$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa File: 9c8dd355-776a-3426-ad14-0a8caa998ec0.roa (raw, json) Hash identifier: Lf4ORCUKlji87gAVJOwoH4Unk3rfNUqWo7Ry0SbyfcU= Subject key identifier: A3:9A:4D:73:38:A4:6D:36:AE:0B:C0:B4:2B:F7:4D:FB:B9:6C:C6:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C8642E429DD84BD20ABF80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa Signing time: Mon 25 Aug 2025 17:00:48 +0000 ROA not before: Mon 25 Aug 2025 17:00:48 +0000 ROA not after: Sun 23 Nov 2025 18:00:48 +0000 asID: 31898 IP address blocks: 164.152.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:64:2e:42:9d:d8:4b:d2:0a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:48 2025 GMT Not After : Nov 23 18:00:48 2025 GMT Subject: CN=04ef4e7e-eabd-4998-8953-105dedfbf82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:83:be:d0:fe:17:3c:94:52:f1:6f:bf:95: 26:b3:29:9c:0b:bb:ba:14:ca:cd:5e:5f:65:fe:ba: 4e:f0:c2:69:47:0e:87:73:f9:f4:bc:8a:f1:cf:3a: 98:d2:b2:39:b2:34:79:19:97:b7:29:e1:4a:92:6b: eb:a4:03:5c:1d:71:1a:79:f5:cc:1e:a1:f0:2e:7d: d9:ef:a3:36:f7:40:a8:f9:cf:b1:d5:59:42:27:30: d3:28:59:d2:ac:08:76:8b:6e:47:f0:b8:f9:05:3c: e4:bd:78:62:7f:68:49:89:58:86:30:06:9f:40:cc: 47:27:5c:f9:61:e4:2a:e5:68:d3:59:78:24:20:ab: ed:4e:0e:77:31:7c:e0:b7:0c:84:89:4f:5d:3c:82: 86:2c:94:f3:46:38:71:e6:29:3d:45:5e:86:38:50: 52:de:ee:a1:a3:6d:91:e3:41:6d:d4:54:8f:b6:6c: 81:1d:57:f4:e4:15:04:1d:9c:0a:ae:7f:45:8a:da: 40:20:38:d3:6b:6a:90:05:fb:e0:e4:8f:b2:21:81: cd:f2:c0:fa:fe:22:68:30:b6:ae:39:b2:fc:87:13: 39:e7:05:51:87:52:12:54:61:ad:8a:75:c9:37:b6: 4a:ed:57:0d:56:ac:c6:4a:29:96:97:49:f7:8c:4d: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:4D:73:38:A4:6D:36:AE:0B:C0:B4:2B:F7:4D:FB:B9:6C:C6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8dd355-776a-3426-ad14-0a8caa998ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a5:da:32:41:95:ae:73:1e:d4:20:a3:82:50:c6:74:56:77: a0:22:74:8b:7d:42:79:87:50:da:d5:2f:96:26:24:0c:81:c5: 74:f5:7c:37:d4:bd:95:7d:51:38:b7:a5:85:ee:81:ea:8b:1b: 67:dc:3d:68:52:b9:c7:73:71:83:6f:5e:3a:61:f3:4d:b4:2b: 10:85:f1:91:52:80:fd:85:c7:17:b1:94:24:d8:fe:eb:ea:6f: f0:f0:ce:7b:ec:26:19:13:d2:64:3a:7b:85:07:d8:d2:ab:3b: 50:b3:45:00:dc:2e:00:dd:d4:cf:83:c7:79:4d:1a:7d:d5:a4: dc:a4:0f:33:d2:bd:6b:5e:f8:94:ce:a1:ef:86:a2:34:ab:d2: 7e:81:e6:97:ee:61:69:6e:35:4d:b8:3a:82:55:44:86:bc:56: 43:40:fc:88:75:5b:a8:fa:30:80:28:12:d8:dd:3e:c9:b3:c8: d6:cb:4c:e7:53:33:1b:62:ed:bd:05:68:75:c3:a3:99:ed:f3: be:b9:89:89:3d:ab:f7:36:8e:b8:69:0d:3b:6a:f4:d4:71:01: 7c:2a:4f:66:fc:fd:45:f1:4e:a6:cc:6b:b9:6d:6d:3e:41:2a: 4d:c7:0e:cf:31:a4:ee:83:0c:1d:f9:2a:a2:00:42:35:0b:dd: a1:ba:ea:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yGQuQp3YS9IKv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDA0OFoXDTI1MTEyMzE4MDA0OFowLzEtMCsGA1UEAxMk MDRlZjRlN2UtZWFiZC00OTk4LTg5NTMtMTA1ZGVkZmJmODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKDvtD+FzyUUvFvv5UmsymcC7u6FMrNXl9l /rpO8MJpRw6Hc/n0vIrxzzqY0rI5sjR5GZe3KeFKkmvrpANcHXEaefXMHqHwLn3Z 76M290Co+c+x1VlCJzDTKFnSrAh2i25H8Lj5BTzkvXhif2hJiViGMAafQMxHJ1z5 YeQq5WjTWXgkIKvtTg53MXzgtwyEiU9dPIKGLJTzRjhx5ik9RV6GOFBS3u6ho22R 40Ft1FSPtmyBHVf05BUEHZwKrn9FitpAIDjTa2qQBfvg5I+yIYHN8sD6/iJoMLau ObL8hxM55wVRh1ISVGGtinXJN7ZK7VcNVqzGSimWl0n3jE2xmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOaTXM4pG02rgvAtCv3Tfu5bMbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZGQzNTUtNzc2YS0z NDI2LWFkMTQtMGE4Y2FhOTk4ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCl2jJBla5zHtQgo4JQxnRWd6AidIt9QnmHUNrVL5YmJAyBxXT1fDfU vZV9UTi3pYXugeqLG2fcPWhSucdzcYNvXjph8020KxCF8ZFSgP2FxxexlCTY/uvq b/DwznvsJhkT0mQ6e4UH2NKrO1CzRQDcLgDd1M+Dx3lNGn3VpNykDzPSvWte+JTO oe+GojSr0n6B5pfuYWluNU24OoJVRIa8VkNA/Ih1W6j6MIAoEtjdPsmzyNbLTOdT Mxti7b0FaHXDo5nt8765iYk9q/c2jrhpDTtq9NRxAXwqT2b8/UXxTqbMa7ltbT5B Kk3HDs8xpO6DDB35KqIAQjUL3aG66ts= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:34 2025 by rpki-client