$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa File: 2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa (raw, json) Hash identifier: Pa49Ux/fIXlk93dqkW3Rx8CkirKhPRcoi2062Wg3oc4= Subject key identifier: AB:74:4D:7C:D0:05:5B:37:CA:77:40:DB:76:40:46:75:A0:A4:45:53 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C9064AFBCF82F000A7E40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa Signing time: Tue 19 Aug 2025 17:41:40 +0000 ROA not before: Tue 19 Aug 2025 17:41:40 +0000 ROA not after: Mon 17 Nov 2025 18:41:40 +0000 asID: 31898 IP address blocks: 152.67.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:90:64:af:bc:f8:2f:00:0a:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:40 2025 GMT Not After : Nov 17 18:41:40 2025 GMT Subject: CN=d1f4e057-878f-40c4-bf74-581cfbac2806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:d1:06:ee:62:f1:81:dc:ef:8f:3e:4d:9f: a3:81:16:23:91:7e:ef:d9:d8:0f:f1:ea:9c:9a:9f: 5b:bb:95:f7:97:3d:c3:15:07:ac:f4:7e:d3:32:08: 51:d0:46:51:6f:f6:7a:17:c6:e4:6c:56:4d:7c:fc: 6f:1d:b8:2c:81:0c:a8:48:2a:c5:35:37:23:28:0e: 10:73:9f:13:ad:5f:fa:af:61:5c:5e:20:a6:ce:61: d1:9e:3f:2a:7f:f3:43:7a:3a:28:5f:70:72:f1:55: d6:44:a9:1f:f6:0e:1f:4e:14:ad:c1:35:57:19:dd: e5:a4:94:d3:58:e3:d2:30:10:23:9c:6e:79:21:89: 6c:67:86:fa:5b:18:8c:36:8d:62:33:16:fd:12:bf: e0:4c:e9:be:cd:bd:7a:92:77:80:c0:0f:01:d3:54: 23:24:e7:f8:d4:b4:c9:e0:da:7a:91:3e:6a:d6:e3: 0b:03:85:df:6f:94:f5:ef:aa:06:ad:c3:ea:84:bc: 47:39:34:f6:6d:5b:87:b4:e4:b8:2c:50:4f:93:9c: 45:4e:3d:c0:f8:b6:d1:ec:34:f6:75:7e:f4:c8:57: 8d:ad:17:da:93:35:bc:d1:7e:df:a8:76:63:71:5a: 9e:29:c8:d7:99:85:da:6c:39:f2:46:92:f2:00:ed: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:4D:7C:D0:05:5B:37:CA:77:40:DB:76:40:46:75:A0:A4:45:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f3f8a81-2eef-3a1f-a495-27604b1abf95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5e:61:e4:8f:84:d9:6a:31:ab:9e:f3:e0:85:d2:71:eb:f9: 76:0c:ac:85:b2:82:6e:59:31:62:4c:79:bd:58:e2:85:56:88: d6:89:01:99:3b:2a:53:ab:0d:55:e4:44:56:b2:77:45:82:d6: cc:29:1d:75:58:a6:31:6c:fc:c2:8f:ed:0c:53:b5:56:2c:32: ec:49:b4:62:fd:59:72:81:02:80:ae:e1:84:59:80:8e:f3:fb: 48:62:86:d6:38:d6:a4:65:dc:4e:4d:f1:cd:ff:fd:7d:15:06: 7d:e2:00:27:1a:dc:82:3e:8f:fe:23:95:34:25:d5:37:b0:b6: ea:e2:e1:cf:93:74:3a:9b:34:d1:ad:d2:b0:3e:c3:03:a9:e6: 03:1c:39:14:c0:71:d1:ef:66:34:27:74:eb:9a:e5:24:d0:44: 90:48:2e:17:ea:6d:5d:27:91:43:51:b6:da:81:8f:6b:cf:20: 59:85:3e:90:00:30:f9:fb:03:33:f3:3f:e5:3c:a3:cc:c9:c9: 28:63:e9:0b:a8:08:39:1f:3b:3b:80:ac:83:eb:3a:81:37:ff: c8:4d:b5:91:9b:a6:d6:ce:c6:ce:98:b9:87:a7:23:11:69:5f: b5:62:ff:00:6d:c1:e5:94:50:67:2b:ef:18:e6:43:23:7b:48: b7:74:ba:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHJBkr7z4LwAKfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE0MFoXDTI1MTExNzE4NDE0MFowLzEtMCsGA1UEAxMk ZDFmNGUwNTctODc4Zi00MGM0LWJmNzQtNTgxY2ZiYWMyODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv3RBu5i8YHc748+TZ+jgRYjkX7v2dgP8eqc mp9bu5X3lz3DFQes9H7TMghR0EZRb/Z6F8bkbFZNfPxvHbgsgQyoSCrFNTcjKA4Q c58TrV/6r2FcXiCmzmHRnj8qf/NDejooX3By8VXWRKkf9g4fThStwTVXGd3lpJTT WOPSMBAjnG55IYlsZ4b6WxiMNo1iMxb9Er/gTOm+zb16kneAwA8B01QjJOf41LTJ 4Np6kT5q1uMLA4Xfb5T176oGrcPqhLxHOTT2bVuHtOS4LFBPk5xFTj3A+LbR7DT2 dX70yFeNrRfakzW80X7fqHZjcVqeKcjXmYXabDnyRpLyAO2ulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt0TXzQBVs3yndA23ZARnWgpEVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmYzZjhhODEtMmVlZi0z YTFmLWE0OTUtMjc2MDRiMWFiZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmENwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIReYeSPhNlqMaue8+CF0nHr+XYMrIWygm5ZMWJMeb1Y4oVWiNaJAZk7 KlOrDVXkRFayd0WC1swpHXVYpjFs/MKP7QxTtVYsMuxJtGL9WXKBAoCu4YRZgI7z +0hihtY41qRl3E5N8c3//X0VBn3iACca3II+j/4jlTQl1Tewturi4c+TdDqbNNGt 0rA+wwOp5gMcORTAcdHvZjQndOua5STQRJBILhfqbV0nkUNRttqBj2vPIFmFPpAA MPn7AzPzP+U8o8zJyShj6QuoCDkfOzuArIPrOoE3/8hNtZGbptbOxs6YuYenIxFp X7Vi/wBtweWUUGcr7xjmQyN7SLd0ul0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:56 2025 by rpki-client