$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa File: 85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa (raw, json) Hash identifier: 2ZALJ9F266yxy/WATn38nfzftOtoK8Abc5FSp9qXN14= Subject key identifier: 6D:07:6F:5E:7A:EB:C1:6E:4C:2C:79:A9:03:5A:3B:9E:D4:32:DA:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B27199F8E138BB5787A20C780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa Signing time: Wed 10 Sep 2025 22:35:51 +0000 ROA not before: Wed 10 Sep 2025 22:35:51 +0000 ROA not after: Tue 09 Dec 2025 23:35:51 +0000 asID: 54253 IP address blocks: 151.104.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:9f:8e:13:8b:b5:78:7a:20:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:35:51 2025 GMT Not After : Dec 9 23:35:51 2025 GMT Subject: CN=8e190908-7ff0-48b5-aceb-634757456686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:8b:67:ad:5c:80:5a:72:92:00:dc:e7:58: 8d:45:f2:7b:20:9b:f8:4a:20:1a:89:53:63:6d:b0: b6:52:f5:0b:84:58:e2:90:20:77:ce:b9:4a:7d:8f: a5:1b:20:4b:d3:a1:49:98:80:7a:6f:9d:de:08:53: 4c:b4:a6:a5:c7:c6:0b:d4:51:c0:93:ae:96:7d:05: da:76:96:a9:d0:2b:eb:f3:a7:b4:8d:69:e7:37:25: 43:c4:e7:da:8b:b8:0c:8e:e4:f6:35:3c:4c:4d:07: e0:6b:b4:22:20:46:b8:6e:2d:06:58:62:14:d0:af: b9:21:86:ca:ce:7f:77:7b:d8:c2:73:b4:f1:70:88: 1f:c7:ef:01:e5:fe:43:bb:e0:cb:2c:51:d2:32:aa: 63:7f:f5:51:80:58:70:fc:7e:9c:e4:4a:c6:16:5c: 9f:df:13:ed:30:88:f1:8b:50:5a:7e:93:3d:c6:c7: 69:18:50:27:71:20:4c:ca:9c:fb:68:2d:0f:b8:92: d3:9a:5e:df:11:59:39:d9:1d:6a:bc:79:98:a5:e9: c5:d8:a2:38:a6:c1:ee:b4:52:0f:13:a5:c9:bc:5f: d3:1d:72:79:4a:de:0e:10:6c:27:49:2b:14:e8:69: 10:ee:2b:f0:59:d6:70:73:c0:ec:9a:47:74:2e:26: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:07:6F:5E:7A:EB:C1:6E:4C:2C:79:A9:03:5A:3B:9E:D4:32:DA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85f66ffa-9abe-38ec-8520-6eefb8bb4c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:35:25:60:e7:6a:93:ea:5f:67:fb:49:b6:e0:76:cb:e8:c5: 2f:29:60:5b:c1:09:a5:79:de:22:92:7c:a2:a6:f3:70:3d:3b: 0b:d4:9d:bc:e9:a4:40:67:8c:af:96:f1:35:7a:55:c1:47:ea: e8:c7:e4:fc:4f:c2:2a:2e:23:c5:5c:23:3f:05:02:63:f4:6c: 13:d2:b6:c6:f4:3c:93:7d:55:21:42:07:91:9c:36:c4:f3:89: 43:7c:1e:49:4a:24:4b:b9:58:46:97:0d:c0:8e:13:1b:14:d5: 19:fc:9d:56:82:ce:16:36:36:24:43:a8:36:14:17:9b:82:ab: 00:5b:16:56:cc:d6:72:6d:86:0d:77:49:f7:83:a5:11:7f:c3: 83:95:81:b2:01:e6:18:67:00:14:a0:b4:44:7d:eb:8d:94:c5: f4:28:ec:b8:3d:1a:63:20:2c:30:c5:ba:50:df:5f:41:43:59: ac:8b:f9:35:4a:27:bc:1f:04:b0:2b:cd:01:e3:2f:65:26:ce: 97:81:7a:cd:e9:5b:01:07:d7:a1:95:f5:5d:14:a1:d8:c6:1f: 02:5b:de:87:bc:86:bf:ee:2f:9a:b2:9b:e4:22:25:07:01:8c: 47:e9:08:2c:80:9d:00:d4:fd:77:23:27:fc:79:9a:21:4b:94: 08:4b:67:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGZ+OE4u1eHogx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzU1MVoXDTI1MTIwOTIzMzU1MVowLzEtMCsGA1UEAxMk OGUxOTA5MDgtN2ZmMC00OGI1LWFjZWItNjM0NzU3NDU2Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWLZ61cgFpykgDc51iNRfJ7IJv4SiAaiVNj bbC2UvULhFjikCB3zrlKfY+lGyBL06FJmIB6b53eCFNMtKalx8YL1FHAk66WfQXa dpap0Cvr86e0jWnnNyVDxOfai7gMjuT2NTxMTQfga7QiIEa4bi0GWGIU0K+5IYbK zn93e9jCc7TxcIgfx+8B5f5Du+DLLFHSMqpjf/VRgFhw/H6c5ErGFlyf3xPtMIjx i1BafpM9xsdpGFAncSBMypz7aC0PuJLTml7fEVk52R1qvHmYpenF2KI4psHutFIP E6XJvF/THXJ5St4OEGwnSSsU6GkQ7ivwWdZwc8Dsmkd0LiazEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0Hb15668FuTCx5qQNaO57UMtrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODVmNjZmZmEtOWFiZS0z OGVjLTg1MjAtNmVlZmI4YmI0Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ1JWDnapPqX2f7SbbgdsvoxS8pYFvBCaV53iKSfKKm83A9OwvUnbzp pEBnjK+W8TV6VcFH6ujH5PxPwiouI8VcIz8FAmP0bBPStsb0PJN9VSFCB5GcNsTz iUN8HklKJEu5WEaXDcCOExsU1Rn8nVaCzhY2NiRDqDYUF5uCqwBbFlbM1nJthg13 SfeDpRF/w4OVgbIB5hhnABSgtER9642UxfQo7Lg9GmMgLDDFulDfX0FDWayL+TVK J7wfBLArzQHjL2UmzpeBes3pWwEH16GV9V0UodjGHwJb3oe8hr/uL5qym+QiJQcB jEfpCCyAnQDU/XcjJ/x5miFLlAhLZ9Q= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:49 2025 by rpki-client