$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce9e44a8-fe11-3458-b243-8c2d954207c5.roa File: ce9e44a8-fe11-3458-b243-8c2d954207c5.roa (raw, json) Hash identifier: iWudoSvdYGIFNWNk5E5LxiJXyOQ/Cg1C8Q3UWGf+oWU= Subject key identifier: 43:DD:07:0D:F9:87:40:0A:09:57:45:17:DF:88:71:88:43:F3:9C:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4335B0AF9F2C2B2B57B4C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce9e44a8-fe11-3458-b243-8c2d954207c5.roa Signing time: Tue 26 Aug 2025 22:55:42 +0000 ROA not before: Tue 26 Aug 2025 22:55:42 +0000 ROA not after: Mon 24 Nov 2025 23:55:42 +0000 asID: 31898 IP address blocks: 157.151.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:35:b0:af:9f:2c:2b:2b:57:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:42 2025 GMT Not After : Nov 24 23:55:42 2025 GMT Subject: CN=298e149b-7e49-4ccb-a311-aff6ab17bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:16:89:a5:59:07:6e:eb:f1:b9:dd:70:91: 8b:bf:63:6b:97:0c:87:0d:dd:13:e9:98:eb:b6:63: 3d:b1:38:7c:07:d5:1f:6b:ad:46:7a:a5:73:60:45: 27:1d:07:11:d1:fa:e2:9d:36:e8:2e:57:34:c1:4b: 6d:a5:ff:f8:b2:40:20:84:06:65:0d:16:6b:fc:51: 51:79:11:79:b0:fb:1f:c2:38:4d:37:32:f1:66:f9: 7b:66:90:0d:c7:f7:19:61:9f:97:d4:bf:09:6b:41: 9c:4f:ca:ab:c9:b7:ad:b6:7b:53:fa:75:b3:68:5d: 11:5a:c7:60:2f:1d:f1:d3:6f:6a:91:c9:41:26:58: ab:de:20:be:6b:59:e7:32:1b:e5:7e:f2:53:50:04: 55:a7:b8:64:c8:38:58:e2:cc:5e:82:0c:9c:fa:14: ac:8d:ac:c3:7b:39:0e:9d:c6:47:c0:42:b9:2a:33: 07:49:50:4a:22:4f:98:81:cf:ed:13:56:af:1f:44: 41:4a:84:3f:b0:d3:7b:7d:79:18:97:1c:43:b2:2d: 26:5d:05:9d:f0:70:0f:42:8d:09:28:2b:2d:09:59: 06:ca:84:10:c1:06:60:1d:3d:78:af:98:f8:08:1e: fe:34:f6:3c:b5:59:8b:c8:6c:7e:d5:19:c4:8b:04: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DD:07:0D:F9:87:40:0A:09:57:45:17:DF:88:71:88:43:F3:9C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce9e44a8-fe11-3458-b243-8c2d954207c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5d:6a:92:84:1d:fc:42:cd:31:7c:4d:b4:60:96:1c:3c:88: af:e2:ef:d8:e1:2b:18:82:35:0c:45:be:8c:4f:3e:26:d8:94: ff:bd:57:cb:0c:3d:92:38:e8:0c:8a:e7:a9:8a:d5:d1:39:98: 9c:79:1c:65:ba:30:b4:b4:9d:36:91:68:d6:48:37:a1:dd:04: d1:70:28:78:7f:92:39:83:b2:c7:a9:32:5f:d4:54:6f:7b:d9: 41:df:09:ca:9b:2e:45:9e:88:f1:4d:48:d8:5b:0f:ed:ec:27: 66:00:f9:42:4c:11:c6:82:22:b5:0f:ee:a0:8a:4e:e9:bc:31: ba:df:c3:ef:a5:47:49:ac:79:30:c3:62:00:90:9f:6f:eb:43: d5:bb:07:68:30:c2:5f:5a:c7:7e:3b:82:29:ed:6a:66:5d:0d: d7:2e:e9:2d:ae:0e:ac:9a:64:80:33:b4:4b:dd:bf:92:db:96: cd:7f:5f:86:b2:83:1a:2e:b5:6f:07:ed:5b:73:6c:f3:42:84: 93:d4:96:67:83:cc:59:6d:aa:28:29:94:00:40:69:9b:8c:14: 5e:41:5a:ed:5b:d5:c4:28:b4:65:7a:ea:0b:54:70:4a:2e:c1: 10:26:b6:9c:13:b7:9f:ce:33:b8:b2:85:7e:15:f5:3a:d9:61: 1c:76:85:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QzWwr58sKytXtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTU0MloXDTI1MTEyNDIzNTU0MlowLzEtMCsGA1UEAxMk Mjk4ZTE0OWItN2U0OS00Y2NiLWEzMTEtYWZmNmFiMTdiZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0YWiaVZB27r8bndcJGLv2NrlwyHDd0T6Zjr tmM9sTh8B9Ufa61GeqVzYEUnHQcR0frinTboLlc0wUttpf/4skAghAZlDRZr/FFR eRF5sPsfwjhNNzLxZvl7ZpANx/cZYZ+X1L8Ja0GcT8qrybettntT+nWzaF0RWsdg Lx3x029qkclBJlir3iC+a1nnMhvlfvJTUARVp7hkyDhY4sxeggyc+hSsjazDezkO ncZHwEK5KjMHSVBKIk+Ygc/tE1avH0RBSoQ/sNN7fXkYlxxDsi0mXQWd8HAPQo0J KCstCVkGyoQQwQZgHT14r5j4CB7+NPY8tVmLyGx+1RnEiwTnEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPdBw35h0AKCVdFF9+IcYhD85w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2U5ZTQ0YTgtZmUxMS0z NDU4LWIyNDMtOGMyZDk1NDIwN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnZc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFdapKEHfxCzTF8TbRglhw8iK/i79jhKxiCNQxFvoxPPibYlP+9V8sM PZI46AyK56mK1dE5mJx5HGW6MLS0nTaRaNZIN6HdBNFwKHh/kjmDssepMl/UVG97 2UHfCcqbLkWeiPFNSNhbD+3sJ2YA+UJMEcaCIrUP7qCKTum8Mbrfw++lR0mseTDD YgCQn2/rQ9W7B2gwwl9ax347gintamZdDdcu6S2uDqyaZIAztEvdv5Lbls1/X4ay gxoutW8H7VtzbPNChJPUlmeDzFltqigplABAaZuMFF5BWu1b1cQotGV66gtUcEou wRAmtpwTt5/OM7iyhX4V9TrZYRx2hSU= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:44 2025 by rpki-client