$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c5f5b18-20e8-3a89-ad74-36616b27367f.roa File: 2c5f5b18-20e8-3a89-ad74-36616b27367f.roa (raw, json) Hash identifier: zvBBmg9fhGEnnmx6cHBv5lrA5JzywYUH+qKRVxYnf0g= Subject key identifier: 31:CA:16:16:02:ED:A9:6F:AF:19:55:F9:D9:4C:3F:72:76:43:04:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B37DC86F5FC042D9DB0F86E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c5f5b18-20e8-3a89-ad74-36616b27367f.roa Signing time: Tue 16 Sep 2025 22:41:30 +0000 ROA not before: Tue 16 Sep 2025 22:41:30 +0000 ROA not after: Mon 15 Dec 2025 23:41:30 +0000 asID: 54253 IP address blocks: 159.13.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:dc:86:f5:fc:04:2d:9d:b0:f8:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 22:41:30 2025 GMT Not After : Dec 15 23:41:30 2025 GMT Subject: CN=ce914c3f-0078-4b6a-8b69-1999b6360567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:10:3f:1f:50:fb:2e:dc:8a:e4:dd:32:ee: 05:47:68:2b:62:7e:86:f1:19:c5:b4:23:63:50:ec: d2:77:c2:3c:8b:a5:10:09:a3:5c:69:59:d7:9f:76: a0:97:67:00:02:9f:c1:be:a6:4b:c0:c5:3d:cb:43: a4:ec:fc:e0:e9:e2:a6:53:2c:62:ec:26:fc:57:48: 7d:73:6e:3d:94:63:1c:1d:2e:5c:ee:d1:3a:69:6a: a5:83:02:01:ba:c0:a6:22:a7:fe:69:bb:9b:cc:db: 5d:9e:32:19:dd:4b:a6:92:1c:49:fb:a9:d7:a2:27: 64:4e:99:e7:15:23:0f:a5:03:f3:96:b3:3d:0d:cd: 78:bc:d3:52:5b:27:97:4f:ee:2b:e1:7b:44:4a:1a: 42:02:eb:b2:00:0d:14:5a:59:89:cd:cc:a2:d7:99: ed:de:64:fb:fb:c5:9e:bc:e5:14:b6:63:26:c2:d9: 67:bb:43:ab:7a:e9:27:7e:9b:83:33:39:91:8c:75: 53:36:5e:6f:9f:37:85:c5:20:8c:97:04:7a:db:f8: d7:28:f9:ed:77:5d:7f:f0:39:0f:8a:b2:c9:be:89: d2:11:cc:21:62:45:93:1a:e0:75:ef:aa:0f:d9:b3: ac:4d:fc:72:b0:75:55:f1:0d:77:84:cf:77:2c:66: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CA:16:16:02:ED:A9:6F:AF:19:55:F9:D9:4C:3F:72:76:43:04:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c5f5b18-20e8-3a89-ad74-36616b27367f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:84:87:af:de:ef:e4:a1:f6:56:7c:76:b0:b6:7b:da:be:21: 6d:b3:2e:8d:e3:6b:93:29:0f:b3:a3:1e:34:77:65:24:dd:c1: a9:45:01:a6:f7:2e:c9:f9:9d:81:1a:ab:b1:6e:26:01:66:5d: 4f:94:23:3c:68:b3:72:8e:0d:04:9c:a3:0e:1a:f8:b5:e8:21: 60:28:76:36:81:1d:03:47:e9:92:d9:40:87:43:65:c3:d9:db: 18:03:9c:8d:5b:d3:e1:2e:9e:45:36:12:b9:52:1b:80:0b:b1: 54:5a:49:3a:e6:f2:8b:4e:98:e8:bc:79:77:3b:39:f4:09:62: a2:05:26:e5:1b:40:b9:14:c0:91:2e:57:8b:e7:48:e6:03:64: 16:c0:83:39:d8:04:b5:7c:0a:72:5b:b3:14:8a:f9:31:2b:d0: 3e:20:5f:5d:ea:0b:1f:78:6d:e5:40:16:38:2c:0f:c9:c1:84: 91:2d:e2:89:85:16:ce:02:3a:63:cf:a2:94:d0:34:31:68:24: e4:d6:f3:78:9d:b6:07:f8:1a:e8:17:db:29:4b:ac:e6:fd:ec: f3:47:fa:1a:c5:80:9a:1b:d7:e3:cb:64:04:15:98:4c:f5:0f: 48:a7:9e:11:a2:2f:58:38:37:3f:39:74:ee:fc:d1:d8:1b:c1: 33:21:1c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs33Ib1/AQtnbD4bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjIyNDEzMFoXDTI1MTIxNTIzNDEzMFowLzEtMCsGA1UEAxMk Y2U5MTRjM2YtMDA3OC00YjZhLThiNjktMTk5OWI2MzYwNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY8QPx9Q+y7ciuTdMu4FR2grYn6G8RnFtCNj UOzSd8I8i6UQCaNcaVnXn3agl2cAAp/BvqZLwMU9y0Ok7Pzg6eKmUyxi7Cb8V0h9 c249lGMcHS5c7tE6aWqlgwIBusCmIqf+abubzNtdnjIZ3UumkhxJ+6nXoidkTpnn FSMPpQPzlrM9Dc14vNNSWyeXT+4r4XtEShpCAuuyAA0UWlmJzcyi15nt3mT7+8We vOUUtmMmwtlnu0OreuknfpuDMzmRjHVTNl5vnzeFxSCMlwR62/jXKPntd11/8DkP irLJvonSEcwhYkWTGuB176oP2bOsTfxysHVV8Q13hM93LGanTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHKFhYC7alvrxlV+dlMP3J2QwQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM1ZjViMTgtMjBlOC0z YTg5LWFkNzQtMzY2MTZiMjczNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCEh6/e7+Sh9lZ8drC2e9q+IW2zLo3ja5MpD7OjHjR3ZSTdwalFAab3 Lsn5nYEaq7FuJgFmXU+UIzxos3KODQScow4a+LXoIWAodjaBHQNH6ZLZQIdDZcPZ 2xgDnI1b0+EunkU2ErlSG4ALsVRaSTrm8otOmOi8eXc7OfQJYqIFJuUbQLkUwJEu V4vnSOYDZBbAgznYBLV8CnJbsxSK+TEr0D4gX13qCx94beVAFjgsD8nBhJEt4omF Fs4COmPPopTQNDFoJOTW83idtgf4GugX2ylLrOb97PNH+hrFgJob1+PLZAQVmEz1 D0innhGiL1g4Nz85dO780dgbwTMhHJk= -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:04 2025 by rpki-client