$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa File: cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json) Hash identifier: tFRUojEGi+L85r3w8dif/pJIqp7sf7/pfG13o4h9+Ts= Subject key identifier: B0:CC:EF:B6:23:91:BE:E5:42:D6:41:41:C3:5B:06:F5:79:76:BD:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B37DC81573DADDC082D5AF700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa Signing time: Tue 16 Sep 2025 22:41:27 +0000 ROA not before: Tue 16 Sep 2025 22:41:27 +0000 ROA not after: Mon 15 Dec 2025 23:41:27 +0000 asID: 54253 IP address blocks: 149.118.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:dc:81:57:3d:ad:dc:08:2d:5a:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 22:41:27 2025 GMT Not After : Dec 15 23:41:27 2025 GMT Subject: CN=110ee820-2ba9-4fa1-a514-fd8a262a1320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:bc:e5:b8:15:2e:b8:30:8c:a3:d0:bc:09: c9:d0:50:1f:63:f4:7a:0a:88:58:94:c9:c4:e4:12: ac:ab:60:29:0e:6d:da:a7:ad:1c:ea:be:70:b0:52: c9:09:a5:9f:d6:1c:f5:e8:2e:6a:49:b6:79:50:49: 49:16:d1:54:1d:6b:24:75:f0:2d:bb:d2:ef:f0:1f: 6e:cc:9f:c2:ba:2c:1e:52:61:af:df:6d:aa:8e:1c: cd:36:09:82:a8:f2:7d:da:24:d6:28:5f:cb:a8:15: 68:8c:50:d1:c3:55:9f:f7:d0:4f:4b:aa:c2:87:d3: 33:84:fa:86:eb:ad:98:fd:ae:2e:8d:45:35:93:ee: fe:e8:10:d2:2f:e2:94:12:c0:fd:82:42:c3:23:c7: 21:44:a0:b4:33:3b:3b:6e:bf:5b:fc:a5:64:3c:eb: ae:09:05:60:77:3c:4f:d0:47:73:ce:58:a0:90:f0: 90:7a:87:ca:6e:5f:7b:4b:3b:b9:43:71:81:16:08: 47:f4:ba:c3:43:08:34:a7:fb:1a:64:c5:fa:90:f9: c6:c7:a5:a0:b4:f3:2b:10:6b:dc:62:8b:30:da:af: e3:0f:6d:a2:d7:89:d2:30:8b:d2:94:71:27:11:28: cc:90:c8:9d:4b:8c:2e:3b:1d:4e:20:f5:ff:51:53: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:EF:B6:23:91:BE:E5:42:D6:41:41:C3:5B:06:F5:79:76:BD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5e:11:2f:6a:6b:7a:37:5d:d5:4e:f3:76:c1:3d:96:83:06: de:50:9d:1f:b2:83:f2:cb:6e:f6:3f:33:40:68:5e:f2:0b:e7: 9f:7f:ac:a9:98:0c:bc:22:e5:28:ab:75:5b:5f:80:27:c0:fe: 64:2c:d1:3b:7f:9a:63:05:fd:f8:2b:7e:3b:db:1c:c9:57:51: ee:e2:df:52:22:5a:f3:e4:4b:21:bc:d9:9b:21:c1:d1:a5:6e: 47:8d:c3:34:7d:8c:d8:4f:de:43:fd:77:26:40:f4:6f:20:ef: 3f:58:b4:17:c6:8b:da:5e:a9:3f:b4:8b:47:78:23:6b:79:04: f5:56:59:d7:63:66:9b:5d:36:72:24:be:c6:c1:9c:fb:de:d0: ef:8e:b0:7e:fe:3c:68:9c:11:7c:6e:0c:19:f9:47:5d:82:78: 91:27:dd:3a:aa:68:0e:af:cb:2e:24:ab:d7:6b:88:33:f8:30: 92:14:a2:3d:b1:71:ad:10:73:d8:20:d6:4f:17:0f:32:79:05: 33:55:40:76:ce:da:8f:61:af:54:0f:30:b7:47:f9:0f:42:87: d3:e8:78:fc:89:82:e6:3d:c7:bc:55:7c:aa:be:12:17:c9:64: c0:d7:5f:f2:6d:72:18:b7:3d:55:4e:7e:68:0f:9e:c0:b1:63: b4:fa:ad:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs33IFXPa3cCC1a9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjIyNDEyN1oXDTI1MTIxNTIzNDEyN1owLzEtMCsGA1UEAxMk MTEwZWU4MjAtMmJhOS00ZmExLWE1MTQtZmQ4YTI2MmExMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifK85bgVLrgwjKPQvAnJ0FAfY/R6CohYlMnE 5BKsq2ApDm3ap60c6r5wsFLJCaWf1hz16C5qSbZ5UElJFtFUHWskdfAtu9Lv8B9u zJ/CuiweUmGv322qjhzNNgmCqPJ92iTWKF/LqBVojFDRw1Wf99BPS6rCh9MzhPqG 662Y/a4ujUU1k+7+6BDSL+KUEsD9gkLDI8chRKC0Mzs7br9b/KVkPOuuCQVgdzxP 0EdzzligkPCQeofKbl97Szu5Q3GBFghH9LrDQwg0p/saZMX6kPnGx6WgtPMrEGvc Yosw2q/jD22i14nSMIvSlHEnESjMkMidS4wuOx1OIPX/UVOpTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDM77Yjkb7lQtZBQcNbBvV5dr1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RhZjNlMzMtODJlMC0z MDc2LTkyYzItZDQ5Nzk4MmM5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1eES9qa3o3XdVO83bBPZaDBt5QnR+yg/LLbvY/M0BoXvIL559/rKmY DLwi5SirdVtfgCfA/mQs0Tt/mmMF/fgrfjvbHMlXUe7i31IiWvPkSyG82ZshwdGl bkeNwzR9jNhP3kP9dyZA9G8g7z9YtBfGi9peqT+0i0d4I2t5BPVWWddjZptdNnIk vsbBnPve0O+OsH7+PGicEXxuDBn5R12CeJEn3TqqaA6vyy4kq9driDP4MJIUoj2x ca0Qc9gg1k8XDzJ5BTNVQHbO2o9hr1QPMLdH+Q9Ch9PoePyJguY9x7xVfKq+EhfJ ZMDXX/Jtchi3PVVOfmgPnsCxY7T6rWc= -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:00 2025 by rpki-client