$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa File: 3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa (raw, json) Hash identifier: mlWEW65ApAJ8fUFuJDxs5WAkVpl9WSl4+CBCMjNUCEk= Subject key identifier: E3:38:C3:2B:22:A2:D9:2E:B0:17:99:41:BC:28:FD:B1:30:72:29:57 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CABD993CA32E4C30EFA40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa Signing time: Tue 19 Aug 2025 17:41:53 +0000 ROA not before: Tue 19 Aug 2025 17:41:53 +0000 ROA not after: Mon 17 Nov 2025 18:41:53 +0000 asID: 31898 IP address blocks: 161.33.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:ab:d9:93:ca:32:e4:c3:0e:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:53 2025 GMT Not After : Nov 17 18:41:53 2025 GMT Subject: CN=d6aa7eb9-f1e4-42f2-abbf-fcba7e2527f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:c0:e6:bc:9c:35:18:67:e3:ab:f8:6d:d3: fe:63:23:d7:b5:c2:59:85:38:cc:4e:6d:0c:4a:35: c1:b0:63:39:b0:09:ab:f2:58:ef:67:a6:26:d5:f7: e1:02:33:f2:fa:6e:e7:d4:e1:5c:a7:5a:af:d8:ec: 7f:dd:36:4e:01:e7:40:e8:d0:81:9d:e8:64:70:d2: 1c:1c:e9:1e:89:e2:39:d9:cf:fd:3d:b8:f9:1d:8d: 8c:ee:d5:09:07:82:fa:70:7a:c6:7e:d5:d5:22:d8: 43:72:56:e2:b0:65:d8:48:00:3c:6b:83:d6:45:51: 78:1b:a1:14:e0:a7:04:8e:0f:56:e3:e9:1b:94:3a: a6:43:5e:58:f0:49:51:32:29:0d:92:e7:91:58:93: ce:6a:3e:ae:07:0e:d7:5a:cd:7b:bd:79:f1:1f:97: db:22:e7:75:e8:a3:d4:a5:a8:15:df:63:a5:84:80: 3a:80:5b:c9:0e:d3:01:4c:67:0d:54:24:70:9c:da: e6:2c:5c:ab:45:df:32:4f:74:c0:0b:33:af:60:20: b4:37:7f:8c:38:e4:37:de:ec:2d:84:70:82:ce:e0: 2b:d2:cd:d0:1f:09:03:b0:6c:8d:b8:42:dd:ff:73: 18:8e:c5:ba:ec:b3:05:b2:76:c2:9e:fe:7e:03:fc: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:38:C3:2B:22:A2:D9:2E:B0:17:99:41:BC:28:FD:B1:30:72:29:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c3cd875-a49d-3b3a-8889-97fad3afd8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bd:d1:1c:f6:bc:7c:7a:21:77:09:21:2f:f9:05:36:f9:12: 21:65:38:fd:94:5e:a5:50:0e:aa:fc:5a:6f:93:2c:9f:e1:c8: 7b:c5:41:a7:f8:c8:54:c8:bf:ae:3d:41:99:99:b8:ee:d3:1e: 8b:98:fa:c6:d9:fc:15:73:f0:14:e5:76:bb:db:6e:e0:cc:ab: 67:5e:5e:1e:fc:9c:d5:7b:a5:06:5b:60:62:1a:f8:37:08:9f: 88:eb:77:0c:ee:98:d9:29:45:85:c2:0b:12:63:e6:cc:98:d4: 70:4c:e2:7c:67:0e:ee:0e:36:0c:7f:50:7e:24:83:c4:7d:ac: fa:c9:72:25:03:52:ac:d3:b0:84:3e:e0:0a:7a:bf:28:d3:7a: a0:a1:13:03:26:46:d8:50:71:c1:68:4a:84:f6:69:06:2f:10: 99:cc:45:0d:45:e3:2f:9f:6e:f4:ca:df:41:08:6a:7a:4d:e0: 13:27:4f:5e:bc:49:dd:35:0b:70:49:56:6e:42:5f:20:2d:41: 4b:f7:64:e4:27:4d:7c:77:9a:49:15:75:a4:0f:1e:cf:85:d3: a8:04:ae:1d:ae:1a:69:1e:0e:8b:35:46:d8:56:59:3e:be:ad: 75:e8:46:85:2f:4d:a4:5f:25:15:62:23:1c:7a:9b:15:d8:51: 9a:e3:3c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHKvZk8oy5MMO+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE1M1oXDTI1MTExNzE4NDE1M1owLzEtMCsGA1UEAxMk ZDZhYTdlYjktZjFlNC00MmYyLWFiYmYtZmNiYTdlMjUyN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mTA5rycNRhn46v4bdP+YyPXtcJZhTjMTm0M SjXBsGM5sAmr8ljvZ6Ym1ffhAjPy+m7n1OFcp1qv2Ox/3TZOAedA6NCBnehkcNIc HOkeieI52c/9Pbj5HY2M7tUJB4L6cHrGftXVIthDclbisGXYSAA8a4PWRVF4G6EU 4KcEjg9W4+kblDqmQ15Y8ElRMikNkueRWJPOaj6uBw7XWs17vXnxH5fbIud16KPU pagV32OlhIA6gFvJDtMBTGcNVCRwnNrmLFyrRd8yT3TACzOvYCC0N3+MOOQ33uwt hHCCzuAr0s3QHwkDsGyNuELd/3MYjsW67LMFsnbCnv5+A/zACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM4wysiotkusBeZQbwo/bEwcilXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2MzY2Q4NzUtYTQ5ZC0z YjNhLTg4ODktOTdmYWQzYWZkOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO90Rz2vHx6IXcJIS/5BTb5EiFlOP2UXqVQDqr8Wm+TLJ/hyHvFQaf4 yFTIv649QZmZuO7THouY+sbZ/BVz8BTldrvbbuDMq2deXh78nNV7pQZbYGIa+DcI n4jrdwzumNkpRYXCCxJj5syY1HBM4nxnDu4ONgx/UH4kg8R9rPrJciUDUqzTsIQ+ 4Ap6vyjTeqChEwMmRthQccFoSoT2aQYvEJnMRQ1F4y+fbvTK30EIanpN4BMnT168 Sd01C3BJVm5CXyAtQUv3ZOQnTXx3mkkVdaQPHs+F06gErh2uGmkeDos1RthWWT6+ rXXoRoUvTaRfJRViIxx6mxXYUZrjPFs= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:44 2025 by rpki-client