$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3af031e-8fa2-31b5-a0a6-2deac9aa3a20.roa File: a3af031e-8fa2-31b5-a0a6-2deac9aa3a20.roa (raw, json) Hash identifier: hxuZWDJ5kIzpcHuLCMqyQIPFL9B5uRGxXmQLwKWuAZk= Subject key identifier: C3:A4:5B:2A:19:DB:CE:46:D6:CC:D4:90:F6:0C:3D:22:36:EF:EC:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B863EBC31098312834900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3af031e-8fa2-31b5-a0a6-2deac9aa3a20.roa Signing time: Tue 19 Aug 2025 17:39:34 +0000 ROA not before: Tue 19 Aug 2025 17:39:34 +0000 ROA not after: Mon 17 Nov 2025 18:39:34 +0000 asID: 31898 IP address blocks: 151.104.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:86:3e:bc:31:09:83:12:83:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:34 2025 GMT Not After : Nov 17 18:39:34 2025 GMT Subject: CN=ba2ff191-d846-4f2f-95d7-393332cf3d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:62:6e:37:26:95:2f:77:bd:25:2a:f6:7e: c2:69:99:06:0f:7f:5e:8a:9f:5d:86:4c:1b:94:87: 18:c0:73:09:92:9a:a3:3f:48:20:6e:ed:b0:a3:a4: 8c:77:38:41:29:8d:60:f6:82:a9:c6:23:ec:3a:01: 75:9f:3c:3b:3a:84:71:95:46:94:f2:fe:ac:a2:d9: 87:af:b7:2a:97:e8:68:77:af:bc:ae:0f:35:20:6b: 17:ea:22:71:bf:2f:94:65:85:4e:a9:59:20:92:71: cc:fb:7a:9e:81:e0:40:26:d0:b9:59:41:fb:a3:16: bc:48:8f:79:97:6d:d5:3d:e2:1f:4c:86:56:2c:b9: 04:7f:79:8a:93:86:f8:2a:4c:a5:48:8e:7f:5b:1e: 56:b4:8d:ab:59:83:8e:ca:6c:06:0b:4f:e5:13:3c: fd:5c:ad:79:af:f6:8f:37:5a:24:7d:44:06:db:47: b5:87:12:58:7c:c7:9f:71:83:25:63:9b:99:c1:12: eb:f9:20:d4:7e:bd:10:74:ac:ff:e7:5e:15:84:a3: 70:4c:8f:69:8e:f6:31:e7:24:e6:91:cf:8e:f8:4e: 34:eb:ed:7f:8f:1e:25:16:72:77:9c:db:7c:d8:1b: 83:66:0c:67:8e:fe:98:22:97:eb:a1:2d:3a:e1:9f: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:5B:2A:19:DB:CE:46:D6:CC:D4:90:F6:0C:3D:22:36:EF:EC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3af031e-8fa2-31b5-a0a6-2deac9aa3a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:92:28:f1:44:ea:da:a4:1b:67:0a:9b:c3:d8:e8:16:7d:70: 78:a7:71:d8:75:f8:1e:ec:12:5e:9a:b0:26:3a:30:21:44:0e: a9:e8:90:5a:22:9d:70:4b:e4:07:88:93:ed:77:23:bf:43:51: ab:d3:05:c7:f0:ac:8a:aa:7a:78:01:5c:76:65:c8:c1:3f:92: 22:dd:ba:af:4a:b0:97:9e:b1:e6:1b:23:d2:41:7a:30:cd:90: 9c:61:e2:b9:38:4f:f9:b3:9d:1f:e5:4b:5c:29:c6:49:8c:d2: 42:c2:d4:b7:52:c1:d0:56:32:38:19:bb:ca:79:aa:5c:31:93: 5b:5c:51:b1:57:26:4f:f4:db:22:4e:b6:39:e1:5e:22:d2:b8: 3f:9f:f1:58:29:8c:d1:34:b4:a9:d3:48:5a:eb:fe:1f:63:d5: da:a8:d6:f4:64:03:d0:af:ec:1c:86:9e:a2:20:c1:a9:ec:8d: f5:cd:7a:dd:c8:c5:67:a8:f6:8d:94:32:ed:d7:82:12:5d:d6: 31:c1:18:b4:80:1f:66:6d:89:20:82:f9:56:0b:cb:66:ad:5f: c2:8b:69:7a:d5:42:66:52:c7:ed:5c:7d:87:7c:fa:4d:91:ea: 47:56:ef:98:65:18:c1:cb:d2:41:5c:49:9c:8f:63:7b:df:9a: 33:0b:94:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG4Y+vDEJgxKDSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkzNFoXDTI1MTExNzE4MzkzNFowLzEtMCsGA1UEAxMk YmEyZmYxOTEtZDg0Ni00ZjJmLTk1ZDctMzkzMzMyY2YzZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDhibjcmlS93vSUq9n7CaZkGD39eip9dhkwb lIcYwHMJkpqjP0ggbu2wo6SMdzhBKY1g9oKpxiPsOgF1nzw7OoRxlUaU8v6sotmH r7cql+hod6+8rg81IGsX6iJxvy+UZYVOqVkgknHM+3qegeBAJtC5WUH7oxa8SI95 l23VPeIfTIZWLLkEf3mKk4b4KkylSI5/Wx5WtI2rWYOOymwGC0/lEzz9XK15r/aP N1okfUQG20e1hxJYfMefcYMlY5uZwRLr+SDUfr0QdKz/514VhKNwTI9pjvYx5yTm kc+O+E406+1/jx4lFnJ3nNt82BuDZgxnjv6YIpfroS064Z9kJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOkWyoZ285G1szUkPYMPSI27+zBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTNhZjAzMWUtOGZhMi0z MWI1LWEwYTYtMmRlYWM5YWEzYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl2hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+SKPFE6tqkG2cKm8PY6BZ9cHincdh1+B7sEl6asCY6MCFEDqnokFoi nXBL5AeIk+13I79DUavTBcfwrIqqengBXHZlyME/kiLduq9KsJeeseYbI9JBejDN kJxh4rk4T/mznR/lS1wpxkmM0kLC1LdSwdBWMjgZu8p5qlwxk1tcUbFXJk/02yJO tjnhXiLSuD+f8VgpjNE0tKnTSFrr/h9j1dqo1vRkA9Cv7ByGnqIgwansjfXNet3I xWeo9o2UMu3XghJd1jHBGLSAH2ZtiSCC+VYLy2atX8KLaXrVQmZSx+1cfYd8+k2R 6kdW75hlGMHL0kFcSZyPY3vfmjMLlOc= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:46 2025 by rpki-client