$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa File: 3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa (raw, json) Hash identifier: jVgMuHio653DpNzy0O4Kjai0Yiwf3s8YHIn+z2GfImo= Subject key identifier: 87:32:91:28:E7:D9:3A:33:80:5E:99:41:AD:A7:B8:69:81:D5:B7:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43526799F8EF71261FC280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa Signing time: Tue 26 Aug 2025 22:55:55 +0000 ROA not before: Tue 26 Aug 2025 22:55:55 +0000 ROA not after: Mon 24 Nov 2025 23:55:55 +0000 asID: 31898 IP address blocks: 160.34.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:52:67:99:f8:ef:71:26:1f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:55 2025 GMT Not After : Nov 24 23:55:55 2025 GMT Subject: CN=68106f3a-915f-4f3f-9dff-2940dc9a1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:86:67:9e:5c:e4:4b:bd:49:60:ca:5b:3b: 1b:42:5b:7f:4f:c0:a5:a1:00:40:0c:65:9d:96:d4: 12:08:b8:f4:87:ea:6b:e1:3e:00:fa:a6:de:f7:dd: c1:5b:47:5b:da:d9:b3:2a:fe:17:67:16:98:2d:2f: de:1e:58:58:5e:d3:02:ce:0a:ab:4a:d2:4d:1b:ac: 8a:63:b3:71:7a:3d:5b:89:b6:1f:11:ce:2e:42:3a: c1:31:7c:da:1a:5a:20:99:0f:d6:37:83:8f:27:17: 62:fe:19:3a:15:ba:57:1b:35:ff:50:3e:1e:17:a7: fe:ea:4b:f5:aa:4c:d9:97:72:b0:f9:43:e9:db:0c: d7:3c:e1:95:8d:a3:35:22:ba:f6:41:f6:e3:00:b0: 44:eb:81:66:7d:cb:64:c9:43:36:aa:e4:f0:b4:0d: e0:ce:cb:b9:df:cd:ba:9f:cd:4d:86:7d:7d:57:80: 93:a0:5b:1a:ad:e6:49:cf:80:32:a5:59:d3:81:75: 59:be:86:e9:ce:fa:8f:74:73:47:cd:93:35:8e:ff: 84:67:4f:c8:f3:85:7c:f3:63:d3:71:4a:1a:b4:2c: 5a:fc:22:ac:af:34:e4:83:3b:fb:5b:35:c1:73:fc: 1d:e3:f5:93:03:61:1b:81:90:1a:c1:e3:50:13:a4: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:32:91:28:E7:D9:3A:33:80:5E:99:41:AD:A7:B8:69:81:D5:B7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3f2d9547-c50a-3b5d-ad0c-479e172cb83b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d6:66:b8:a0:11:4f:78:cd:89:59:af:7d:c3:aa:fa:78:bc: e1:7b:46:25:f3:42:ca:11:dd:61:ae:ef:45:2f:c6:ff:bc:5b: 1c:c8:f6:fc:68:5a:dc:60:26:98:db:d9:fc:45:83:ea:5b:70: f7:8b:b3:57:e5:b2:7b:b6:f0:47:37:33:aa:64:c9:4b:cb:06: 22:52:16:7c:3e:21:fe:12:69:b5:5e:fd:55:a3:a3:cc:44:c6: 52:21:74:8e:68:e2:a1:5b:00:3c:6b:3a:01:c7:d1:db:ce:56: a2:a2:b6:8a:3c:3f:0d:04:de:8c:3c:47:f8:27:28:a9:d7:34: da:b0:76:6a:59:d8:67:95:78:1b:b5:08:68:60:a9:cb:c5:7b: 32:cc:af:e7:a1:70:0f:ad:5f:f2:fb:03:92:4c:7b:c7:3c:18: 13:56:e5:b6:1b:3b:61:7c:64:26:b3:95:29:c5:3e:07:d1:76: 48:98:fa:4e:b6:9f:1e:26:08:37:3e:99:24:e8:02:0a:c6:73: b0:56:99:ed:ca:01:87:96:ff:b9:2a:3b:19:7e:c2:36:5b:75: 48:c9:39:0c:48:5b:99:7b:f8:9e:d3:ab:aa:12:90:17:e8:69: 75:b0:7a:48:78:3f:7f:e0:e8:51:c3:4b:97:4d:e5:3f:c9:2c: 56:d5:64:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q1JnmfjvcSYfwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTU1NVoXDTI1MTEyNDIzNTU1NVowLzEtMCsGA1UEAxMk NjgxMDZmM2EtOTE1Zi00ZjNmLTlkZmYtMjk0MGRjOWExMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM+GZ55c5Eu9SWDKWzsbQlt/T8CloQBADGWd ltQSCLj0h+pr4T4A+qbe993BW0db2tmzKv4XZxaYLS/eHlhYXtMCzgqrStJNG6yK Y7Nxej1bibYfEc4uQjrBMXzaGlogmQ/WN4OPJxdi/hk6FbpXGzX/UD4eF6f+6kv1 qkzZl3Kw+UPp2wzXPOGVjaM1Irr2QfbjALBE64FmfctkyUM2quTwtA3gzsu53826 n81Nhn19V4CToFsareZJz4AypVnTgXVZvobpzvqPdHNHzZM1jv+EZ0/I84V882PT cUoatCxa/CKsrzTkgzv7WzXBc/wd4/WTA2EbgZAaweNQE6RwkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcykSjn2TozgF6ZQa2nuGmB1beJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2YyZDk1NDctYzUwYS0z YjVkLWFkMGMtNDc5ZTE3MmNiODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbWZrigEU94zYlZr33Dqvp4vOF7RiXzQsoR3WGu70Uvxv+8WxzI9vxo WtxgJpjb2fxFg+pbcPeLs1flsnu28Ec3M6pkyUvLBiJSFnw+If4SabVe/VWjo8xE xlIhdI5o4qFbADxrOgHH0dvOVqKitoo8Pw0E3ow8R/gnKKnXNNqwdmpZ2GeVeBu1 CGhgqcvFezLMr+ehcA+tX/L7A5JMe8c8GBNW5bYbO2F8ZCazlSnFPgfRdkiY+k62 nx4mCDc+mSToAgrGc7BWme3KAYeW/7kqOxl+wjZbdUjJOQxIW5l7+J7Tq6oSkBfo aXWwekh4P3/g6FHDS5dN5T/JLFbVZP8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:20 2025 by rpki-client