$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbc7d9fe-616f-3402-b63a-a8daa9de6fd9.roa File: fbc7d9fe-616f-3402-b63a-a8daa9de6fd9.roa (raw, json) Hash identifier: wP2uNimtGxZpvK4wfxAqhoo2fe/XDPA/4wqDuD7ossM= Subject key identifier: 86:EE:52:11:A2:3F:52:CA:0E:E3:07:55:B1:F3:14:C7:31:18:C0:EB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE6FFDC4110B3C44E1FC600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbc7d9fe-616f-3402-b63a-a8daa9de6fd9.roa Signing time: Wed 27 Aug 2025 21:37:20 +0000 ROA not before: Wed 27 Aug 2025 21:37:20 +0000 ROA not after: Tue 25 Nov 2025 22:37:20 +0000 asID: 31898 IP address blocks: 108.59.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e6:ff:dc:41:10:b3:c4:4e:1f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:20 2025 GMT Not After : Nov 25 22:37:20 2025 GMT Subject: CN=13162103-5523-4118-816c-ddb6925f4aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:8c:2f:3d:a3:a3:73:db:3a:20:40:da:04: 55:46:16:75:cc:51:91:da:4a:70:0f:cb:13:c6:d4: 9a:36:23:18:24:52:a0:37:b6:14:d7:f3:97:11:1d: fe:43:6b:8f:86:38:ef:8d:3d:b6:89:ca:0c:3d:5d: 81:45:b6:32:c2:c3:5c:1c:9f:88:6b:ec:d3:58:5a: 78:74:1f:07:51:9c:95:43:cb:b0:52:dd:77:d4:b1: a4:1e:67:ac:43:cb:67:eb:64:ec:6a:8b:2e:05:8c: 64:1b:0b:63:91:8e:4d:93:35:a6:fc:42:87:06:2d: 80:b4:83:6f:02:22:8b:9a:ec:c0:95:99:df:e5:27: ca:14:60:b7:c5:37:fe:57:47:41:e2:0e:f0:0c:2a: 72:09:e5:6a:6b:b2:c2:51:cf:17:db:d1:a0:70:8a: e8:33:4b:94:55:42:2f:fb:b3:cc:a7:9c:ba:91:8d: 59:ea:90:38:9e:e4:93:6c:a6:db:8d:03:52:a2:79: df:7f:94:c5:34:42:56:b5:6a:ca:fd:9d:06:8a:56: 3f:5c:fd:1f:3d:88:c0:59:82:25:12:99:2b:6a:9a: 30:f9:6a:39:11:8a:53:8e:16:14:a8:f1:b9:b9:5a: 69:09:5e:d7:6e:8f:1b:10:01:a3:0a:b4:73:fc:00: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:52:11:A2:3F:52:CA:0E:E3:07:55:B1:F3:14:C7:31:18:C0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbc7d9fe-616f-3402-b63a-a8daa9de6fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:23:e8:b2:c9:45:71:ca:7f:38:c3:b4:ad:00:5e:45:c9:bd: f1:33:40:89:63:7a:a1:ab:00:9d:71:66:29:ef:0b:f3:f5:aa: 52:1b:a4:bc:e7:06:58:be:23:21:4d:a9:05:5d:67:ae:15:3f: 4c:cb:5f:58:c2:ce:cd:2c:f9:06:38:00:a0:63:0f:63:91:5b: 13:93:1d:a5:c1:3e:50:29:2d:c8:09:05:2c:59:dc:b0:41:49: d5:fe:dc:df:29:f6:94:e2:ea:05:6a:e6:0c:89:75:ef:36:c8: 62:c7:46:56:fc:80:5c:6b:65:04:32:23:70:40:9f:0c:3a:3b: 85:e9:ed:55:94:44:91:f0:3a:6c:9b:38:46:37:cb:73:0e:13: 6a:35:b9:ac:94:3b:3a:cc:ed:86:c2:fa:22:ac:ff:37:c2:f3: f9:e3:bf:ff:5e:ba:54:e8:10:f8:32:f6:23:2c:d1:6a:ad:7a: b9:3d:d7:73:4a:3b:3c:e5:76:f9:4e:9a:c6:ed:b8:c9:be:71: c2:8d:6e:50:84:f4:1b:89:a4:f4:7f:68:ba:43:6f:d0:9f:1a: 5e:19:81:a3:84:81:64:81:4d:e3:e8:5a:6f:32:38:14:16:0b: d7:a6:d0:bb:9b:ef:5e:07:24:a5:41:7c:f8:b2:fe:4e:6e:d1: 78:be:2b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr/5v/cQRCzxE4fxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzcyMFoXDTI1MTEyNTIyMzcyMFowLzEtMCsGA1UEAxMk MTMxNjIxMDMtNTUyMy00MTE4LTgxNmMtZGRiNjkyNWY0YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjaMLz2jo3PbOiBA2gRVRhZ1zFGR2kpwD8sT xtSaNiMYJFKgN7YU1/OXER3+Q2uPhjjvjT22icoMPV2BRbYywsNcHJ+Ia+zTWFp4 dB8HUZyVQ8uwUt131LGkHmesQ8tn62TsaosuBYxkGwtjkY5NkzWm/EKHBi2AtINv AiKLmuzAlZnf5SfKFGC3xTf+V0dB4g7wDCpyCeVqa7LCUc8X29GgcIroM0uUVUIv +7PMp5y6kY1Z6pA4nuSTbKbbjQNSonnff5TFNEJWtWrK/Z0GilY/XP0fPYjAWYIl Epkrapow+Wo5EYpTjhYUqPG5uVppCV7Xbo8bEAGjCrRz/AAHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbuUhGiP1LKDuMHVbHzFMcxGMDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmJjN2Q5ZmUtNjE2Zi0z NDAyLWI2M2EtYThkYWE5ZGU2ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4j6LLJRXHKfzjDtK0AXkXJvfEzQIljeqGrAJ1xZinvC/P1qlIbpLzn Bli+IyFNqQVdZ64VP0zLX1jCzs0s+QY4AKBjD2ORWxOTHaXBPlApLcgJBSxZ3LBB SdX+3N8p9pTi6gVq5gyJde82yGLHRlb8gFxrZQQyI3BAnww6O4Xp7VWURJHwOmyb OEY3y3MOE2o1uayUOzrM7YbC+iKs/zfC8/njv/9eulToEPgy9iMs0Wqterk913NK OzzldvlOmsbtuMm+ccKNblCE9BuJpPR/aLpDb9CfGl4ZgaOEgWSBTePoWm8yOBQW C9em0Lub714HJKVBfPiy/k5u0Xi+K9I= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:31 2025 by rpki-client