$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa File: 291f72af-3eb9-3107-a9f9-d5349b257427.roa (raw, json) Hash identifier: 3cGnh7+mCkH1mVfNO+aO23xVVOcsMQMB0G5wN+/3OOk= Subject key identifier: 66:CA:86:6E:AF:92:B4:3C:70:21:3B:C6:DA:93:5E:F4:20:AC:F9:6F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CAF3A40D80F5E0520F300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa Signing time: Tue 19 Aug 2025 17:41:54 +0000 ROA not before: Tue 19 Aug 2025 17:41:54 +0000 ROA not after: Mon 17 Nov 2025 18:41:54 +0000 asID: 31898 IP address blocks: 161.33.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:af:3a:40:d8:0f:5e:05:20:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:54 2025 GMT Not After : Nov 17 18:41:54 2025 GMT Subject: CN=08ead71e-b4e1-452e-b2b2-feaa6ae6e43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:7a:cd:16:2a:16:d5:f1:bc:3a:4f:cd:d9: e3:1d:7c:db:bf:15:db:79:25:1d:f6:42:2e:78:70: 5d:20:f3:b8:e0:fd:26:ec:94:72:81:f4:68:b9:8f: 26:a5:b5:61:15:dd:8c:e5:30:1e:5d:fa:7d:e2:b3: b9:b4:d3:51:63:54:01:5d:b1:12:95:13:e6:32:44: b2:29:60:ca:4f:7d:7c:83:4e:09:35:3d:08:88:f8: 05:1a:33:04:09:b9:e5:01:6f:28:44:42:68:3e:ba: ae:2e:81:28:09:cc:1e:c5:1d:b5:96:fb:20:92:47: ad:c2:c6:51:a8:12:1b:68:b8:e1:97:b7:5d:5a:ae: 93:fa:78:ce:18:a5:a3:fb:28:68:b9:7a:be:71:86: 36:da:7d:ee:29:18:34:9b:1d:5d:cc:b9:f0:98:e1: 21:6f:3c:1b:19:03:37:71:25:77:1c:51:ad:30:0c: 05:d3:19:57:40:a1:d2:9e:f0:02:e7:c1:1b:66:02: f0:b0:51:dc:d6:0e:8e:b0:81:39:ac:49:5e:b7:3b: 4e:8b:2d:5c:26:8d:0e:72:ac:b1:97:10:d6:d5:e9: 7c:c7:e6:31:98:ca:20:a7:b8:17:45:b4:5f:f3:21: b7:ef:fd:2e:65:71:ee:9f:6d:69:5b:97:3a:3e:c3: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:86:6E:AF:92:B4:3C:70:21:3B:C6:DA:93:5E:F4:20:AC:F9:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:57:9b:2f:22:d3:3c:1a:b1:cb:ca:85:ca:69:56:e0:4d:d3: 74:71:c7:fb:9b:f6:38:5b:4c:f4:fe:4c:2a:33:0e:fe:f7:e9: 93:ae:70:8e:31:97:0e:a2:53:08:4e:17:f0:d1:ac:d1:34:0b: 53:09:86:ad:10:a1:3a:3e:11:ad:7a:7a:cd:bb:1f:21:91:42: dd:54:da:46:6e:fe:f7:75:2b:27:4c:5a:2d:ee:99:a0:e3:f6: 45:1a:59:02:25:6a:76:70:b7:f8:f5:5d:af:23:b0:d2:54:c5: f9:d4:4d:68:82:c8:3c:03:07:75:ed:9f:c3:05:ea:95:03:f9: a4:14:e6:6c:5d:22:6a:74:ec:79:92:1c:56:44:ed:8d:52:c6: a9:66:d3:c1:0a:42:37:84:75:96:31:d5:d7:82:78:5d:28:d4: 0f:42:e3:be:23:e6:6a:b5:4e:55:30:bd:b4:ec:65:c7:00:9e: e3:2b:cd:b3:a7:d5:85:d2:72:2f:ab:92:7c:6a:84:cf:d9:6f: 12:df:ac:54:2c:75:a9:e9:cb:a0:17:22:a3:65:68:3b:9a:0b: 55:95:7f:0b:42:ff:c3:4b:53:73:14:c1:da:29:f4:ee:60:89: 93:c6:04:ba:93:ed:a8:46:38:00:99:54:60:de:8f:10:dc:54: 76:56:04:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHK86QNgPXgUg8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE1NFoXDTI1MTExNzE4NDE1NFowLzEtMCsGA1UEAxMk MDhlYWQ3MWUtYjRlMS00NTJlLWIyYjItZmVhYTZhZTZlNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDZ6zRYqFtXxvDpPzdnjHXzbvxXbeSUd9kIu eHBdIPO44P0m7JRygfRouY8mpbVhFd2M5TAeXfp94rO5tNNRY1QBXbESlRPmMkSy KWDKT318g04JNT0IiPgFGjMECbnlAW8oREJoPrquLoEoCcwexR21lvsgkketwsZR qBIbaLjhl7ddWq6T+njOGKWj+yhouXq+cYY22n3uKRg0mx1dzLnwmOEhbzwbGQM3 cSV3HFGtMAwF0xlXQKHSnvAC58EbZgLwsFHc1g6OsIE5rEletztOiy1cJo0Ocqyx lxDW1el8x+YxmMogp7gXRbRf8yG37/0uZXHun21pW5c6PsO2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbKhm6vkrQ8cCE7xtqTXvQgrPlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjkxZjcyYWYtM2ViOS0z MTA3LWE5ZjktZDUzNDliMjU3NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpXmy8i0zwascvKhcppVuBN03Rxx/ub9jhbTPT+TCozDv736ZOucI4x lw6iUwhOF/DRrNE0C1MJhq0QoTo+Ea16es27HyGRQt1U2kZu/vd1KydMWi3umaDj 9kUaWQIlanZwt/j1Xa8jsNJUxfnUTWiCyDwDB3Xtn8MF6pUD+aQU5mxdImp07HmS HFZE7Y1Sxqlm08EKQjeEdZYx1deCeF0o1A9C474j5mq1TlUwvbTsZccAnuMrzbOn 1YXSci+rknxqhM/ZbxLfrFQsdanpy6AXIqNlaDuaC1WVfwtC/8NLU3MUwdop9O5g iZPGBLqT7ahGOACZVGDejxDcVHZWBPE= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:10 2025 by rpki-client