$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa File: 8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa (raw, json) Hash identifier: 8gn0HsfTjbuuzE8FSs64urxgP4U3aMvHTmiqgAUmgK4= Subject key identifier: 8C:2A:DA:A9:6D:E0:21:11:9F:50:40:96:55:7D:30:C6:8C:45:A8:BF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C475B939EC36BC66AFDC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa Signing time: Mon 25 Aug 2025 08:17:05 +0000 ROA not before: Mon 25 Aug 2025 08:17:05 +0000 ROA not after: Sun 23 Nov 2025 09:17:05 +0000 asID: 31898 IP address blocks: 147.154.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:75:b9:39:ec:36:bc:66:af:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:17:05 2025 GMT Not After : Nov 23 09:17:05 2025 GMT Subject: CN=c3e8bb55-4dac-450e-847a-370dc5fe786f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:12:e0:32:da:a3:90:53:7b:93:db:42:12: ff:e6:d7:04:fe:6b:5f:b8:15:d4:5c:35:0f:c2:29: d8:aa:74:44:35:66:7e:38:c4:b8:23:51:0a:05:a7: b6:9b:d7:96:5e:62:bf:30:5d:aa:bb:5d:b9:38:34: d9:a5:47:a1:53:4e:6a:0e:dc:9d:02:53:66:e7:b0: d8:b5:af:30:7b:6a:37:65:e3:4d:e7:12:54:78:f8: 94:c1:b2:bb:f0:19:b2:88:b8:b9:8e:61:82:d0:e2: 54:8e:b9:d4:a9:9e:3c:a9:37:28:77:f6:45:03:98: 84:ac:7c:c7:d9:b0:22:60:dc:eb:70:c5:3d:3b:24: b0:36:75:7b:d8:3d:24:3d:d4:c0:93:eb:eb:52:f2: 52:53:3f:f7:d2:94:d5:6a:f3:5f:07:ae:28:1d:62: 4b:5b:1a:90:66:cb:d6:4c:5f:e0:16:21:99:af:33: c4:c8:8d:a4:7d:41:03:c9:5e:77:fd:83:fb:ed:ef: b9:fd:6f:a2:a3:99:ae:68:e3:a8:33:68:0d:1c:97: a3:0a:bc:50:7e:52:7f:ac:c1:92:88:57:3a:e0:95: 32:09:6a:9f:f8:c9:fd:d1:56:fb:3e:4b:2c:f1:eb: df:f3:d0:be:b0:e8:70:4d:c1:35:07:b7:44:c3:4b: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:DA:A9:6D:E0:21:11:9F:50:40:96:55:7D:30:C6:8C:45:A8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0a:cd:e0:ea:4d:2c:bb:81:af:54:fc:5f:14:06:86:4e:13: 87:3f:52:46:af:0e:56:bd:16:6d:de:71:8b:dc:ff:72:ed:7c: 0c:68:75:03:46:3f:e4:f1:b6:25:20:f2:0f:64:52:a8:63:9c: 7b:01:23:43:2b:43:24:8c:4d:46:e5:b5:01:0d:0c:ba:c2:00: 2e:7b:17:62:34:cd:f2:71:34:9a:ad:4b:ae:6e:34:af:1a:9f: 9e:5a:6d:53:b5:91:06:76:df:6f:26:89:20:9d:a4:b0:14:64: b1:ea:b1:c6:e7:a0:98:cd:56:c9:a6:f0:b5:e4:37:97:ff:02: 17:40:a5:00:22:50:e1:4b:a6:df:61:cb:22:2c:4b:64:b4:87: 84:1b:cc:44:08:29:a1:86:cd:a7:a7:eb:7a:7a:dc:c6:56:5b: 8a:20:67:21:48:ff:d0:9a:40:6a:78:20:56:eb:a7:95:26:d8: 6f:28:28:ad:90:a8:7f:22:bf:b8:75:e7:ed:f4:a2:8b:7e:0c: dc:76:15:03:3c:d4:95:84:b3:6d:7c:09:38:4a:60:1f:56:6b: 5f:ee:88:75:6f:24:dc:b4:b5:b2:0b:5b:2e:c0:c1:8d:f9:ee: 4a:62:47:13:f5:9c:1e:0c:44:47:6e:a8:5a:16:1a:fd:06:b1: dc:13:a3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xHW5Oew2vGav3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTcwNVoXDTI1MTEyMzA5MTcwNVowLzEtMCsGA1UEAxMk YzNlOGJiNTUtNGRhYy00NTBlLTg0N2EtMzcwZGM1ZmU3ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiwS4DLao5BTe5PbQhL/5tcE/mtfuBXUXDUP winYqnRENWZ+OMS4I1EKBae2m9eWXmK/MF2qu125ODTZpUehU05qDtydAlNm57DY ta8we2o3ZeNN5xJUePiUwbK78BmyiLi5jmGC0OJUjrnUqZ48qTcod/ZFA5iErHzH 2bAiYNzrcMU9OySwNnV72D0kPdTAk+vrUvJSUz/30pTVavNfB64oHWJLWxqQZsvW TF/gFiGZrzPEyI2kfUEDyV53/YP77e+5/W+io5muaOOoM2gNHJejCrxQflJ/rMGS iFc64JUyCWqf+Mn90Vb7Pkss8evf89C+sOhwTcE1B7dEw0thMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwq2qlt4CERn1BAllV9MMaMRai/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJjM2YzZGItNWE5NS0z NzY4LTk2ZDgtMmIzMWFhYzZjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoKzeDqTSy7ga9U/F8UBoZOE4c/UkavDla9Fm3ecYvc/3LtfAxodQNG P+TxtiUg8g9kUqhjnHsBI0MrQySMTUbltQENDLrCAC57F2I0zfJxNJqtS65uNK8a n55abVO1kQZ2328miSCdpLAUZLHqscbnoJjNVsmm8LXkN5f/AhdApQAiUOFLpt9h yyIsS2S0h4QbzEQIKaGGzaen63p63MZWW4ogZyFI/9CaQGp4IFbrp5Um2G8oKK2Q qH8iv7h15+30oot+DNx2FQM81JWEs218CThKYB9Wa1/uiHVvJNy0tbILWy7AwY35 7kpiRxP1nB4MREduqFoWGv0GsdwTo2o= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:29 2025 by rpki-client