$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa File: 25afede6-5664-3043-85c1-30aedf5dbabe.roa (raw, json) Hash identifier: GDVu1FMZeG4IG/kWcSYaoK39tk07CurcOzsv+ai0QjU= Subject key identifier: 1C:50:FA:A9:DB:B4:C1:C8:C1:52:0D:C3:11:31:1A:BC:51:B2:02:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B00331D540682C8321E79F080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa Signing time: Thu 28 Aug 2025 00:10:41 +0000 ROA not before: Thu 28 Aug 2025 00:10:41 +0000 ROA not after: Wed 26 Nov 2025 01:10:41 +0000 asID: 31898 IP address blocks: 108.59.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:33:1d:54:06:82:c8:32:1e:79:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 28 00:10:41 2025 GMT Not After : Nov 26 01:10:41 2025 GMT Subject: CN=e769b7fc-0a90-4b2a-a093-c01b833c6d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:be:74:27:a0:c0:b7:21:89:88:1b:3f:16: be:d0:f1:a3:9f:14:25:e4:89:a2:6d:15:58:e6:41: 7d:0d:e2:61:b6:6b:c8:df:8c:1e:48:51:7f:3e:d6: dc:62:a9:58:47:29:b1:db:3a:fd:8a:8e:d9:f6:15: 1b:3a:3b:17:92:3a:b8:30:0f:01:ec:bc:ce:f8:e4: 98:a5:1a:61:9b:44:b3:5e:04:3a:65:82:d5:e5:d1: 8b:61:c9:5e:01:ad:3d:9e:f4:0c:3c:9f:75:de:2d: a7:5d:29:7f:16:c5:a5:b7:28:7c:39:6a:a3:12:d6: b6:8b:35:fa:9d:77:81:bf:f2:3f:13:d2:12:08:b2: 9a:6f:55:57:cb:4d:d0:99:75:2c:6a:d0:30:08:2e: 52:53:c9:32:f1:1a:ea:37:88:80:ec:dc:df:08:53: f3:f9:cf:fd:bd:b5:f4:bd:70:1b:6d:eb:57:b7:9b: 0a:94:3a:32:9e:43:92:11:a5:c4:d3:7a:09:c2:24: 9c:4f:7a:13:df:cf:bc:f0:2f:00:33:67:08:49:7d: ff:49:2e:d5:68:ea:8b:b0:0f:40:2e:e4:78:69:31: 5a:43:1b:af:f8:c8:62:a9:9e:e5:a5:d8:18:07:5b: a0:e0:53:ec:7b:9b:0a:45:f6:ca:15:15:59:22:89: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:FA:A9:DB:B4:C1:C8:C1:52:0D:C3:11:31:1A:BC:51:B2:02:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25afede6-5664-3043-85c1-30aedf5dbabe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:08:14:57:2e:63:9d:e0:83:57:6e:69:f8:10:e6:b2:41:d4: 1b:7f:d1:4b:dd:f3:b4:06:c7:4c:e0:5d:2a:56:a0:fe:78:be: 0a:79:1c:b4:df:3d:92:a0:35:67:e7:03:72:2d:84:eb:6d:31: b9:62:90:a4:86:66:e1:87:92:da:60:00:a8:89:ed:f8:ba:63: 8c:a6:61:4b:f5:b3:aa:71:de:b0:f9:e0:f9:b1:9a:16:8a:97: 77:2d:f5:64:b4:3c:2c:4d:39:9a:15:08:f5:7f:9c:1c:4d:0c: dd:1c:c8:36:21:81:d5:4e:c1:e1:92:22:74:63:1a:58:cb:da: 12:a7:8a:ed:2b:a7:31:e8:17:32:f4:c9:27:89:08:95:d6:43: 9c:97:90:f1:f6:c5:64:f2:3b:74:8e:0c:11:10:f3:a6:c9:9f: d0:62:8e:8d:9b:8e:04:43:25:8a:06:13:d3:62:97:01:63:c5: 0f:00:22:73:cb:43:17:e5:0c:a1:16:bf:d1:a8:2d:a7:fd:d2: f1:75:75:6c:28:55:e4:8b:7f:6e:6e:df:5d:8b:ab:ab:4c:83: 7e:16:2b:ea:d3:f3:c3:43:32:0b:72:1f:24:88:aa:23:b4:54: 0f:80:60:5c:a0:c7:77:b7:85:a8:78:8b:7e:a9:a6:b9:b3:a0: 03:e5:9c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAMx1UBoLIMh558IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyODAwMTA0MVoXDTI1MTEyNjAxMTA0MVowLzEtMCsGA1UEAxMk ZTc2OWI3ZmMtMGE5MC00YjJhLWEwOTMtYzAxYjgzM2M2ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzG+dCegwLchiYgbPxa+0PGjnxQl5ImibRVY 5kF9DeJhtmvI34weSFF/PtbcYqlYRymx2zr9io7Z9hUbOjsXkjq4MA8B7LzO+OSY pRphm0SzXgQ6ZYLV5dGLYcleAa09nvQMPJ913i2nXSl/FsWltyh8OWqjEta2izX6 nXeBv/I/E9ISCLKab1VXy03QmXUsatAwCC5SU8ky8RrqN4iA7NzfCFPz+c/9vbX0 vXAbbetXt5sKlDoynkOSEaXE03oJwiScT3oT38+88C8AM2cISX3/SS7VaOqLsA9A LuR4aTFaQxuv+MhiqZ7lpdgYB1ug4FPse5sKRfbKFRVZIokWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxQ+qnbtMHIwVINwxExGrxRsgKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVhZmVkZTYtNTY2NC0z MDQzLTg1YzEtMzBhZWRmNWRiYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQIFFcuY53gg1duafgQ5rJB1Bt/0Uvd87QGx0zgXSpWoP54vgp5HLTf PZKgNWfnA3IthOttMblikKSGZuGHktpgAKiJ7fi6Y4ymYUv1s6px3rD54PmxmhaK l3ct9WS0PCxNOZoVCPV/nBxNDN0cyDYhgdVOweGSInRjGljL2hKniu0rpzHoFzL0 ySeJCJXWQ5yXkPH2xWTyO3SODBEQ86bJn9Bijo2bjgRDJYoGE9NilwFjxQ8AInPL QxflDKEWv9GoLaf90vF1dWwoVeSLf25u312Lq6tMg34WK+rT88NDMgtyHySIqiO0 VA+AYFygx3e3hah4i36pprmzoAPlnKw= -----END CERTIFICATE-----Generated at Thu Oct 9 00:56:02 2025 by rpki-client