$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa File: 68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa (raw, json) Hash identifier: aXBiZ9UePplBd65WFEkV9qIa+1XeO/3tQ0kmgs5a8is= Subject key identifier: 84:B6:C5:CC:07:BB:5D:CF:EF:B3:C7:EF:E8:52:35:3B:40:E5:88:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE863517C4FEB2E9448C44100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa Signing time: Tue 19 Aug 2025 11:28:25 +0000 ROA not before: Tue 19 Aug 2025 11:28:25 +0000 ROA not after: Mon 17 Nov 2025 12:28:25 +0000 asID: 31898 IP address blocks: 157.137.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:51:7c:4f:eb:2e:94:48:c4:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:28:25 2025 GMT Not After : Nov 17 12:28:25 2025 GMT Subject: CN=cf607038-0c28-4842-abab-bcfb546fad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:57:ab:22:1b:bf:7f:26:df:bc:7b:6e:32:7a: 4d:7c:18:96:69:a3:e5:30:85:d1:00:1a:3a:21:aa: d4:f6:ba:dd:37:fb:fb:59:6e:4c:1b:cf:0c:5e:15: 61:06:66:2e:f1:9d:64:a1:05:77:36:67:3a:7d:7f: f4:fd:b8:2d:86:c6:a5:ac:8e:e3:d1:2f:4f:e2:50: 98:1f:8e:d1:c6:6e:53:ba:c8:e6:01:f7:a2:2e:88: 29:c7:70:be:d7:a6:1e:99:2d:32:f7:43:72:b8:f6: 10:05:75:07:fc:82:06:0f:e4:11:3c:72:37:30:8a: a7:70:80:e3:73:b8:d0:cf:42:d7:06:82:e7:ad:94: 93:0f:6f:cf:85:9b:4c:07:5f:09:ef:e5:b5:88:d3: 94:fc:52:9b:05:c9:25:77:5c:44:bb:20:f4:0f:11: d3:d6:d7:22:e9:19:1c:aa:7e:2a:77:b2:8b:0a:35: b2:5e:c3:3e:28:f4:84:ee:5a:f0:b4:bc:ab:08:c3: cc:29:b3:70:37:c0:ea:8d:82:f0:49:91:50:b5:93: a8:f2:68:12:50:49:af:e6:ee:9b:8d:88:5d:cb:eb: a7:71:fa:36:02:51:e9:55:b1:ce:01:bb:a4:c6:8b: ad:1b:ae:7d:87:6f:a4:b4:b5:f0:99:cc:4d:85:b6: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:C5:CC:07:BB:5D:CF:EF:B3:C7:EF:E8:52:35:3B:40:E5:88:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:84:9f:9f:5d:73:e3:81:57:9d:9f:0f:a5:29:15:68:7f:12: a0:c8:32:79:11:e8:09:19:4d:ee:4f:6e:56:d9:5b:60:fa:0e: ba:9f:7d:28:63:59:0d:b2:b9:09:30:52:f2:ac:51:36:b5:ad: 1d:bc:4d:15:ce:84:f7:c2:dc:57:df:b9:dd:cb:a5:bc:32:d9: 9b:c6:e6:b0:3a:d0:5a:7f:3f:f6:cb:c7:6b:cc:d5:31:52:9f: ab:83:56:1c:d6:95:79:8f:c9:26:57:2a:6f:cd:59:5f:b6:e0: 6c:a3:e1:c4:97:39:17:55:49:b2:d1:bd:0b:9b:cb:d0:90:6f: fe:9c:a1:f2:61:62:47:9a:e5:9d:e3:4f:08:2d:3c:ec:33:f6: 4c:19:7b:1d:06:43:2c:ff:87:01:f3:b9:32:90:3c:ce:f2:46: 2f:c1:0b:4d:f2:f9:e2:d2:9c:24:70:47:02:30:b8:c4:38:8d: ea:0c:c6:21:6e:81:e7:05:4a:12:93:2f:9d:ef:8c:5e:50:94: bb:e2:96:4a:d2:15:1c:64:34:68:d9:d1:e5:33:8b:4a:fa:5a: de:ea:b8:aa:22:5c:32:91:5b:8a:81:29:27:d4:bd:00:c1:98: f7:33:f7:8d:4f:5f:83:3c:4b:9d:2a:40:3a:ca:dd:6b:21:2f: 60:d3:02:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY1F8T+sulEjEQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjgyNVoXDTI1MTExNzEyMjgyNVowLzEtMCsGA1UEAxMk Y2Y2MDcwMzgtMGMyOC00ODQyLWFiYWItYmNmYjU0NmZhZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lerIhu/fybfvHtuMnpNfBiWaaPlMIXRABo6 IarU9rrdN/v7WW5MG88MXhVhBmYu8Z1koQV3Nmc6fX/0/bgthsalrI7j0S9P4lCY H47Rxm5TusjmAfeiLogpx3C+16YemS0y90NyuPYQBXUH/IIGD+QRPHI3MIqncIDj c7jQz0LXBoLnrZSTD2/PhZtMB18J7+W1iNOU/FKbBckld1xEuyD0DxHT1tci6Rkc qn4qd7KLCjWyXsM+KPSE7lrwtLyrCMPMKbNwN8DqjYLwSZFQtZOo8mgSUEmv5u6b jYhdy+uncfo2AlHpVbHOAbukxoutG659h2+ktLXwmcxNhbbJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS2xcwHu13P77PH7+hSNTtA5YhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjhjNmRkZDAtYTM4YS0z ZWEzLTg1ODItMGFlNGIyYTJlYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnYnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKEn59dc+OBV52fD6UpFWh/EqDIMnkR6AkZTe5PblbZW2D6DrqffShj WQ2yuQkwUvKsUTa1rR28TRXOhPfC3Fffud3Lpbwy2ZvG5rA60Fp/P/bLx2vM1TFS n6uDVhzWlXmPySZXKm/NWV+24Gyj4cSXORdVSbLRvQuby9CQb/6cofJhYkea5Z3j TwgtPOwz9kwZex0GQyz/hwHzuTKQPM7yRi/BC03y+eLSnCRwRwIwuMQ4jeoMxiFu gecFShKTL53vjF5QlLvilkrSFRxkNGjZ0eUzi0r6Wt7quKoiXDKRW4qBKSfUvQDB mPcz941PX4M8S50qQDrK3WshL2DTAl0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:45 2025 by rpki-client