$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa File: 4f0cf56c-094b-3ec5-8954-8e7090994967.roa (raw, json) Hash identifier: ripB+B0mYmc4nR/ozz7SQj7sHWaq3TV5eLXe8shc8yI= Subject key identifier: 15:B3:59:D3:5C:E0:21:92:9F:69:70:B0:58:F2:E0:10:CF:A7:D7:75 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE97727910F6FAEF2590BFB28 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa Signing time: Tue 19 Aug 2025 20:44:11 +0000 ROA not before: Tue 19 Aug 2025 20:44:11 +0000 ROA not after: Mon 17 Nov 2025 21:44:11 +0000 asID: 31898 IP address blocks: 152.67.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:27:91:0f:6f:ae:f2:59:0b:fb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:11 2025 GMT Not After : Nov 17 21:44:11 2025 GMT Subject: CN=1aeb2b55-431f-4c19-9820-63fd98993503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:e3:99:72:73:84:34:22:51:80:11:65:83: 15:12:cf:65:77:7b:c6:d9:f1:eb:6d:61:65:d4:51: 44:b4:d4:2e:c5:26:ec:41:78:1d:61:5d:25:fa:17: 39:59:88:0e:32:a9:69:b8:65:f6:41:07:9e:59:3c: b9:cc:83:18:01:2a:79:da:a7:cc:19:72:51:76:5b: 23:13:3b:77:a0:1a:44:6b:19:eb:48:c4:9a:60:fb: 11:b5:71:8b:4c:dc:a6:af:a8:69:7f:45:8c:1e:d4: 7d:8b:22:c0:e8:b0:21:3e:5c:47:1a:37:e3:9f:f2: 51:b6:6e:d4:99:3f:86:0e:5e:be:cd:73:c7:e2:72: 28:6e:22:9d:8b:4f:2b:10:32:d2:b0:6b:1f:85:34: 78:a0:74:c1:e4:83:45:5d:c6:bb:48:8a:a0:94:85: 46:dc:45:44:a0:36:8d:d3:a9:67:11:c6:c5:cc:f5: 94:73:ba:7b:7e:cf:b4:fc:eb:6a:1c:bb:6b:4b:18: 8d:d0:d1:4b:fe:cf:75:2d:a6:4a:40:78:46:34:a6: e3:98:ed:5a:2f:86:f2:ae:d8:60:bf:75:09:98:c9: bd:15:3e:50:24:32:ff:2e:b5:3c:d0:8b:55:12:c4: 05:df:66:36:92:e6:e9:a2:2a:52:72:1b:80:62:12: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B3:59:D3:5C:E0:21:92:9F:69:70:B0:58:F2:E0:10:CF:A7:D7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:41:b9:11:c1:63:52:fc:e7:92:e1:c8:b6:9f:15:a5:2e:d9: 6d:b1:90:33:f4:e8:e6:de:6c:b3:cd:5d:f9:44:c7:0b:8d:c8: 12:fd:6e:7a:94:ba:70:56:50:bd:f2:cd:c2:69:8c:bb:1f:c6: 88:e3:cf:39:fb:e9:ad:9c:ee:a7:03:1a:82:b2:6c:19:45:ca: dd:eb:e1:fc:1f:a8:84:56:8f:47:0a:15:34:c8:13:2e:53:a3: 64:73:cc:47:eb:a6:63:a1:80:f7:50:2a:a5:89:10:7f:67:10: e6:9f:84:83:3b:9d:e1:d3:37:09:a1:e7:71:03:b5:6f:de:2c: 46:bb:42:6c:9b:07:e8:ec:55:38:c6:71:53:bf:a6:03:16:80: b9:6b:01:34:95:9f:2d:22:c0:e7:10:38:55:ba:5f:5b:ad:fe: f6:51:34:35:ad:bb:f1:8d:43:60:a2:fb:f2:31:c8:b8:d2:73: f4:3c:5b:f6:4c:67:a7:3e:fa:d6:af:24:fd:20:4b:bf:52:c8: d3:d4:11:e3:2e:de:e6:1a:ff:65:1c:30:a1:97:04:70:f0:4e: 4a:aa:9b:d7:aa:ea:b1:3b:c4:ff:0e:12:c3:c0:39:db:1e:72: 52:a2:b4:a4:1e:b7:14:dd:37:b3:e9:2b:97:56:4f:0d:da:9a: 63:86:11:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdyeRD2+u8lkL+ygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQxMVoXDTI1MTExNzIxNDQxMVowLzEtMCsGA1UEAxMk MWFlYjJiNTUtNDMxZi00YzE5LTk4MjAtNjNmZDk4OTkzNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdLjmXJzhDQiUYARZYMVEs9ld3vG2fHrbWFl 1FFEtNQuxSbsQXgdYV0l+hc5WYgOMqlpuGX2QQeeWTy5zIMYASp52qfMGXJRdlsj Ezt3oBpEaxnrSMSaYPsRtXGLTNymr6hpf0WMHtR9iyLA6LAhPlxHGjfjn/JRtm7U mT+GDl6+zXPH4nIobiKdi08rEDLSsGsfhTR4oHTB5INFXca7SIqglIVG3EVEoDaN 06lnEcbFzPWUc7p7fs+0/OtqHLtrSxiN0NFL/s91LaZKQHhGNKbjmO1aL4byrthg v3UJmMm9FT5QJDL/LrU80ItVEsQF32Y2kubpoipSchuAYhJYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWzWdNc4CGSn2lwsFjy4BDPp9d1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGYwY2Y1NmMtMDk0Yi0z ZWM1LTg5NTQtOGU3MDkwOTk0OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmENAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdBuRHBY1L855LhyLafFaUu2W2xkDP06ObebLPNXflExwuNyBL9bnqU unBWUL3yzcJpjLsfxojjzzn76a2c7qcDGoKybBlFyt3r4fwfqIRWj0cKFTTIEy5T o2RzzEfrpmOhgPdQKqWJEH9nEOafhIM7neHTNwmh53EDtW/eLEa7QmybB+jsVTjG cVO/pgMWgLlrATSVny0iwOcQOFW6X1ut/vZRNDWtu/GNQ2Ci+/IxyLjSc/Q8W/ZM Z6c++tavJP0gS79SyNPUEeMu3uYa/2UcMKGXBHDwTkqqm9eq6rE7xP8OEsPAOdse clKitKQetxTdN7PpK5dWTw3ammOGETg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:25:22 2025 by rpki-client