$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa File: f42be3d9-7682-37f0-ad4a-ee6860799dae.roa (raw, json) Hash identifier: mPJUsAM6HSwWeeSiGhFCNKQLELouh+v9vSlf4xfiL+Q= Subject key identifier: 4B:2A:E4:6C:FC:B2:D9:36:BB:C0:CE:C5:24:77:FD:76:56:05:76:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C8665F57D870E649AC6380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa Signing time: Mon 25 Aug 2025 17:00:49 +0000 ROA not before: Mon 25 Aug 2025 17:00:49 +0000 ROA not after: Sun 23 Nov 2025 18:00:49 +0000 asID: 31898 IP address blocks: 167.126.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:66:5f:57:d8:70:e6:49:ac:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:49 2025 GMT Not After : Nov 23 18:00:49 2025 GMT Subject: CN=3f7f04c8-9fb0-4b97-90c0-03f001fa6515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:52:e7:77:a5:28:5b:81:d9:37:3a:d7:69: e9:bc:1b:fa:4a:17:e5:27:af:96:04:23:c6:67:cf: 1e:4e:5c:be:6a:46:22:63:d4:4a:94:1f:c9:c9:71: cf:ae:97:4b:82:0e:27:a3:4f:91:bd:36:4a:5f:68: f4:65:39:37:ba:3d:f0:3b:65:2c:01:6b:7a:e5:8f: 83:49:dd:13:af:12:fd:77:50:2b:3b:25:80:e5:a2: ae:d7:51:b6:15:c5:e6:bd:36:f2:bb:6d:62:28:c7: 2d:ad:bb:fd:f3:55:ce:c8:22:a7:ac:e0:d0:39:63: 54:3c:08:d3:14:c2:d7:59:37:cb:f3:69:f2:e5:15: a8:3f:72:29:2c:9e:d7:54:04:cc:cb:39:e3:d6:8e: 63:2c:5e:b7:48:6a:6b:82:6f:45:8a:96:cc:cf:04: a6:f8:a5:13:0c:8c:9d:3f:bf:76:97:80:24:1f:59: e2:50:b6:ec:b4:7f:d8:98:3b:21:7f:28:05:25:df: b1:04:cd:96:b1:41:43:28:83:fd:b8:c2:c3:34:67: 78:81:c4:af:12:e0:dd:6b:fd:83:71:08:2c:1f:80: 24:05:fb:9d:5d:93:10:0b:8b:01:5d:14:76:35:d1: c7:f1:12:57:18:cf:77:3d:30:41:95:38:78:18:0b: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:E4:6C:FC:B2:D9:36:BB:C0:CE:C5:24:77:FD:76:56:05:76:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f42be3d9-7682-37f0-ad4a-ee6860799dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:04:9a:be:2d:4d:15:99:c1:42:55:b5:9d:90:38:53:c4:7f: fe:fc:9b:b8:9f:82:25:a5:31:31:95:4d:24:53:f3:ed:07:19: 3c:73:eb:8e:05:27:e5:fc:ba:62:45:c4:7d:61:19:0e:c9:9a: 62:33:57:8d:b5:58:7f:b9:1e:0b:e7:60:b2:c9:e8:13:9b:dd: 66:d8:fb:01:48:10:12:5f:5c:d4:04:b5:e2:39:2e:5d:13:86: d3:1e:00:42:12:6d:fc:a0:ff:06:c9:f8:b9:f9:98:7e:71:01: f3:ca:c2:10:02:d8:6d:a0:ba:ed:89:b7:2d:cb:23:f5:44:01: 99:aa:51:c4:87:25:b0:06:91:12:d3:90:88:6b:9f:2b:2b:39: bd:55:7d:94:85:cb:d5:e5:f9:a2:79:59:6a:c1:9c:8f:6b:ad: 6e:07:4d:15:07:10:d5:e0:80:a0:fd:e0:76:9a:0e:ef:f7:6a: 34:72:c0:7f:c6:ac:25:33:6b:66:f8:26:2d:47:25:61:c5:6b: 6a:10:03:23:fa:cb:71:f0:c8:ee:bb:24:2b:c4:9e:19:6a:66: 62:fc:41:24:b6:8b:ba:a1:52:97:56:5c:ac:55:44:c2:e8:e6: 64:9b:54:55:49:b4:f3:37:ed:3c:81:3c:26:f8:f9:c1:ac:1b: cd:e3:8c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yGZfV9hw5kmsY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDA0OVoXDTI1MTEyMzE4MDA0OVowLzEtMCsGA1UEAxMk M2Y3ZjA0YzgtOWZiMC00Yjk3LTkwYzAtMDNmMDAxZmE2NTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmENS53elKFuB2Tc612npvBv6ShflJ6+WBCPG Z88eTly+akYiY9RKlB/JyXHPrpdLgg4no0+RvTZKX2j0ZTk3uj3wO2UsAWt65Y+D Sd0TrxL9d1ArOyWA5aKu11G2FcXmvTbyu21iKMctrbv981XOyCKnrODQOWNUPAjT FMLXWTfL82ny5RWoP3IpLJ7XVATMyznj1o5jLF63SGprgm9FipbMzwSm+KUTDIyd P792l4AkH1niULbstH/YmDshfygFJd+xBM2WsUFDKIP9uMLDNGd4gcSvEuDda/2D cQgsH4AkBfudXZMQC4sBXRR2NdHH8RJXGM93PTBBlTh4GAt6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsq5Gz8stk2u8DOxSR3/XZWBXYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjQyYmUzZDktNzY4Mi0z N2YwLWFkNGEtZWU2ODYwNzk5ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp34wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoEmr4tTRWZwUJVtZ2QOFPEf/78m7ifgiWlMTGVTSRT8+0HGTxz644F J+X8umJFxH1hGQ7JmmIzV421WH+5HgvnYLLJ6BOb3WbY+wFIEBJfXNQEteI5Ll0T htMeAEISbfyg/wbJ+Ln5mH5xAfPKwhAC2G2guu2Jty3LI/VEAZmqUcSHJbAGkRLT kIhrnysrOb1VfZSFy9Xl+aJ5WWrBnI9rrW4HTRUHENXggKD94HaaDu/3ajRywH/G rCUza2b4Ji1HJWHFa2oQAyP6y3HwyO67JCvEnhlqZmL8QSS2i7qhUpdWXKxVRMLo 5mSbVFVJtPM37TyBPCb4+cGsG83jjNo= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:46 2025 by rpki-client