28:ce:46:17:28:fa:76:00:ad:59: 71:60:c8:e4:fb:a8:bb:bc:81:32:63:0c:df:53:4e:50:3f:0e: 75:d2:b0:9e:89:3f:74:a7:68:96:d0:64:4e:1f:20:f9:a7:99: 2f:7d:49:b2:76:27:ba:fe:c4:ac:ac:61:cf:dc:3c:fb:4b:9f: 2b:7c:df:39:b5:e3:ce:15:90:25:43:02:42:3d:65:cb:6c:60: 8b:c7:4d:eb:a9:6c:a2:ad:fb:0a:3b:4c:82:da:c2:80:67:69: 84:91:ee:ed:d7:bf:b3:06:f7:e7:f2:c8:6d:ac:81:68:f0:28: 8c:5e:42:2e:74:02:e8:16:c9:e0:17:af:e0:e3:4c:fc:ba:31: 81:57:58:97:af:90:49:23:ae:cb:f4:77:8f:ac:18:5e:7f:3a: a8:83:7b:cc:1a:9d:57:2d:7d:75:33:13:9a:f2:cc:bd:c8:fa: 24:4b:f0:b5:95:c7:ec:96:07:64:c3:e2:fc:d6:86:f3:1a:91: 60:93:be:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoGd8if5+cQHCggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYyMVoXDTI1MTExOTE4MDYyMVowLzEtMCsGA1UEAxMk OWM3MzkyNjItNTljMi00OTEwLWFkNDYtNWY0YjdkZmNmYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofEJRa7bTx+IdI21tmUvlqRRx912RpWplNMU 9+vuJlkDs45tKBDxGAZ+0IdXWyk8Qp2qcSXML9NtD7DV8wmi5nNjONY1qvk5DJ4K YlrKKSsQVyhvQDKL50VfNrwrUGKA0LviMmbOp7w58cthDaVox5fjmPB1qZACmu+Y RqYfAGBhS0eW1AvOG9sXM+HTqWlsVU/JXMD1uHa802GIlAOsX/DVkP4iMJafIb9F S7OkxviUFdUoGwLtTgD9Pe7bvuUwSq4PawxpodXxTOSj7YC7Ilzwmz/OeatHDk9g GnaSsVpy9OkS2Wxk/xm/pJih6T4B4C0Qny6+duouDymxXB+t0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlgpccqfSlsvyd7QCVwv9Bq3+Q0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjExODM3M2YtZmI5My0z NWRjLTkyMzctM2M4YjQ5YzdlNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj7pqk0ArTw8KQ1txi/RJc/p+YF2hcNb5y76NBoa9XpxG5huF9Uh84Q QphYHoEKOVon07xWYcqKyR6mHU+WKM5GFyj6dgCtWXFgyOT7qLu8gTJjDN9TTlA/ DnXSsJ6JP3SnaJbQZE4fIPmnmS99SbJ2J7r+xKysYc/cPPtLnyt83zm1484VkCVD AkI9ZctsYIvHTeupbKKt+wo7TILawoBnaYSR7u3Xv7MG9+fyyG2sgWjwKIxeQi50 AugWyeAXr+DjTPy6MYFXWJevkEkjrsv0d4+sGF5/OqiDe8wanVctfXUzE5ryzL3I +iRL8LWVx+yWB2TD4vzWhvMakWCTvjI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:03 2025 by rpki-client