$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5fb16ea-1093-340d-9ba2-4e4988719794.roa File: f5fb16ea-1093-340d-9ba2-4e4988719794.roa (raw, json) Hash identifier: 59ZAJHWtp+NvOsFDgfhd408IidBfYmdGDYJccCqgc2c= Subject key identifier: 04:C8:20:25:6C:6B:3B:C2:44:2A:DF:D5:C0:77:7C:85:87:D1:90:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2482136C69083E0A9B3937F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5fb16ea-1093-340d-9ba2-4e4988719794.roa Signing time: Wed 10 Sep 2025 00:18:53 +0000 ROA not before: Wed 10 Sep 2025 00:18:53 +0000 ROA not after: Tue 09 Dec 2025 01:18:53 +0000 asID: 54253 IP address blocks: 40.233.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:82:13:6c:69:08:3e:0a:9b:39:37:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 00:18:53 2025 GMT Not After : Dec 9 01:18:53 2025 GMT Subject: CN=45dbe256-09ee-4177-86c4-88f44b3dfeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:c0:78:91:c8:46:11:ba:94:4e:30:7d:ad: ac:8f:c3:de:08:eb:b2:fe:8c:d3:22:3a:0b:a7:94: a6:81:d4:e5:23:7c:de:d3:71:fd:e0:10:30:65:55: 3d:0c:6b:d3:d1:13:99:0d:c1:e8:65:f1:fb:e8:1f: 2a:bc:ac:41:30:4a:d8:9b:95:ad:90:bd:17:6a:3b: 8d:1f:f6:c2:41:9a:a9:e4:88:8b:e8:e4:bc:79:2d: fe:c1:a7:1e:a4:81:46:05:53:2f:a1:3a:87:f1:fc: 23:80:80:c8:6b:d5:b9:12:91:4a:5d:23:a5:b8:66: 97:28:55:1f:3f:a6:58:cb:ed:31:6b:ee:a7:1f:81: e9:24:85:65:36:bc:cf:d1:bd:63:29:30:36:ed:8b: 61:87:7c:f6:2f:08:df:b9:fc:6d:2f:31:82:6d:b6: e8:4d:64:84:96:f0:07:41:8c:58:d7:ae:d2:da:74: d2:6a:8f:e4:1c:a5:f6:11:ed:bd:17:cf:1c:b3:09: 10:7b:02:50:eb:10:0d:26:f4:1f:68:14:7c:37:a0: f1:f2:24:95:cb:22:99:47:02:1d:a3:59:f0:7f:94: 0f:08:8d:4c:9b:fc:2b:47:4a:46:b2:60:d8:e2:87: 85:e4:de:c4:a0:d8:95:94:b0:2d:32:04:50:56:42: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:20:25:6C:6B:3B:C2:44:2A:DF:D5:C0:77:7C:85:87:D1:90:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5fb16ea-1093-340d-9ba2-4e4988719794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fd:da:43:54:75:42:28:6c:e8:b0:f3:f4:74:5e:18:10:5a: 28:39:f9:0d:8e:46:de:11:3a:ec:d9:30:c1:7a:09:5f:d4:ad: bc:7a:e6:6f:ec:69:b4:ef:d2:75:7c:a6:b0:61:7f:a0:19:9e: 4e:32:e6:64:42:17:3a:3f:73:e7:5f:f0:37:d4:5d:fb:a7:87: dc:67:8b:7a:aa:ee:1c:55:91:39:99:66:c3:ca:92:9a:26:76: ab:ee:4c:b9:77:88:b7:33:52:39:48:68:24:c6:be:c6:e9:e8: 59:b0:ff:2d:da:68:db:08:7c:ae:56:da:f9:6b:bf:b8:10:b2: 2c:ca:b2:71:b0:6b:93:a2:1d:46:9b:dc:20:6a:05:88:f2:50: 4e:a0:d5:d5:da:70:37:0d:8a:08:5e:21:11:92:da:8e:7e:5f: 6a:1d:9a:78:33:ad:38:42:8d:79:c5:91:5c:08:53:c5:01:6d: 69:9d:e2:c2:4d:21:b8:e8:31:cb:b1:9e:bd:b4:10:c9:4a:7a: ce:83:83:24:0d:e9:a0:e1:53:d2:ae:77:4e:e3:57:d4:1d:6d: 77:6b:75:02:4d:4c:cb:08:03:62:a2:b7:bd:ce:f1:7f:8c:ca: 72:ff:67:4a:b2:f8:94:53:e8:92:37:ea:76:ca:69:14:b5:4f: 40:61:d3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskghNsaQg+Cps5N/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDAwMTg1M1oXDTI1MTIwOTAxMTg1M1owLzEtMCsGA1UEAxMk NDVkYmUyNTYtMDllZS00MTc3LTg2YzQtODhmNDRiM2RmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VfAeJHIRhG6lE4wfa2sj8PeCOuy/ozTIjoL p5SmgdTlI3ze03H94BAwZVU9DGvT0ROZDcHoZfH76B8qvKxBMErYm5WtkL0XajuN H/bCQZqp5IiL6OS8eS3+wacepIFGBVMvoTqH8fwjgIDIa9W5EpFKXSOluGaXKFUf P6ZYy+0xa+6nH4HpJIVlNrzP0b1jKTA27Ythh3z2LwjfufxtLzGCbbboTWSElvAH QYxY167S2nTSao/kHKX2Ee29F88cswkQewJQ6xANJvQfaBR8N6Dx8iSVyyKZRwId o1nwf5QPCI1Mm/wrR0pGsmDY4oeF5N7EoNiVlLAtMgRQVkIzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATIICVsazvCRCrf1cB3fIWH0ZDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjVmYjE2ZWEtMTA5My0z NDBkLTliYTItNGU0OTg4NzE5Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKOkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf92kNUdUIobOiw8/R0XhgQWig5+Q2ORt4ROuzZMMF6CV/Urbx65m/s abTv0nV8prBhf6AZnk4y5mRCFzo/c+df8DfUXfunh9xni3qq7hxVkTmZZsPKkpom dqvuTLl3iLczUjlIaCTGvsbp6Fmw/y3aaNsIfK5W2vlrv7gQsizKsnGwa5OiHUab 3CBqBYjyUE6g1dXacDcNigheIRGS2o5+X2odmngzrThCjXnFkVwIU8UBbWmd4sJN IbjoMcuxnr20EMlKes6DgyQN6aDhU9Kud07jV9QdbXdrdQJNTMsIA2Kit73O8X+M ynL/Z0qy+JRT6JI36nbKaRS1T0Bh03c= -----END CERTIFICATE-----Generated at Thu Oct 9 03:14:01 2025 by rpki-client