$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa File: 9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa (raw, json) Hash identifier: Xz/2uGHLc1sptWEtqfFIAo9/sJeaWmWk/DB2s+3/Uik= Subject key identifier: 7F:9F:18:D4:0A:96:9D:60:25:73:1A:B6:D5:D3:B4:A6:C8:24:E1:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE863620734F98E2F1C853F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa Signing time: Tue 19 Aug 2025 11:28:33 +0000 ROA not before: Tue 19 Aug 2025 11:28:33 +0000 ROA not after: Mon 17 Nov 2025 12:28:33 +0000 asID: 31898 IP address blocks: 157.137.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:62:07:34:f9:8e:2f:1c:85:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:28:33 2025 GMT Not After : Nov 17 12:28:33 2025 GMT Subject: CN=fc4f6988-89e8-46e8-a2b2-345477f0aec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:64:46:d3:1d:04:25:43:e2:02:6b:c0:48: 9d:12:1f:f1:8e:e7:84:91:98:4e:35:01:8d:6c:90: 92:a4:dd:4a:36:4f:fe:ac:ef:0e:fa:88:41:22:f8: b7:f2:ad:49:d3:71:b2:20:22:0c:f5:e4:07:2b:7a: 9f:ba:e0:0b:7f:0e:21:e3:cc:62:df:1d:bd:f1:90: f5:7a:3b:a2:dc:4f:b1:64:7d:1a:5f:7d:2d:d8:45: e4:d2:81:d9:2d:a3:8b:e5:9a:ab:6d:a2:bb:e0:7e: d7:7c:0b:9e:aa:45:a7:31:18:d6:bb:6e:61:c9:8f: fc:10:b3:ab:40:a9:e4:11:43:c7:56:1a:28:56:0f: 03:0c:e3:25:34:64:84:45:f4:89:0d:12:c6:af:40: 2a:cb:65:f7:76:68:fc:43:df:22:82:d9:b3:b6:85: 05:1f:47:1b:13:a7:90:38:14:18:90:c5:ae:aa:07: 97:26:9c:96:5e:c8:fe:68:45:13:54:57:ab:c7:7b: 78:94:a3:22:9f:5d:96:fe:8a:6c:e7:f9:2f:5a:21: 8b:5c:48:5f:5a:0c:e8:ef:2c:d7:b6:7f:79:81:3f: 96:b2:21:88:bb:90:b4:b1:ac:ee:5d:ce:d5:27:3d: 7a:ca:8a:d5:f1:25:f6:7c:46:64:83:2c:c2:f1:de: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9F:18:D4:0A:96:9D:60:25:73:1A:B6:D5:D3:B4:A6:C8:24:E1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:36:c2:03:b4:95:4c:fc:d5:88:01:9a:e6:37:29:5e:2f:82: 2a:ef:b7:7e:fa:39:e3:5d:09:6f:60:d1:72:f1:6d:c6:aa:b9: bf:9a:32:9f:13:77:f6:2b:75:9b:e0:eb:21:21:5f:a1:5a:23: ab:ee:b9:c3:7a:33:ca:44:1e:00:ce:72:e0:94:a5:9a:cb:b1: 7c:95:13:c3:df:6c:4f:c0:3d:9f:29:56:64:d3:2a:93:61:40: 72:a2:6b:65:58:55:de:c4:36:24:c0:d7:eb:62:8d:fc:dc:e2: ca:32:c9:d7:e0:05:87:94:de:8e:9a:f1:c7:53:a0:33:6f:ca: 4a:23:17:e6:d4:f9:83:a1:c4:4f:36:9a:ae:a7:25:8d:36:a5: b4:48:30:5f:c6:89:93:82:99:97:5f:4a:22:b4:eb:1b:6a:b6: 3c:3b:68:6f:15:95:d1:65:32:2c:2e:e1:cf:fe:be:bd:50:d0: 60:c3:46:76:3d:73:c2:ee:c5:43:aa:a6:90:2c:e9:b5:3c:df: 35:21:de:2a:4b:06:15:ed:16:ad:64:5f:53:44:b9:1b:f4:cd: 26:61:19:26:d9:8b:30:32:bc:41:19:8c:c6:97:89:6a:b2:24: 45:f8:16:68:df:92:ea:06:d9:70:f8:32:d6:d6:07:c8:33:2e: 87:ec:f0:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY2IHNPmOLxyFPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjgzM1oXDTI1MTExNzEyMjgzM1owLzEtMCsGA1UEAxMk ZmM0ZjY5ODgtODllOC00NmU4LWEyYjItMzQ1NDc3ZjBhZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9kRtMdBCVD4gJrwEidEh/xjueEkZhONQGN bJCSpN1KNk/+rO8O+ohBIvi38q1J03GyICIM9eQHK3qfuuALfw4h48xi3x298ZD1 ejui3E+xZH0aX30t2EXk0oHZLaOL5ZqrbaK74H7XfAueqkWnMRjWu25hyY/8ELOr QKnkEUPHVhooVg8DDOMlNGSERfSJDRLGr0Aqy2X3dmj8Q98igtmztoUFH0cbE6eQ OBQYkMWuqgeXJpyWXsj+aEUTVFerx3t4lKMin12W/ops5/kvWiGLXEhfWgzo7yzX tn95gT+WsiGIu5C0sazuXc7VJz16yorV8SX2fEZkgyzC8d53QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+fGNQKlp1gJXMattXTtKbIJOGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQ0ZDgxYWQtNzQxNi0z OTEyLWJlOWItNGIwY2QyZDFlNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYn+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo2wgO0lUz81YgBmuY3KV4vgirvt376OeNdCW9g0XLxbcaqub+aMp8T d/YrdZvg6yEhX6FaI6vuucN6M8pEHgDOcuCUpZrLsXyVE8PfbE/APZ8pVmTTKpNh QHKia2VYVd7ENiTA1+tijfzc4soyydfgBYeU3o6a8cdToDNvykojF+bU+YOhxE82 mq6nJY02pbRIMF/GiZOCmZdfSiK06xtqtjw7aG8VldFlMiwu4c/+vr1Q0GDDRnY9 c8LuxUOqppAs6bU83zUh3ipLBhXtFq1kX1NEuRv0zSZhGSbZizAyvEEZjMaXiWqy JEX4FmjfkuoG2XD4MtbWB8gzLofs8GU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:45 2025 by rpki-client