$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cfabf9c-c2c2-3244-af3e-78b1e8bc5303.roa File: 8cfabf9c-c2c2-3244-af3e-78b1e8bc5303.roa (raw, json) Hash identifier: I+dKl8PXcwiQq/sq5U9U7lgz1jTwK3JXdv8+sRZESlE= Subject key identifier: FC:A2:34:F9:B1:49:C1:36:6B:25:5D:14:C4:FD:9A:E3:F8:2A:69:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E55C209DE88746BA5EEB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cfabf9c-c2c2-3244-af3e-78b1e8bc5303.roa Signing time: Wed 10 Sep 2025 20:50:33 +0000 ROA not before: Wed 10 Sep 2025 20:50:33 +0000 ROA not after: Tue 09 Dec 2025 21:50:33 +0000 asID: 54253 IP address blocks: 151.145.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:5c:20:9d:e8:87:46:ba:5e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:50:33 2025 GMT Not After : Dec 9 21:50:33 2025 GMT Subject: CN=c712151a-5855-41b5-a61c-7d6b03bf6aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:43:a1:4f:4a:a1:33:91:ef:68:29:13:e1: 4f:16:1e:45:a3:14:a2:cc:8f:97:fd:7f:ab:ff:8a: 7d:37:e6:19:bf:3e:bf:88:e3:50:1c:bf:f5:3c:bd: b1:85:85:6b:ec:9d:29:c0:6d:af:8e:88:88:a9:0a: e2:dd:f0:87:39:94:6e:c8:fd:87:38:ad:b0:5f:1a: 74:c8:e1:c3:18:1c:13:4f:a7:35:de:e3:d3:3f:ba: 93:92:17:04:3f:db:5e:d5:1d:3a:66:00:e3:05:6f: ff:3c:c7:82:dc:2b:21:73:20:b9:ab:e2:f9:62:0b: ee:d1:50:62:61:1e:fa:b0:4b:e8:c2:b6:e9:89:22: 20:f5:91:35:86:6a:74:31:35:f2:9f:ce:f0:0f:f0: 9f:3f:66:80:08:0e:34:05:49:80:b1:8d:ca:60:69: 16:42:2b:25:a2:2f:98:b0:72:86:08:b9:83:72:1b: dc:54:7d:6f:72:fa:41:a4:3a:f9:9a:16:ae:7f:ad: 7a:54:8c:8f:e8:8b:f0:89:c3:e3:4f:24:df:83:85: 9e:e3:b4:c8:29:6f:eb:8a:70:4f:e5:e7:72:4f:6c: 84:1d:eb:00:7a:c2:95:ef:27:e4:78:6e:35:49:8b: 06:96:92:56:27:12:19:1d:b7:c8:59:dc:66:39:b5: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A2:34:F9:B1:49:C1:36:6B:25:5D:14:C4:FD:9A:E3:F8:2A:69:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cfabf9c-c2c2-3244-af3e-78b1e8bc5303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.145.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:78:11:a4:9e:85:39:04:76:70:27:c6:ee:c1:34:16:af:21: d4:68:72:47:14:e0:65:2e:86:b2:5f:fd:16:fa:be:77:40:69: 08:5c:d6:a8:d7:e1:9c:0a:b2:eb:cd:15:7d:14:e5:e0:cc:75: d3:34:fa:b1:80:de:55:7c:8f:3f:c3:7e:3e:e8:15:70:79:12: c3:54:93:23:39:d3:d7:96:11:c9:87:f8:09:0e:98:b0:09:51: a6:b4:d2:85:26:73:f7:7b:4c:0d:ae:da:52:ec:cf:6e:35:19: 37:4c:53:59:9c:47:5b:6d:af:25:32:ff:8b:dd:cf:fb:51:bb: 9b:08:4c:9c:3d:3b:c9:be:b1:f5:de:05:33:9c:cb:ef:14:78: d6:6c:ce:1c:87:e7:3a:69:2d:8a:d2:bf:16:ac:f0:75:94:69: 93:87:ae:b6:6d:d2:a9:9c:b9:02:00:5c:30:96:4b:70:9b:df: 11:4e:22:2e:11:1d:2a:a2:e6:30:e7:78:3a:4e:6c:f0:a1:12: 77:ba:bc:fb:1a:06:da:0d:30:f3:2a:b1:ce:d5:16:29:c9:3a: fa:b3:09:b0:36:9c:07:9f:24:5c:39:d4:f8:8d:c4:78:00:af: 9c:16:90:40:01:41:9f:25:90:f6:20:d0:67:4d:9e:e0:65:4d: a8:65:2e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5VwgneiHRrpe6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTAzM1oXDTI1MTIwOTIxNTAzM1owLzEtMCsGA1UEAxMk YzcxMjE1MWEtNTg1NS00MWI1LWE2MWMtN2Q2YjAzYmY2YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IBDoU9KoTOR72gpE+FPFh5FoxSizI+X/X+r /4p9N+YZvz6/iONQHL/1PL2xhYVr7J0pwG2vjoiIqQri3fCHOZRuyP2HOK2wXxp0 yOHDGBwTT6c13uPTP7qTkhcEP9te1R06ZgDjBW//PMeC3CshcyC5q+L5Ygvu0VBi YR76sEvowrbpiSIg9ZE1hmp0MTXyn87wD/CfP2aACA40BUmAsY3KYGkWQisloi+Y sHKGCLmDchvcVH1vcvpBpDr5mhauf616VIyP6IvwicPjTyTfg4We47TIKW/rinBP 5edyT2yEHesAesKV7yfkeG41SYsGlpJWJxIZHbfIWdxmObXgrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyiNPmxScE2ayVdFMT9muP4KmnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGNmYWJmOWMtYzJjMi0z MjQ0LWFmM2UtNzhiMWU4YmM1MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl5EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd4EaSehTkEdnAnxu7BNBavIdRockcU4GUuhrJf/Rb6vndAaQhc1qjX 4ZwKsuvNFX0U5eDMddM0+rGA3lV8jz/Dfj7oFXB5EsNUkyM509eWEcmH+AkOmLAJ Uaa00oUmc/d7TA2u2lLsz241GTdMU1mcR1ttryUy/4vdz/tRu5sITJw9O8m+sfXe BTOcy+8UeNZszhyH5zppLYrSvxas8HWUaZOHrrZt0qmcuQIAXDCWS3Cb3xFOIi4R HSqi5jDneDpObPChEne6vPsaBtoNMPMqsc7VFinJOvqzCbA2nAefJFw51PiNxHgA r5wWkEABQZ8lkPYg0GdNnuBlTahlLiw= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:13 2025 by rpki-client