$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa File: 752f8b33-1944-32bd-84b5-1a9da9f516ec.roa (raw, json) Hash identifier: FRL+Yro9tvrUsTdBXIcAMInP5qXSpc659SgtZnt8aog= Subject key identifier: 32:18:BA:9A:05:A4:C7:01:CA:5C:27:DE:7D:C4:DD:D9:A3:34:AA:82 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C88879514957FC36A2A660 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa Signing time: Mon 25 Aug 2025 17:01:05 +0000 ROA not before: Mon 25 Aug 2025 17:01:05 +0000 ROA not after: Sun 23 Nov 2025 18:01:05 +0000 asID: 31898 IP address blocks: 64.181.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:88:79:51:49:57:fc:36:a2:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:01:05 2025 GMT Not After : Nov 23 18:01:05 2025 GMT Subject: CN=829e57a4-8be1-43d7-9663-9b94f7c22a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:9e:45:96:40:e0:82:49:94:54:12:a7:fd: f8:58:af:4d:f8:8e:38:17:0f:d9:a4:aa:72:6d:6b: 13:f1:fa:1e:e2:3c:d7:ae:27:42:84:ad:05:34:1b: 54:4a:42:55:e0:bc:41:0d:a0:64:46:1f:3d:a2:41: 0d:7b:3d:de:cd:fb:f6:40:92:44:15:43:53:1e:68: a8:e3:eb:19:eb:5c:0a:70:18:bd:4c:e6:c6:de:a3: ae:6e:9f:e4:9a:9e:67:0b:ef:5a:e4:c0:18:48:5e: d5:e9:b9:13:98:f5:6e:a2:95:f9:57:4e:76:c4:22: 5d:75:c8:a8:5e:49:61:e1:c0:eb:a1:3e:29:89:99: a2:2e:2e:cb:bb:be:89:6f:9a:38:67:5e:a8:0a:ba: bc:4d:50:ae:43:89:c6:27:9e:f1:64:f9:e0:12:4e: c3:2a:b2:03:53:6e:6c:36:46:7c:eb:02:3f:c4:a6: be:cf:fd:c7:85:9f:ed:d7:61:6b:22:d3:8c:3a:6d: 5d:b3:60:27:cb:08:9a:26:df:26:21:bd:96:88:e1: 03:75:68:24:b9:f9:ee:3f:7e:85:16:b4:84:f0:c9: 9f:bb:c7:ab:4b:0e:1d:a5:2e:f3:28:b1:aa:aa:1b: bf:4b:84:14:a5:fe:b2:7f:02:a8:eb:44:7e:0a:c0: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:BA:9A:05:A4:C7:01:CA:5C:27:DE:7D:C4:DD:D9:A3:34:AA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/752f8b33-1944-32bd-84b5-1a9da9f516ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:32:90:df:16:e2:ad:8d:85:c8:f6:8f:b1:6b:80:5a:ab:4d: a4:a1:f2:41:12:0b:e4:fa:6e:b0:eb:59:f7:f1:2e:98:15:61: 1a:65:9a:3d:b7:58:7d:5d:09:9e:01:39:71:40:9b:82:6b:21: a3:b3:0d:ca:61:cc:69:1c:4d:ec:2d:17:f3:6b:c8:5a:94:71: 74:6d:3a:02:83:af:15:8f:a1:b3:f1:d3:59:6a:a6:2c:9e:67: e0:b0:12:04:2e:c0:94:89:2c:e0:ce:91:c4:32:6f:fb:97:bb: 4d:3a:5c:f9:58:76:37:93:88:b3:e9:a8:3e:ee:2b:bd:48:a4: 38:e1:c1:fa:1d:75:e2:33:63:ae:4e:5e:9d:a5:ea:68:e2:1c: bf:81:a1:e3:c0:f7:6a:8d:98:c8:07:98:31:e8:4f:7f:8a:f5: d5:89:f8:87:8e:8a:27:9d:ab:ad:72:09:5d:ab:30:cc:c3:b8: 21:ae:59:22:a9:8a:84:0c:f5:b4:62:0a:f2:5e:be:d3:7f:67: a2:4a:a7:1e:08:b1:b3:67:f9:bd:de:c9:e1:a1:06:e6:b6:10: 2a:bb:0b:e2:a2:70:84:c7:2e:dd:44:6e:45:af:b7:a8:8b:3a: 8d:7e:02:62:0b:8c:4f:aa:0a:1a:ec:ff:97:6a:45:fd:eb:e6: d0:2f:ec:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yIh5UUlX/DaipmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDEwNVoXDTI1MTEyMzE4MDEwNVowLzEtMCsGA1UEAxMk ODI5ZTU3YTQtOGJlMS00M2Q3LTk2NjMtOWI5NGY3YzIyYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hieRZZA4IJJlFQSp/34WK9N+I44Fw/ZpKpy bWsT8foe4jzXridChK0FNBtUSkJV4LxBDaBkRh89okENez3ezfv2QJJEFUNTHmio 4+sZ61wKcBi9TObG3qOubp/kmp5nC+9a5MAYSF7V6bkTmPVuopX5V052xCJddcio Xklh4cDroT4piZmiLi7Lu76Jb5o4Z16oCrq8TVCuQ4nGJ57xZPngEk7DKrIDU25s NkZ86wI/xKa+z/3HhZ/t12FrItOMOm1ds2AnywiaJt8mIb2WiOEDdWgkufnuP36F FrSE8Mmfu8erSw4dpS7zKLGqqhu/S4QUpf6yfwKo60R+CsAGHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIYupoFpMcBylwn3n3E3dmjNKqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzUyZjhiMzMtMTk0NC0z MmJkLTg0YjUtMWE5ZGE5ZjUxNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQykN8W4q2Nhcj2j7FrgFqrTaSh8kESC+T6brDrWffxLpgVYRplmj23 WH1dCZ4BOXFAm4JrIaOzDcphzGkcTewtF/NryFqUcXRtOgKDrxWPobPx01lqpiye Z+CwEgQuwJSJLODOkcQyb/uXu006XPlYdjeTiLPpqD7uK71IpDjhwfoddeIzY65O Xp2l6mjiHL+BoePA92qNmMgHmDHoT3+K9dWJ+IeOiiedq61yCV2rMMzDuCGuWSKp ioQM9bRiCvJevtN/Z6JKpx4IsbNn+b3eyeGhBua2ECq7C+KicITHLt1EbkWvt6iL Oo1+AmILjE+qChrs/5dqRf3r5tAv7IM= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:44 2025 by rpki-client