$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1be47c9-ffe8-3ada-94df-cd1668684d45.roa File: b1be47c9-ffe8-3ada-94df-cd1668684d45.roa (raw, json) Hash identifier: fKOgtYZ7iIygAvONBXqJ+yzl1iD16lyhF/72loNsN88= Subject key identifier: 55:C9:9B:BA:2C:33:E6:E6:24:39:91:92:92:8B:3E:51:45:DC:0A:99 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD431D18B9E63D62F3872840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1be47c9-ffe8-3ada-94df-cd1668684d45.roa Signing time: Tue 26 Aug 2025 22:55:30 +0000 ROA not before: Tue 26 Aug 2025 22:55:30 +0000 ROA not after: Mon 24 Nov 2025 23:55:30 +0000 asID: 31898 IP address blocks: 157.151.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:1d:18:b9:e6:3d:62:f3:87:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:30 2025 GMT Not After : Nov 24 23:55:30 2025 GMT Subject: CN=af29cca4-36d7-40be-b4c4-bed0fa0666e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:54:c5:a3:cd:47:78:7d:6f:bb:ee:0d:a9: 94:4e:51:ec:c2:fb:23:d7:7f:08:9d:63:8e:8e:84: ca:d3:3d:3f:16:d3:7a:08:fe:d0:47:3b:82:d0:5b: be:de:f4:3e:41:32:ac:3e:54:1e:2e:2a:d5:43:57: c0:f8:2f:6b:f4:0e:e7:ec:56:82:3e:57:b8:85:c3: 5a:ee:b4:c7:89:33:f5:c7:3d:27:ee:34:36:9a:73: 50:6b:95:a8:80:37:83:47:9d:a1:67:43:ea:49:30: 91:e3:7c:c6:b8:df:59:f8:61:a9:2f:27:6f:70:1a: 15:8b:59:37:26:66:73:2c:c7:72:65:9d:38:52:e4: 31:74:5c:fb:2d:2b:26:eb:13:29:9e:3e:ae:57:5f: cc:6a:51:53:61:de:b4:23:6c:b1:e0:8a:18:97:61: be:d2:58:46:fe:84:6e:cd:c8:99:5a:2f:3b:eb:54: 83:38:cd:b6:b2:5e:88:0c:34:fc:1a:25:62:fd:e3: 9f:e6:39:db:ce:fe:a1:f9:21:a6:b9:0c:0f:dd:a5: d9:d7:8f:c2:7b:36:40:5a:5a:bb:f3:47:d7:aa:e7: 2c:6f:2b:be:42:ad:1d:b8:d0:43:2e:6d:0b:50:dd: de:0e:82:c1:15:9b:b7:a3:fa:b1:cc:bd:d8:4f:30: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C9:9B:BA:2C:33:E6:E6:24:39:91:92:92:8B:3E:51:45:DC:0A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1be47c9-ffe8-3ada-94df-cd1668684d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:96:10:c5:a3:0f:cd:1c:e6:7c:23:a3:b4:68:da:c7:96:5f: 50:54:3e:dd:c1:ff:ae:af:17:3d:a9:74:54:b8:e2:7b:12:5f: 22:56:ff:25:8a:d8:e2:d9:10:28:83:2a:b9:5d:95:cb:f1:0b: 6b:0a:a6:c0:50:9d:28:64:aa:a1:4d:e0:9f:f9:25:94:df:83: 58:5f:06:74:74:64:36:02:ac:37:d8:47:bf:f9:c3:5b:2f:06: 1b:b7:f4:32:d7:3a:79:f7:d6:e0:49:46:9d:6e:5c:ae:1e:c2: 64:6b:24:b5:e9:fd:c9:ec:cb:c7:c6:f1:9b:5b:44:3f:91:3c: 88:bb:81:f7:d5:31:44:57:0e:9b:c7:c5:dc:00:fa:95:a6:5a: d7:0d:7a:e0:fb:a3:e9:0d:73:ae:f7:f1:87:8c:2c:c4:5f:9b: 6a:ea:3d:c2:11:df:10:9e:e0:c9:1b:22:7f:eb:ac:7c:d4:6c: bb:59:cc:60:e4:05:5e:05:7c:62:40:42:aa:a5:b0:78:8c:b2: 74:e2:c0:9d:00:fb:97:f2:b9:9b:78:b5:7c:4a:d5:3b:44:48: dd:10:f3:53:9c:20:59:c2:20:bc:3b:3b:1d:1c:99:b3:b2:8d: 96:a6:d9:5b:8e:31:59:52:cd:58:72:43:fa:26:32:8b:49:01: 39:ff:86:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qx0YueY9YvOHKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUzMFoXDTI1MTEyNDIzNTUzMFowLzEtMCsGA1UEAxMk YWYyOWNjYTQtMzZkNy00MGJlLWI0YzQtYmVkMGZhMDY2NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiutUxaPNR3h9b7vuDamUTlHswvsj138InWOO joTK0z0/FtN6CP7QRzuC0Fu+3vQ+QTKsPlQeLirVQ1fA+C9r9A7n7FaCPle4hcNa 7rTHiTP1xz0n7jQ2mnNQa5WogDeDR52hZ0PqSTCR43zGuN9Z+GGpLydvcBoVi1k3 JmZzLMdyZZ04UuQxdFz7LSsm6xMpnj6uV1/MalFTYd60I2yx4IoYl2G+0lhG/oRu zciZWi8761SDOM22sl6IDDT8GiVi/eOf5jnbzv6h+SGmuQwP3aXZ14/CezZAWlq7 80fXqucsbyu+Qq0duNBDLm0LUN3eDoLBFZu3o/qxzL3YTzBV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXJm7osM+bmJDmRkpKLPlFF3AqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjFiZTQ3YzktZmZlOC0z YWRhLTk0ZGYtY2QxNjY4Njg0ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZcyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+WEMWjD80c5nwjo7Ro2seWX1BUPt3B/66vFz2pdFS44nsSXyJW/yWK 2OLZECiDKrldlcvxC2sKpsBQnShkqqFN4J/5JZTfg1hfBnR0ZDYCrDfYR7/5w1sv Bhu39DLXOnn31uBJRp1uXK4ewmRrJLXp/cnsy8fG8ZtbRD+RPIi7gffVMURXDpvH xdwA+pWmWtcNeuD7o+kNc6738YeMLMRfm2rqPcIR3xCe4MkbIn/rrHzUbLtZzGDk BV4FfGJAQqqlsHiMsnTiwJ0A+5fyuZt4tXxK1TtESN0Q81OcIFnCILw7Ox0cmbOy jZam2VuOMVlSzVhyQ/omMotJATn/hiw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:22 2025 by rpki-client