$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa File: 48a9e343-3956-34bd-9048-412486df0413.roa (raw, json) Hash identifier: kYSzhz6JK6mI9SrAnKA0ZRXNrd8ImHMhPLymSxprdHM= Subject key identifier: EF:81:DD:BA:F4:01:1A:80:37:6B:A1:1A:FB:B8:89:AD:F6:44:A4:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42EF5E9917B9B1A0AA5200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa Signing time: Tue 26 Aug 2025 22:55:08 +0000 ROA not before: Tue 26 Aug 2025 22:55:08 +0000 ROA not after: Mon 24 Nov 2025 23:55:08 +0000 asID: 31898 IP address blocks: 144.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:ef:5e:99:17:b9:b1:a0:aa:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:08 2025 GMT Not After : Nov 24 23:55:08 2025 GMT Subject: CN=1b97eaf8-56d5-4aa7-949c-545d9d2dee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:1a:4b:e6:e5:20:5d:e9:fb:df:5c:fa:2e: 3f:d8:2b:c0:3d:94:a9:9b:07:e1:7c:4e:b5:41:43: 45:8f:79:ff:02:d9:76:e2:72:d4:2d:ff:99:62:c0: ba:bf:3e:ac:51:e6:b5:5a:f9:77:45:22:7a:2f:f4: e0:68:01:2d:e0:9f:29:3f:d2:ae:49:72:bf:eb:b4: 5e:d3:00:85:88:cb:1e:b6:c2:0f:bf:1f:20:09:48: 2c:0f:77:14:72:44:8c:47:8f:83:fc:13:ff:37:7d: 66:e5:0b:c5:b6:6a:b7:ee:a3:af:77:84:3b:70:ac: 2d:16:74:29:c2:37:c0:38:2a:a3:e3:39:b2:5a:9a: 3d:bb:31:57:d6:89:d2:41:1e:2b:71:66:9c:29:dc: 52:74:8b:db:61:21:8a:a8:e4:03:bb:bd:c7:69:65: ab:15:cd:51:fd:3c:36:0a:2a:e2:92:e3:96:0c:76: 4c:30:dc:d9:b8:24:e3:fc:63:3e:39:d1:33:7f:56: 5f:6b:41:29:e8:a1:07:85:c8:2a:a8:9e:98:eb:c1: bf:cd:2c:34:2f:a9:ef:60:f5:a4:6b:18:66:0c:04: 6f:a3:2a:d9:ee:b5:21:64:e3:b6:86:29:68:86:2c: f4:ed:fa:10:20:81:71:e8:c4:e1:dc:bb:4d:1b:05: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:81:DD:BA:F4:01:1A:80:37:6B:A1:1A:FB:B8:89:AD:F6:44:A4:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:86:73:63:84:63:12:1b:bb:86:95:20:df:2c:81:3c:ae:ca: 8e:aa:3c:75:b3:a5:d2:dc:50:e6:f4:33:19:54:41:30:48:ca: 01:fb:da:2e:fa:9f:75:1e:f6:b5:c2:5c:94:68:3f:51:f5:5a: 8f:52:57:cd:b2:55:33:34:75:10:4a:85:6a:80:a7:be:82:8b: 09:e1:5b:b1:3d:01:ac:b4:c9:03:e0:10:75:0e:87:bd:fb:5d: 56:d4:81:9b:f0:b3:5a:34:48:91:95:e5:8c:1b:7f:24:35:41: 1e:7f:e8:cc:97:c2:dd:88:a1:1f:6b:f7:5c:6b:fe:7e:7a:af: 0b:3f:57:96:12:9d:99:d0:8f:89:38:92:ec:ae:d8:09:8b:4f: 2a:2d:11:f4:0a:af:73:26:f1:a3:ae:0c:b3:3f:ea:5f:eb:46: 9c:d2:7f:7b:a0:c4:b5:64:a5:a8:ad:8d:4e:fa:0b:27:7c:a1: 59:3f:bf:c0:82:31:45:50:1e:2e:da:d8:35:a6:6d:6a:4d:bf: c9:85:cb:81:ef:88:07:1e:a7:cd:57:09:ef:cd:8c:0a:81:3d: 1e:4b:d7:b4:86:bc:b4:0f:bb:dc:2a:d7:1f:57:ae:47:33:99: 0a:d6:cb:71:5f:ff:19:23:71:7a:27:ae:d5:dd:0c:d1:91:8e: 8f:1e:77:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qu9emRe5saCqUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUwOFoXDTI1MTEyNDIzNTUwOFowLzEtMCsGA1UEAxMk MWI5N2VhZjgtNTZkNS00YWE3LTk0OWMtNTQ1ZDlkMmRlZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFIaS+blIF3p+99c+i4/2CvAPZSpmwfhfE61 QUNFj3n/Atl24nLULf+ZYsC6vz6sUea1Wvl3RSJ6L/TgaAEt4J8pP9KuSXK/67Re 0wCFiMsetsIPvx8gCUgsD3cUckSMR4+D/BP/N31m5QvFtmq37qOvd4Q7cKwtFnQp wjfAOCqj4zmyWpo9uzFX1onSQR4rcWacKdxSdIvbYSGKqOQDu73HaWWrFc1R/Tw2 CirikuOWDHZMMNzZuCTj/GM+OdEzf1Zfa0Ep6KEHhcgqqJ6Y68G/zSw0L6nvYPWk axhmDARvoyrZ7rUhZOO2hilohiz07foQIIFx6MTh3LtNGwV+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+B3br0ARqAN2uhGvu4ia32RKQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDhhOWUzNDMtMzk1Ni0z NGJkLTkwNDgtNDEyNDg2ZGYwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCGc2OEYxIbu4aVIN8sgTyuyo6qPHWzpdLcUOb0MxlUQTBIygH72i76 n3Ue9rXCXJRoP1H1Wo9SV82yVTM0dRBKhWqAp76CiwnhW7E9Aay0yQPgEHUOh737 XVbUgZvws1o0SJGV5YwbfyQ1QR5/6MyXwt2IoR9r91xr/n56rws/V5YSnZnQj4k4 kuyu2AmLTyotEfQKr3Mm8aOuDLM/6l/rRpzSf3ugxLVkpaitjU76Cyd8oVk/v8CC MUVQHi7a2DWmbWpNv8mFy4HviAcep81XCe/NjAqBPR5L17SGvLQPu9wq1x9Xrkcz mQrWy3Ff/xkjcXonrtXdDNGRjo8ed1w= -----END CERTIFICATE-----Generated at Thu Oct 9 00:59:12 2025 by rpki-client