$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa File: 87d7fdf1-6104-31af-b7e7-145ec462444b.roa (raw, json) Hash identifier: wR2IVFB/3jFHL8GRbkvxfiFKZNV4HjO5AZnj80dnhYk= Subject key identifier: 6C:BF:66:7F:68:87:AC:A7:C7:6D:2B:34:9B:72:B4:D8:4A:26:8B:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE86382BE1B04FD2401DC9380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa Signing time: Tue 19 Aug 2025 11:28:48 +0000 ROA not before: Tue 19 Aug 2025 11:28:48 +0000 ROA not after: Mon 17 Nov 2025 12:28:48 +0000 asID: 31898 IP address blocks: 158.247.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:82:be:1b:04:fd:24:01:dc:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:28:48 2025 GMT Not After : Nov 17 12:28:48 2025 GMT Subject: CN=38c956b0-ddaa-4308-a536-3bb5c96b03e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:61:8e:f2:77:54:ad:86:51:8e:bc:b3:bb: 3e:8c:39:4c:16:fa:cc:e3:fe:87:b1:18:96:d1:5f: 07:1a:96:dd:5d:27:68:87:9f:f2:ed:5b:dc:7a:cc: 82:1f:63:48:4b:5b:a2:11:fe:ac:3f:fd:4c:16:c8: 6c:1f:d1:b7:37:be:52:20:31:1a:2a:f7:e4:2c:33: ff:44:db:33:bb:33:e3:3e:ea:73:72:ba:5f:22:2c: 9a:8e:a1:78:99:3d:a2:f1:0e:3a:4c:34:07:03:5a: 70:f0:34:d6:9b:e3:7e:1c:99:21:9a:89:7d:92:8f: f1:df:a8:54:b8:aa:a8:53:41:ed:e4:ec:29:56:2f: 10:29:86:ec:7d:87:99:54:16:a4:68:56:49:dc:3e: 4f:3a:be:2b:d9:78:d7:03:7b:31:ab:72:56:f9:d5: 24:8b:7a:f9:78:c0:45:2d:76:43:32:7c:36:6b:11: dd:74:16:76:c0:0a:0f:a4:ee:0f:6d:15:cc:a5:bb: ff:4d:58:f1:ae:33:d1:52:2d:46:c4:42:fb:61:5c: af:4f:f8:fb:f7:3e:b1:fd:61:63:4f:f1:d7:fe:8b: 80:90:5f:07:71:60:04:9a:02:1a:66:89:20:9d:f5: 23:53:66:b6:10:89:eb:95:89:c7:9f:6a:ec:21:c9: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BF:66:7F:68:87:AC:A7:C7:6D:2B:34:9B:72:B4:D8:4A:26:8B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8c:f2:c7:6a:0c:b7:92:df:3d:46:77:fe:fc:c4:f1:73:9c: e8:1d:8d:22:b8:cd:b0:16:67:de:03:00:8a:6a:be:87:97:84: 14:84:52:e9:06:e6:a7:4a:16:5e:b4:24:93:dd:34:97:3a:7e: da:29:a5:30:6e:62:ee:5f:e0:91:0c:53:6c:5a:ff:9a:51:19: d8:90:07:9d:22:1e:4d:61:72:ed:38:ef:2f:ab:4b:f0:fe:26: b9:e5:94:a7:e5:f8:f7:59:91:a6:71:04:29:3c:63:1a:83:8a: 80:3e:2b:2c:83:02:e7:4e:fc:62:88:6f:99:b9:7d:06:55:50: 87:91:80:d1:ef:ab:50:79:ac:1d:21:7b:f4:1b:a0:db:69:37: 0a:87:f8:6a:1f:a3:61:f4:4a:8b:66:66:11:1b:a7:40:31:c0: c9:d2:55:d3:e6:b3:ef:55:d2:ca:8b:6b:40:0b:b0:d3:7c:88: 18:9f:fc:62:87:26:1f:9c:e6:ff:67:67:28:81:46:b5:fc:81: b9:6e:cd:cd:0d:bc:6c:3e:b9:42:26:4b:8c:62:47:59:e3:8b: aa:af:b6:b6:5a:fb:88:b5:b9:bd:0d:9e:63:75:84:9a:a8:cd: 23:ee:9c:55:94:e3:d1:32:76:c6:25:52:44:9e:00:20:43:aa: 7b:0b:e0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY4K+GwT9JAHck4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjg0OFoXDTI1MTExNzEyMjg0OFowLzEtMCsGA1UEAxMk MzhjOTU2YjAtZGRhYS00MzA4LWE1MzYtM2JiNWM5NmIwM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqphjvJ3VK2GUY68s7s+jDlMFvrM4/6HsRiW 0V8HGpbdXSdoh5/y7VvcesyCH2NIS1uiEf6sP/1MFshsH9G3N75SIDEaKvfkLDP/ RNszuzPjPupzcrpfIiyajqF4mT2i8Q46TDQHA1pw8DTWm+N+HJkhmol9ko/x36hU uKqoU0Ht5OwpVi8QKYbsfYeZVBakaFZJ3D5POr4r2XjXA3sxq3JW+dUki3r5eMBF LXZDMnw2axHddBZ2wAoPpO4PbRXMpbv/TVjxrjPRUi1GxEL7YVyvT/j79z6x/WFj T/HX/ouAkF8HcWAEmgIaZokgnfUjU2a2EInrlYnHn2rsIclw/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy/Zn9oh6ynx20rNJtytNhKJoubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdkN2ZkZjEtNjEwNC0z MWFmLWI3ZTctMTQ1ZWM0NjI0NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyM8sdqDLeS3z1Gd/78xPFznOgdjSK4zbAWZ94DAIpqvoeXhBSEUukG 5qdKFl60JJPdNJc6ftoppTBuYu5f4JEMU2xa/5pRGdiQB50iHk1hcu047y+rS/D+ JrnllKfl+PdZkaZxBCk8YxqDioA+KyyDAudO/GKIb5m5fQZVUIeRgNHvq1B5rB0h e/QboNtpNwqH+Gofo2H0SotmZhEbp0AxwMnSVdPms+9V0sqLa0ALsNN8iBif/GKH Jh+c5v9nZyiBRrX8gbluzc0NvGw+uUImS4xiR1nji6qvtrZa+4i1ub0NnmN1hJqo zSPunFWU49EydsYlUkSeACBDqnsL4Jw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:10 2025 by rpki-client