$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f709149f-3903-35e8-a458-aba8f40b9a6b.roa File: f709149f-3903-35e8-a458-aba8f40b9a6b.roa (raw, json) Hash identifier: MGV4i2cRUrIQN383vBb7Vr5LC4Xht1QEg+lyaV2mVcs= Subject key identifier: F1:5D:75:A3:0F:34:32:2C:D5:82:D0:72:F2:57:2A:DE:1E:39:DC:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE702B19638D81F30340B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f709149f-3903-35e8-a458-aba8f40b9a6b.roa Signing time: Wed 27 Aug 2025 21:37:21 +0000 ROA not before: Wed 27 Aug 2025 21:37:21 +0000 ROA not after: Tue 25 Nov 2025 22:37:21 +0000 asID: 31898 IP address blocks: 108.59.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:02:b1:96:38:d8:1f:30:34:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:21 2025 GMT Not After : Nov 25 22:37:21 2025 GMT Subject: CN=e2efe1b8-8bc5-492f-be9b-39eea4415090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:6a:b6:ff:ab:89:4f:58:77:d8:3e:2e:ae: 9e:fd:e3:e9:de:c2:fd:f4:93:09:d9:34:2a:88:e6: 75:02:83:67:17:2c:c5:41:23:c9:74:cb:4e:15:e7: 74:a7:ff:84:a9:2e:79:09:68:97:cc:b1:6a:ac:2e: e6:f7:cd:ed:e1:db:c4:e1:3f:b5:0f:14:d0:8c:d6: 15:f3:7f:64:9e:9d:a7:c4:a7:74:dd:9d:24:99:49: 82:da:6c:87:3a:96:92:cd:0e:ec:14:f5:62:2c:18: 58:07:d6:fc:33:0d:d9:0e:6f:80:a9:d1:6e:ae:54: b2:27:8a:cb:41:1d:bf:28:83:fc:74:9d:d2:03:70: 71:91:83:d1:0e:a8:d8:48:1f:d1:e1:b8:10:f8:82: 64:78:42:1c:63:b0:e0:f3:54:12:03:43:32:3c:24: 58:94:f3:a0:84:b5:5b:c5:8b:f1:3c:3a:c3:42:10: f0:9b:35:53:a3:ad:b3:e4:d5:af:cf:73:6c:a5:02: 8a:a6:55:b2:91:5f:5f:92:bb:61:d5:13:1a:ea:c7: 07:40:34:00:ee:f4:b7:40:31:9f:dc:c6:ae:1f:22: 7e:d4:de:bd:a5:05:57:a3:b3:3a:13:9f:9e:4a:b5: 73:d8:37:5d:be:96:7c:76:27:34:dd:b2:01:2f:04: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:75:A3:0F:34:32:2C:D5:82:D0:72:F2:57:2A:DE:1E:39:DC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f709149f-3903-35e8-a458-aba8f40b9a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a0:fd:ad:d1:f8:e0:51:00:da:bf:54:2f:4e:c9:67:1a:47: b1:75:87:2d:e5:c7:41:22:92:19:1e:64:97:20:cd:25:7a:23: 47:c0:74:5e:76:cf:e3:80:45:93:a2:60:db:1b:5c:11:d5:6b: 32:ef:55:09:a6:2d:03:e3:fc:bc:6d:29:f7:af:5b:cf:bc:4d: ce:99:d8:24:ea:ee:a7:f5:1e:16:23:69:4e:69:74:01:11:61: 31:c5:cd:ac:dd:ca:e2:cb:85:6d:9e:d4:73:35:17:1b:c5:73: 04:d9:a4:85:1d:27:95:e8:24:c6:f7:7b:b3:9f:c7:82:f2:4c: ca:8c:30:cd:c4:e6:b9:54:ac:00:74:66:73:9a:d6:65:26:91: e1:4d:07:23:74:29:d0:d4:24:92:01:f0:59:5a:d8:49:fb:ae: e0:ed:b4:7f:cb:4c:02:6b:24:2c:42:7b:81:0b:01:37:d0:b1: 28:93:fd:66:e1:a1:c4:3e:58:ff:68:0f:4c:74:18:95:e2:0c: 70:33:f1:52:24:d1:7a:bf:fd:67:fb:b5:52:8b:8f:78:10:d0: a4:49:22:ec:7d:c0:77:05:ca:9c:2a:8b:fd:b5:08:e2:93:a2: 3f:a1:60:05:38:48:19:48:3e:6a:5d:da:37:2d:8a:17:97:d0: 92:62:b2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/5wKxljjYHzA0C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzcyMVoXDTI1MTEyNTIyMzcyMVowLzEtMCsGA1UEAxMk ZTJlZmUxYjgtOGJjNS00OTJmLWJlOWItMzllZWE0NDE1MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKRqtv+riU9Yd9g+Lq6e/ePp3sL99JMJ2TQq iOZ1AoNnFyzFQSPJdMtOFed0p/+EqS55CWiXzLFqrC7m983t4dvE4T+1DxTQjNYV 839knp2nxKd03Z0kmUmC2myHOpaSzQ7sFPViLBhYB9b8Mw3ZDm+AqdFurlSyJ4rL QR2/KIP8dJ3SA3BxkYPRDqjYSB/R4bgQ+IJkeEIcY7Dg81QSA0MyPCRYlPOghLVb xYvxPDrDQhDwmzVTo62z5NWvz3NspQKKplWykV9fkrth1RMa6scHQDQA7vS3QDGf 3MauHyJ+1N69pQVXo7M6E5+eSrVz2DddvpZ8dic03bIBLwTnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFddaMPNDIs1YLQcvJXKt4eOdxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjcwOTE0OWYtMzkwMy0z NWU4LWE0NTgtYWJhOGY0MGI5YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDuiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyg/a3R+OBRANq/VC9OyWcaR7F1hy3lx0EikhkeZJcgzSV6I0fAdF52 z+OARZOiYNsbXBHVazLvVQmmLQPj/LxtKfevW8+8Tc6Z2CTq7qf1HhYjaU5pdAER YTHFzazdyuLLhW2e1HM1FxvFcwTZpIUdJ5XoJMb3e7Ofx4LyTMqMMM3E5rlUrAB0 ZnOa1mUmkeFNByN0KdDUJJIB8Fla2En7ruDttH/LTAJrJCxCe4ELATfQsSiT/Wbh ocQ+WP9oD0x0GJXiDHAz8VIk0Xq//Wf7tVKLj3gQ0KRJIux9wHcFypwqi/21COKT oj+hYAU4SBlIPmpd2jctiheX0JJisr8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:29 2025 by rpki-client