$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa File: 1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa (raw, json) Hash identifier: UYVzLzK06vTjUGhRaxdl59V7q/uFCC2z+h7U7KFEgoA= Subject key identifier: 6A:97:16:2F:8C:A9:6F:1E:8E:55:47:91:7E:9C:8C:8A:3E:0B:C6:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C859385FED0C46C20EF400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa Signing time: Mon 25 Aug 2025 17:00:43 +0000 ROA not before: Mon 25 Aug 2025 17:00:43 +0000 ROA not after: Sun 23 Nov 2025 18:00:43 +0000 asID: 31898 IP address blocks: 149.130.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:59:38:5f:ed:0c:46:c2:0e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:43 2025 GMT Not After : Nov 23 18:00:43 2025 GMT Subject: CN=904f27bd-c723-48b1-b60a-872faab1f7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:b8:60:32:f4:d1:c6:98:d9:c9:ec:0d:8a: ce:f7:4c:05:59:2d:a9:76:33:02:47:11:d0:c5:69: d1:a5:76:78:ab:73:41:7e:b9:65:1b:c7:d7:12:8f: 60:35:74:df:5b:45:c7:fa:da:4b:84:c1:01:4b:e7: f5:8e:9f:6b:2a:ec:e7:96:74:f4:14:32:75:a5:37: 3b:34:0d:ea:c4:31:62:48:4b:82:37:2b:3c:1f:d6: 23:c8:c4:08:a1:c7:4b:9f:4e:fb:c3:d2:06:8c:f4: d4:58:52:ae:ea:91:20:b3:2f:ac:5f:29:1b:54:b4: d1:7a:45:e7:49:56:f4:b4:19:7a:97:6c:5a:f0:3b: 4d:88:9e:cc:8f:f7:84:82:cc:2a:10:d5:ba:ee:1a: 5b:a1:e8:91:62:ab:12:79:89:d2:cb:2d:40:8c:6d: c2:b1:8a:bd:62:9b:fc:75:93:af:d5:28:6e:fc:47: c4:6c:1c:6d:54:62:1f:22:e4:17:8e:d7:c9:a4:8e: 74:6a:1f:53:01:78:06:8d:02:3f:c9:a9:b5:74:ac: e7:af:65:32:d2:14:e0:5f:22:f5:f8:c0:a5:72:5b: 6a:87:b8:ac:22:e9:2f:c8:d2:27:96:1b:ac:8b:73: 2c:de:cd:ec:ab:c5:82:a9:84:be:11:b5:05:c0:66: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:97:16:2F:8C:A9:6F:1E:8E:55:47:91:7E:9C:8C:8A:3E:0B:C6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1fcf4f8c-15d8-3c4e-86b1-84b4ab2f6d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:22:ac:ef:2a:02:2c:c0:0f:e5:33:c9:6f:b4:d8:8b:19:87: c7:b4:a6:13:e3:d6:75:3f:42:96:05:50:2a:4c:a4:25:f4:b0: 0e:5b:30:2a:41:b5:82:3f:ce:4e:2d:0e:d7:40:7b:b3:21:55: 30:fa:d6:80:4e:f4:8c:e2:83:ec:75:1e:6b:8f:db:16:6a:8a: ae:b2:95:6a:c0:cc:da:a3:c4:e4:5a:3b:a2:7a:9d:9a:c4:ea: 40:40:dd:91:c8:af:53:52:a7:2d:36:24:af:4b:1e:d4:3b:2a: f4:e2:b4:27:08:4c:97:9f:8b:3a:94:97:1c:58:55:6f:0d:32: bf:46:4a:1d:b5:6a:0a:49:79:82:d4:c4:23:6f:d3:02:ed:52: 2a:df:2b:cd:09:e2:ee:8c:06:c3:dd:23:31:f9:80:79:13:2b: b7:e1:38:3e:b7:c5:c6:6b:f6:fe:42:3a:a8:5e:7c:b5:98:f4: 98:e7:9a:04:4b:7f:69:f7:ab:cc:d2:35:59:10:b1:a6:1c:7b: 74:87:cf:83:4d:5f:b2:3d:b9:b7:68:72:81:00:be:2c:91:cb: 8e:81:8f:51:14:c8:72:c1:75:51:3f:1d:a3:83:ce:54:51:0d: d2:10:bf:e1:7d:3c:80:e6:9b:24:b7:c6:6d:f4:13:d8:cc:1f: 9c:40:b2:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yFk4X+0MRsIO9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDA0M1oXDTI1MTEyMzE4MDA0M1owLzEtMCsGA1UEAxMk OTA0ZjI3YmQtYzcyMy00OGIxLWI2MGEtODcyZmFhYjFmN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS+4YDL00caY2cnsDYrO90wFWS2pdjMCRxHQ xWnRpXZ4q3NBfrllG8fXEo9gNXTfW0XH+tpLhMEBS+f1jp9rKuznlnT0FDJ1pTc7 NA3qxDFiSEuCNys8H9YjyMQIocdLn077w9IGjPTUWFKu6pEgsy+sXykbVLTRekXn SVb0tBl6l2xa8DtNiJ7Mj/eEgswqENW67hpboeiRYqsSeYnSyy1AjG3CsYq9Ypv8 dZOv1Shu/EfEbBxtVGIfIuQXjtfJpI50ah9TAXgGjQI/yam1dKznr2Uy0hTgXyL1 +MClcltqh7isIukvyNInlhusi3Ms3s3sq8WCqYS+EbUFwGZ3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqXFi+MqW8ejlVHkX6cjIo+C8b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWZjZjRmOGMtMTVkOC0z YzRlLTg2YjEtODRiNGFiMmY2ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcirO8qAizAD+UzyW+02IsZh8e0phPj1nU/QpYFUCpMpCX0sA5bMCpB tYI/zk4tDtdAe7MhVTD61oBO9Izig+x1HmuP2xZqiq6ylWrAzNqjxORaO6J6nZrE 6kBA3ZHIr1NSpy02JK9LHtQ7KvTitCcITJefizqUlxxYVW8NMr9GSh21agpJeYLU xCNv0wLtUirfK80J4u6MBsPdIzH5gHkTK7fhOD63xcZr9v5COqhefLWY9JjnmgRL f2n3q8zSNVkQsaYce3SHz4NNX7I9ubdocoEAviyRy46Bj1EUyHLBdVE/HaODzlRR DdIQv+F9PIDmmyS3xm30E9jMH5xAslo= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:01 2025 by rpki-client