$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64f1e9db-f353-3600-aef3-5e8370b88d78.roa File: 64f1e9db-f353-3600-aef3-5e8370b88d78.roa (raw, json) Hash identifier: bSm7hjE4W98cgs4CPMSHqD7E7YBkjPAZxdGyS98wMBs= Subject key identifier: 16:83:4E:C4:4B:CA:11:43:6F:E1:C1:A8:91:4C:D4:94:C9:A3:25:FE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD433871705EB422DF036200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64f1e9db-f353-3600-aef3-5e8370b88d78.roa Signing time: Tue 26 Aug 2025 22:55:43 +0000 ROA not before: Tue 26 Aug 2025 22:55:43 +0000 ROA not after: Mon 24 Nov 2025 23:55:43 +0000 asID: 31898 IP address blocks: 157.151.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:38:71:70:5e:b4:22:df:03:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:43 2025 GMT Not After : Nov 24 23:55:43 2025 GMT Subject: CN=c3aec6a8-9ef0-4e0f-ba3c-30967336ace7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:fb:85:27:23:d6:65:ff:fe:dd:5a:f3:95: ed:ec:3b:84:d0:e2:f8:0f:d8:06:5b:6d:d3:61:e1: bc:15:59:87:f9:13:f2:b3:b3:77:2c:19:fc:63:aa: 58:23:0d:67:36:6d:61:58:39:1e:9d:f1:43:58:7d: 20:99:f8:b0:26:28:28:8e:98:94:a3:b0:06:79:49: ae:f9:27:56:d2:dd:d9:f0:5f:09:39:70:71:52:01: fa:3c:82:d2:56:55:29:d3:07:28:ea:d4:89:be:9d: 8f:28:7c:ee:47:e1:ac:34:5c:c3:1d:84:bb:82:40: d9:e6:c0:0f:39:b0:b4:01:24:cb:cd:21:b1:d8:65: 5c:63:fc:37:61:48:32:88:66:96:55:9d:29:d0:b7: 9c:68:a9:93:fc:69:fb:8e:af:d7:14:1a:22:f4:b2: c7:7d:a6:b4:86:bc:c7:8f:af:3d:25:14:c4:92:4d: e9:60:94:ac:7b:48:f5:56:bf:f4:de:d6:5f:12:30: 61:f7:ef:92:4e:77:5b:fa:1e:c7:24:30:6d:03:49: d8:c7:bf:ff:e3:31:a7:8f:7b:ed:b3:6a:f4:58:6c: 07:a7:ea:21:03:b8:a3:67:ec:18:0d:18:2c:52:90: 1b:02:03:47:66:60:4a:b1:b5:4a:52:aa:74:eb:2d: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:83:4E:C4:4B:CA:11:43:6F:E1:C1:A8:91:4C:D4:94:C9:A3:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64f1e9db-f353-3600-aef3-5e8370b88d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:eb:22:6c:81:20:47:64:f7:e9:cf:c6:a0:a4:bc:1f:67:0c: 21:39:b6:de:0a:29:35:5f:9d:09:ae:a0:77:39:69:66:5a:2a: b8:49:20:24:b9:38:6d:3c:95:4e:64:79:90:a4:0b:f0:5c:4a: 65:6b:04:f6:7b:af:fd:4b:ee:90:4e:d5:86:54:f4:66:a8:0d: 69:ec:20:7c:03:88:4b:3a:7e:c9:e7:83:58:77:bb:df:61:f5: 99:80:31:7f:bd:82:0d:b8:6f:76:31:0b:e0:5f:c4:81:fa:63: 86:19:41:77:10:6b:42:f1:bc:12:3f:d4:6b:14:61:5f:22:e8: 74:1e:a9:23:4a:7e:62:52:0b:4b:7a:ff:7d:2c:fa:88:4d:98: 12:6c:82:3a:48:d8:fb:2c:99:10:cc:35:cf:ce:3d:13:0d:eb: 7d:78:b2:c8:73:52:c5:28:78:e8:bf:3a:de:29:6a:bb:95:79: 19:7e:32:19:8b:7e:2c:33:36:86:57:82:44:30:f1:8d:25:cd: 11:94:47:40:59:71:91:cf:16:3c:de:7c:5f:32:ee:4d:2a:3d: de:bb:7a:ee:17:00:67:c3:55:cc:0d:23:56:b9:84:3c:4d:4e: 32:e6:f0:0d:4b:09:b3:54:ea:aa:8e:03:ea:15:8c:79:f1:aa: 34:0d:de:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QzhxcF60It8DYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTU0M1oXDTI1MTEyNDIzNTU0M1owLzEtMCsGA1UEAxMk YzNhZWM2YTgtOWVmMC00ZTBmLWJhM2MtMzA5NjczMzZhY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ77hScj1mX//t1a85Xt7DuE0OL4D9gGW23T YeG8FVmH+RPys7N3LBn8Y6pYIw1nNm1hWDkenfFDWH0gmfiwJigojpiUo7AGeUmu +SdW0t3Z8F8JOXBxUgH6PILSVlUp0wco6tSJvp2PKHzuR+GsNFzDHYS7gkDZ5sAP ObC0ASTLzSGx2GVcY/w3YUgyiGaWVZ0p0LecaKmT/Gn7jq/XFBoi9LLHfaa0hrzH j689JRTEkk3pYJSse0j1Vr/03tZfEjBh9++STndb+h7HJDBtA0nYx7//4zGnj3vt s2r0WGwHp+ohA7ijZ+wYDRgsUpAbAgNHZmBKsbVKUqp06y3EawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaDTsRLyhFDb+HBqJFM1JTJoyX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjRmMWU5ZGItZjM1My0z NjAwLWFlZjMtNWU4MzcwYjg4ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrrImyBIEdk9+nPxqCkvB9nDCE5tt4KKTVfnQmuoHc5aWZaKrhJICS5 OG08lU5keZCkC/BcSmVrBPZ7r/1L7pBO1YZU9GaoDWnsIHwDiEs6fsnng1h3u99h 9ZmAMX+9gg24b3YxC+BfxIH6Y4YZQXcQa0LxvBI/1GsUYV8i6HQeqSNKfmJSC0t6 /30s+ohNmBJsgjpI2PssmRDMNc/OPRMN6314sshzUsUoeOi/Ot4paruVeRl+MhmL fiwzNoZXgkQw8Y0lzRGUR0BZcZHPFjzefF8y7k0qPd67eu4XAGfDVcwNI1a5hDxN TjLm8A1LCbNU6qqOA+oVjHnxqjQN3ng= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:18 2025 by rpki-client