$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa File: c17c80c2-d955-3d59-beef-b85041f9786c.roa (raw, json) Hash identifier: 5k4Rw7fHoXkY62/QaH7lHf6ayplI4Tdmq8deoKrLCQo= Subject key identifier: 81:D7:50:B5:23:E3:61:02:1F:64:35:55:A5:D7:4F:B7:06:00:92:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD432D5363BEE5F16B955F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa Signing time: Tue 26 Aug 2025 22:55:38 +0000 ROA not before: Tue 26 Aug 2025 22:55:38 +0000 ROA not after: Mon 24 Nov 2025 23:55:38 +0000 asID: 31898 IP address blocks: 157.151.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:2d:53:63:be:e5:f1:6b:95:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:38 2025 GMT Not After : Nov 24 23:55:38 2025 GMT Subject: CN=1abbb686-d751-4e01-a554-13266d12a442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:ee:36:1a:94:9e:e8:25:a2:b3:3f:3e:d1: 73:5c:0d:6b:fa:43:ff:53:30:df:8c:f9:f0:ca:fe: 93:e5:e2:2f:64:ad:1d:c3:41:1f:3b:4b:6f:ef:38: 92:03:3b:2d:6d:e7:4c:09:7d:29:8f:4b:c1:75:b7: 71:56:68:d8:50:46:f0:c7:78:62:67:8c:2a:07:e1: a6:eb:53:39:0a:3b:00:16:17:01:e1:0d:03:e6:e8: 2c:ae:b6:10:c3:d0:1a:3c:f0:dc:96:d9:fe:e3:61: 4e:c5:c4:0f:d1:3c:06:33:b6:4b:f2:76:f1:0a:66: a1:01:7d:fc:1b:60:2c:f1:e7:9a:f6:62:12:be:9f: 26:5d:14:56:32:be:de:c1:fe:1e:3a:30:d4:53:2b: 7c:91:a7:cc:d3:ab:4c:ca:a5:2c:01:29:ec:52:33: 96:5f:ac:3d:2d:f3:a0:66:74:1c:58:36:77:f9:33: 3a:95:e9:45:68:d8:a3:cd:e4:27:2e:05:0a:77:cb: 80:4c:de:69:7c:3f:cb:a6:33:c1:7d:84:de:50:c9: 65:98:d6:d1:59:5b:38:bf:d9:08:fa:15:c2:63:31: 23:c7:8c:df:55:72:53:2a:c2:fa:44:99:9c:1a:c1: 6d:3f:bb:e6:31:6f:af:a9:bd:d6:79:54:d5:4b:4d: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D7:50:B5:23:E3:61:02:1F:64:35:55:A5:D7:4F:B7:06:00:92:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c17c80c2-d955-3d59-beef-b85041f9786c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:87:23:91:2a:2e:b3:6f:ae:cb:a4:55:7d:fb:ec:aa:15:1e: ff:62:2e:1f:c2:16:64:40:a3:12:71:71:96:3b:e9:c5:19:10: 0e:1f:1d:2b:21:c2:02:d4:3e:95:55:10:7f:2f:38:d8:cb:16: 6c:02:27:18:db:5a:56:f4:fc:cc:d4:53:21:19:d3:3f:97:81: ff:62:e3:31:06:f6:5c:c3:bf:1f:59:91:c8:24:27:7c:8d:c7: 0c:74:09:ff:19:7b:85:0a:8c:48:6c:56:1a:4c:55:c7:a1:56: 36:41:53:01:dc:38:c4:90:7c:38:26:00:2c:7d:de:93:62:01: ae:be:af:5e:de:5e:ce:d2:d4:48:8c:42:52:a4:74:a8:b5:9b: 43:a9:f0:58:d2:63:b5:89:9c:ea:04:40:ed:23:16:8a:f5:4f: 7e:2d:7f:f8:4e:7e:3b:c7:1a:1a:ec:c5:56:f8:2e:20:fc:89: df:d7:c3:79:95:0a:6a:55:78:29:6f:68:10:1a:ba:95:98:1b: 53:59:33:0d:51:15:c5:16:fa:f1:b7:10:d4:5b:56:94:2f:c1: 8e:a7:23:af:d2:6b:94:4d:53:4f:e7:6d:02:bd:fc:73:88:72: 8c:c7:0a:1c:1f:1d:9a:4b:83:ad:31:79:ef:bb:01:c6:9a:b0: 07:0d:1e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qy1TY77l8WuVX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUzOFoXDTI1MTEyNDIzNTUzOFowLzEtMCsGA1UEAxMk MWFiYmI2ODYtZDc1MS00ZTAxLWE1NTQtMTMyNjZkMTJhNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ruNhqUnuglorM/PtFzXA1r+kP/UzDfjPnw yv6T5eIvZK0dw0EfO0tv7ziSAzstbedMCX0pj0vBdbdxVmjYUEbwx3hiZ4wqB+Gm 61M5CjsAFhcB4Q0D5ugsrrYQw9AaPPDcltn+42FOxcQP0TwGM7ZL8nbxCmahAX38 G2As8eea9mISvp8mXRRWMr7ewf4eOjDUUyt8kafM06tMyqUsASnsUjOWX6w9LfOg ZnQcWDZ3+TM6lelFaNijzeQnLgUKd8uATN5pfD/LpjPBfYTeUMllmNbRWVs4v9kI +hXCYzEjx4zfVXJTKsL6RJmcGsFtP7vmMW+vqb3WeVTVS00NgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHXULUj42ECH2Q1VaXXT7cGAJLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzE3YzgwYzItZDk1NS0z ZDU5LWJlZWYtYjg1MDQxZjk3ODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGHI5EqLrNvrsukVX377KoVHv9iLh/CFmRAoxJxcZY76cUZEA4fHSsh wgLUPpVVEH8vONjLFmwCJxjbWlb0/MzUUyEZ0z+Xgf9i4zEG9lzDvx9ZkcgkJ3yN xwx0Cf8Ze4UKjEhsVhpMVcehVjZBUwHcOMSQfDgmACx93pNiAa6+r17eXs7S1EiM QlKkdKi1m0Op8FjSY7WJnOoEQO0jFor1T34tf/hOfjvHGhrsxVb4LiD8id/Xw3mV CmpVeClvaBAaupWYG1NZMw1RFcUW+vG3ENRbVpQvwY6nI6/Sa5RNU0/nbQK9/HOI cozHChwfHZpLg60xee+7AcaasAcNHpI= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:02 2025 by rpki-client