$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa File: 3651f220-6b03-3e15-a101-139beaa52674.roa (raw, json) Hash identifier: Mj7b9/RqQUDRY91g422kZd6YxdhNwu1SQTmaOWk+a+s= Subject key identifier: BC:58:B8:09:8E:51:17:B9:C3:21:C7:5F:35:D9:03:34:D2:A1:3C:12 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4327F0D5B43E25EE393600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa Signing time: Tue 26 Aug 2025 22:55:35 +0000 ROA not before: Tue 26 Aug 2025 22:55:35 +0000 ROA not after: Mon 24 Nov 2025 23:55:35 +0000 asID: 31898 IP address blocks: 157.151.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:27:f0:d5:b4:3e:25:ee:39:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:35 2025 GMT Not After : Nov 24 23:55:35 2025 GMT Subject: CN=bba5fdf9-8187-4e66-b32c-ff34d9f06467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:44:0f:3b:4d:b8:74:e4:63:26:d8:5a:4a: 8a:21:d8:43:76:3a:da:e9:01:85:5f:4b:db:bb:ec: 8e:d4:5b:80:1c:19:4c:fb:cd:01:f1:18:fc:02:47: a3:64:bc:25:4f:62:73:8d:bb:0a:99:08:13:56:18: 1c:60:c6:80:54:6e:0c:10:11:90:1b:bb:f5:3f:00: c9:90:36:55:41:52:51:13:c4:18:75:e3:e3:80:a7: be:4e:4b:7a:8c:46:18:6f:26:19:cb:75:a1:55:19: ef:f7:bb:34:16:6a:62:b4:c5:d2:dd:5f:b5:e3:1b: 30:97:63:97:36:9c:e1:b1:ea:30:28:c7:89:5a:82: 50:94:8f:79:e5:89:d9:06:2a:69:e5:a3:83:0d:6a: 38:7d:bf:38:30:11:33:5c:fb:db:d4:4d:81:57:cc: e9:c3:50:c9:f9:30:7e:63:45:33:49:b3:37:73:99: 73:2c:db:d2:35:70:06:fc:a2:bb:53:82:64:bc:da: 03:63:d2:ae:e2:5d:5e:9d:83:4a:2c:47:a4:0c:87: a2:6b:56:ed:7b:cb:dd:0c:83:f6:16:d5:8b:91:a2: e0:fb:bf:7e:2f:00:5d:71:94:7b:f7:2f:2e:ea:78: e8:3d:75:ac:65:ed:51:63:30:bf:48:06:5b:83:9f: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:58:B8:09:8E:51:17:B9:C3:21:C7:5F:35:D9:03:34:D2:A1:3C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3651f220-6b03-3e15-a101-139beaa52674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:72:83:50:74:db:e1:61:51:7d:6e:00:7e:5a:4b:23:a9:db: 73:82:c6:d5:0f:98:ab:8f:41:bd:3b:de:80:f9:2c:e9:61:2e: f5:a3:7f:0b:65:1f:60:f9:78:1d:53:34:51:0d:5c:a6:b0:c5: 36:96:04:d0:b7:56:94:73:25:5a:44:04:2f:f0:a4:83:45:a9: 71:4e:15:bf:11:fc:e6:9a:7f:aa:d8:bb:f9:e4:e3:f9:6e:f9: c2:6d:83:de:ff:15:e2:40:39:0f:9f:c5:15:88:f4:f7:c5:20: cf:7e:bb:4d:4b:5c:63:ed:49:52:3d:ce:18:95:42:a2:8d:ea: 67:5e:d0:12:a7:d1:84:c6:b7:e7:1d:30:4a:2e:5a:e6:6f:ef: 51:1c:3c:bf:9b:5d:9a:e6:63:5d:eb:7f:12:3a:0f:97:98:d4: c2:f4:24:95:2c:c0:70:74:22:f4:ee:b2:3c:df:d8:d9:b0:84: 30:05:91:d5:11:4d:d5:67:53:e6:a8:39:99:3a:3f:30:6a:48: 7f:e6:2f:99:0d:6b:3f:f7:c6:b9:be:6a:d8:18:52:a0:e9:ba: d3:a9:a4:46:0b:6f:03:81:9f:7c:21:f8:d7:b7:8e:11:56:a7: aa:cf:0d:6e:0a:c8:b6:34:c3:30:b4:ee:af:ce:c6:f8:3a:89: d8:9d:fb:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qyfw1bQ+Je45NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUzNVoXDTI1MTEyNDIzNTUzNVowLzEtMCsGA1UEAxMk YmJhNWZkZjktODE4Ny00ZTY2LWIzMmMtZmYzNGQ5ZjA2NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIFEDztNuHTkYybYWkqKIdhDdjra6QGFX0vb u+yO1FuAHBlM+80B8Rj8AkejZLwlT2JzjbsKmQgTVhgcYMaAVG4MEBGQG7v1PwDJ kDZVQVJRE8QYdePjgKe+Tkt6jEYYbyYZy3WhVRnv97s0FmpitMXS3V+14xswl2OX NpzhseowKMeJWoJQlI955YnZBipp5aODDWo4fb84MBEzXPvb1E2BV8zpw1DJ+TB+ Y0UzSbM3c5lzLNvSNXAG/KK7U4JkvNoDY9Ku4l1enYNKLEekDIeia1bte8vdDIP2 FtWLkaLg+79+LwBdcZR79y8u6njoPXWsZe1RYzC/SAZbg5/Q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxYuAmOURe5wyHHXzXZAzTSoTwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzY1MWYyMjAtNmIwMy0z ZTE1LWExMDEtMTM5YmVhYTUyNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJyg1B02+FhUX1uAH5aSyOp23OCxtUPmKuPQb073oD5LOlhLvWjfwtl H2D5eB1TNFENXKawxTaWBNC3VpRzJVpEBC/wpINFqXFOFb8R/Oaaf6rYu/nk4/lu +cJtg97/FeJAOQ+fxRWI9PfFIM9+u01LXGPtSVI9zhiVQqKN6mde0BKn0YTGt+cd MEouWuZv71EcPL+bXZrmY13rfxI6D5eY1ML0JJUswHB0IvTusjzf2NmwhDAFkdUR TdVnU+aoOZk6PzBqSH/mL5kNaz/3xrm+atgYUqDputOppEYLbwOBn3wh+Ne3jhFW p6rPDW4KyLY0wzC07q/Oxvg6idid+x8= -----END CERTIFICATE-----Generated at Thu Oct 9 00:56:00 2025 by rpki-client