$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa File: 5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa (raw, json) Hash identifier: ca53yK+2Nh2UzJ/WMqYQI7WYJlqA2xMrqzqGRSiMdSc= Subject key identifier: 07:46:43:91:3F:78:3E:27:43:C2:86:E8:EF:FA:4D:61:92:C2:5F:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE863A363AD39C9FD84A1E330 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa Signing time: Tue 19 Aug 2025 11:29:03 +0000 ROA not before: Tue 19 Aug 2025 11:29:03 +0000 ROA not after: Mon 17 Nov 2025 12:29:03 +0000 asID: 31898 IP address blocks: 158.247.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:a3:63:ad:39:c9:fd:84:a1:e3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:29:03 2025 GMT Not After : Nov 17 12:29:03 2025 GMT Subject: CN=47257f7c-49f3-43d2-bc61-56e9fafb0f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:04:71:93:7b:b1:ec:4e:86:88:de:a2:b1: f0:f1:d0:0e:b8:9e:dc:f6:ad:48:66:b9:aa:56:19: 0e:15:d1:df:8a:6b:7f:2c:6c:c9:41:0b:26:07:60: 15:85:06:fc:3d:fe:fd:e4:a2:66:e4:9c:33:13:5b: 63:78:01:d8:52:78:97:05:24:b6:6f:24:53:45:ea: d5:85:e4:97:6e:57:ab:19:0d:1f:73:5f:02:1c:fc: 2a:f6:ec:29:45:7b:b1:b4:2d:37:e1:cd:6a:81:51: 8b:37:35:67:c6:94:7a:85:9f:f9:ab:23:6a:65:e4: ec:c0:56:0a:e4:50:01:a4:14:92:35:d9:5a:8c:55: 75:51:69:88:ea:67:a4:33:43:2e:3e:65:c1:fb:be: fc:1b:f3:05:9e:02:18:b7:c5:f0:5a:8e:eb:0d:07: f9:23:c5:57:68:9b:77:47:e3:82:fc:85:a4:c0:45: 8e:49:38:dc:ea:75:c0:ac:eb:2a:2b:86:4f:f9:b6: 62:ae:d4:e2:ae:b9:fc:75:46:11:50:e2:a7:b7:8f: ad:8f:80:10:76:33:f6:84:9a:86:9d:d6:c4:7b:58: a8:83:b7:03:59:2e:06:4b:07:3d:97:b3:4c:5f:6f: 8d:7d:fe:0d:fd:72:55:90:ab:4f:af:35:b9:87:17: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:46:43:91:3F:78:3E:27:43:C2:86:E8:EF:FA:4D:61:92:C2:5F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e79704e-eb03-3bb9-8ba0-1326acd68af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d5:73:40:6e:39:a6:35:1e:da:bf:9e:de:ee:28:91:74:fd: 03:da:39:1a:c7:48:87:5e:d4:36:5a:33:db:ff:34:48:3c:d8: b1:a4:7b:fd:01:a9:2f:da:e5:db:d9:e5:91:6b:a9:34:e2:ea: 36:2e:b8:4f:18:c2:fc:c4:7b:5d:40:79:c2:94:e1:80:91:3b: 61:6d:12:01:7f:dd:46:0e:43:80:ce:12:47:13:90:af:63:5e: a6:83:ce:d7:ee:2a:90:86:5b:0b:39:60:51:bb:3f:ab:fe:7b: d7:8e:61:82:16:d7:cc:c9:1e:b8:c9:90:91:24:8a:7f:55:79: 97:d6:a9:29:19:f6:2e:db:2c:51:4f:4c:0e:83:74:59:07:a0: 0f:87:83:76:59:bc:a8:79:1c:b4:a0:ed:2d:c3:58:bf:e0:5d: 88:f2:88:84:0a:68:a4:cf:e6:b0:30:86:bc:d0:aa:7b:8b:0a: f5:03:b5:d6:d3:bd:e3:2a:df:02:17:e9:0f:17:8e:c2:70:c7: 6c:0d:14:62:72:b4:7e:7a:b6:15:70:8d:97:41:26:a0:a3:f3: 1d:c5:df:b3:17:31:ea:05:22:a6:91:6d:5d:56:49:1b:77:33: dd:75:6e:72:fa:c7:f4:83:63:31:41:12:5c:22:ee:2f:20:89: c1:88:eb:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY6NjrTnJ/YSh4zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjkwM1oXDTI1MTExNzEyMjkwM1owLzEtMCsGA1UEAxMk NDcyNTdmN2MtNDlmMy00M2QyLWJjNjEtNTZlOWZhZmIwZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKkEcZN7sexOhojeorHw8dAOuJ7c9q1IZrmq VhkOFdHfimt/LGzJQQsmB2AVhQb8Pf795KJm5JwzE1tjeAHYUniXBSS2byRTRerV heSXblerGQ0fc18CHPwq9uwpRXuxtC034c1qgVGLNzVnxpR6hZ/5qyNqZeTswFYK 5FABpBSSNdlajFV1UWmI6mekM0MuPmXB+778G/MFngIYt8XwWo7rDQf5I8VXaJt3 R+OC/IWkwEWOSTjc6nXArOsqK4ZP+bZirtTirrn8dUYRUOKnt4+tj4AQdjP2hJqG ndbEe1iog7cDWS4GSwc9l7NMX2+Nff4N/XJVkKtPrzW5hxel5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdGQ5E/eD4nQ8KG6O/6TWGSwl/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWU3OTcwNGUtZWIwMy0z YmI5LThiYTAtMTMyNmFjZDY4YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnvd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbVc0BuOaY1Htq/nt7uKJF0/QPaORrHSIde1DZaM9v/NEg82LGke/0B qS/a5dvZ5ZFrqTTi6jYuuE8YwvzEe11AecKU4YCRO2FtEgF/3UYOQ4DOEkcTkK9j XqaDztfuKpCGWws5YFG7P6v+e9eOYYIW18zJHrjJkJEkin9VeZfWqSkZ9i7bLFFP TA6DdFkHoA+Hg3ZZvKh5HLSg7S3DWL/gXYjyiIQKaKTP5rAwhrzQqnuLCvUDtdbT veMq3wIX6Q8XjsJwx2wNFGJytH56thVwjZdBJqCj8x3F37MXMeoFIqaRbV1WSRt3 M911bnL6x/SDYzFBElwi7i8gicGI68c= -----END CERTIFICATE-----Generated at Wed Aug 20 03:25:20 2025 by rpki-client