$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa File: c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa (raw, json) Hash identifier: F/Uncb2JpC5PxkuyujqgErAseOC8ScOvkIhZ7uCAfc8= Subject key identifier: C8:AC:C8:7B:7C:05:1C:A2:58:92:A4:DA:65:2B:22:4A:9E:06:F0:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE714647913875ECCF244C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa Signing time: Wed 27 Aug 2025 21:37:29 +0000 ROA not before: Wed 27 Aug 2025 21:37:29 +0000 ROA not after: Tue 25 Nov 2025 22:37:29 +0000 asID: 31898 IP address blocks: 108.59.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:14:64:79:13:87:5e:cc:f2:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:29 2025 GMT Not After : Nov 25 22:37:29 2025 GMT Subject: CN=e13713c8-c793-4f2c-b272-9189593880c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:35:d7:e9:5c:eb:27:cc:af:33:85:5d:5d: f3:60:c0:56:03:38:8f:0e:9f:64:43:02:41:ef:9b: ac:98:ee:1f:c6:d9:8d:07:c0:82:8a:22:97:e3:75: 07:bb:6f:06:39:ad:49:7f:f1:8d:32:fb:f4:fb:ba: 75:2a:d8:20:31:c4:21:f0:69:6b:be:ad:9c:4f:33: 49:b2:0a:bd:7f:d5:0e:5b:36:b5:86:bb:ea:b7:aa: c5:78:0d:f6:bd:4e:a4:9a:7d:a0:71:01:22:c6:17: 10:60:f0:75:20:27:eb:cf:b6:89:f7:20:a1:d2:f0: 3e:bc:d8:25:4c:61:a2:55:59:37:13:74:02:32:de: 06:22:fd:77:fb:04:3e:ca:ef:c4:49:3e:e6:14:71: 62:eb:ec:66:38:cb:e1:54:c0:8e:ba:30:8f:36:d9: e1:af:1f:77:c0:f3:5d:9d:df:88:17:27:7a:b3:7b: 2b:25:4a:99:04:78:91:a4:07:fd:3b:3f:33:27:e5: 27:ea:36:46:6b:c1:79:bf:1f:97:c2:63:63:b4:22: 43:d3:1f:93:64:d4:a2:48:a4:4b:8b:1e:45:df:b3: c0:3f:f7:7b:84:cf:09:98:5a:4d:b2:ee:7e:6d:1e: 02:0d:9d:21:60:e5:62:82:de:11:7e:21:b9:ef:8a: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:C8:7B:7C:05:1C:A2:58:92:A4:DA:65:2B:22:4A:9E:06:F0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c7056aac-f564-35e3-a9a9-3cb6b9fdfda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:28:ab:5d:a2:22:18:84:cb:1e:fd:6d:9a:95:7c:8e:fb:0f: a0:43:fc:77:7b:20:b5:9a:bb:86:6e:c3:68:ac:e6:42:64:51: eb:f2:99:a2:dc:e1:dc:69:61:3b:45:6a:22:4b:c3:0b:d6:c3: db:bf:2c:6e:46:c7:86:af:3a:2d:65:2a:2e:01:72:b0:62:09: 3f:26:cc:11:bd:7c:19:7b:80:b2:bd:23:16:7a:b0:d5:aa:e0: b8:f9:3e:4a:15:01:0a:02:54:df:8f:cc:12:70:46:53:6b:36: 53:65:05:ef:a4:88:35:59:15:e7:38:55:bf:70:80:d1:08:e0: 41:93:1e:f5:94:6b:e5:f8:2f:28:35:23:73:e3:fe:9f:9c:be: 15:da:19:3a:2e:65:d7:a7:95:80:df:27:19:c4:ec:6e:19:51: 7f:52:33:e5:31:b3:cd:b6:e2:30:25:fc:1c:bb:f1:ae:da:6d: cd:54:80:c2:3e:b0:20:77:52:16:bf:3b:22:bd:6d:7a:50:45: de:f5:ce:48:37:73:89:30:4b:f6:2b:af:55:69:28:c6:e8:6d: 96:eb:c7:40:d6:9b:62:07:d0:4f:58:5f:49:15:a6:05:23:7c: 0e:13:5d:82:40:03:39:67:8b:01:9c:04:d8:b8:66:41:85:61: 9a:95:61:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/5xRkeROHXszyRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzcyOVoXDTI1MTEyNTIyMzcyOVowLzEtMCsGA1UEAxMk ZTEzNzEzYzgtYzc5My00ZjJjLWIyNzItOTE4OTU5Mzg4MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CE11+lc6yfMrzOFXV3zYMBWAziPDp9kQwJB 75usmO4fxtmNB8CCiiKX43UHu28GOa1Jf/GNMvv0+7p1KtggMcQh8Glrvq2cTzNJ sgq9f9UOWza1hrvqt6rFeA32vU6kmn2gcQEixhcQYPB1ICfrz7aJ9yCh0vA+vNgl TGGiVVk3E3QCMt4GIv13+wQ+yu/EST7mFHFi6+xmOMvhVMCOujCPNtnhrx93wPNd nd+IFyd6s3srJUqZBHiRpAf9Oz8zJ+Un6jZGa8F5vx+XwmNjtCJD0x+TZNSiSKRL ix5F37PAP/d7hM8JmFpNsu5+bR4CDZ0hYOVigt4RfiG574ov4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMisyHt8BRyiWJKk2mUrIkqeBvBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzcwNTZhYWMtZjU2NC0z NWUzLWE5YTktM2NiNmI5ZmRmZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbDuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUoq12iIhiEyx79bZqVfI77D6BD/Hd7ILWau4Zuw2is5kJkUevymaLc 4dxpYTtFaiJLwwvWw9u/LG5Gx4avOi1lKi4BcrBiCT8mzBG9fBl7gLK9IxZ6sNWq 4Lj5PkoVAQoCVN+PzBJwRlNrNlNlBe+kiDVZFec4Vb9wgNEI4EGTHvWUa+X4Lyg1 I3Pj/p+cvhXaGTouZdenlYDfJxnE7G4ZUX9SM+Uxs8224jAl/By78a7abc1UgMI+ sCB3Uha/OyK9bXpQRd71zkg3c4kwS/Yrr1VpKMbobZbrx0DWm2IH0E9YX0kVpgUj fA4TXYJAAzlniwGcBNi4ZkGFYZqVYbk= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:01 2025 by rpki-client