$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3230ac-98bd-3952-b53a-2b013b5f2169.roa File: ae3230ac-98bd-3952-b53a-2b013b5f2169.roa (raw, json) Hash identifier: Jbuz4BJgoee0SjdA3MqPOBZt5cWj64rKokHvmxSCqJA= Subject key identifier: 93:D1:9F:99:B4:68:02:A7:08:9A:86:09:3F:66:B7:FA:46:6C:C7:E4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91CB20D65EFAEA50B0F2900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3230ac-98bd-3952-b53a-2b013b5f2169.roa Signing time: Tue 19 Aug 2025 17:41:56 +0000 ROA not before: Tue 19 Aug 2025 17:41:56 +0000 ROA not after: Mon 17 Nov 2025 18:41:56 +0000 asID: 31898 IP address blocks: 161.33.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:b2:0d:65:ef:ae:a5:0b:0f:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:56 2025 GMT Not After : Nov 17 18:41:56 2025 GMT Subject: CN=2d0ef5a2-a4c0-4294-b4f1-baf8c5b18f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:9f:4e:34:76:28:22:d9:82:28:01:92:06: 6d:40:64:0e:cb:f2:3a:f0:bc:12:11:3f:20:f5:29: ad:05:5a:83:60:ad:98:ee:39:24:50:75:be:7c:e5: 61:aa:95:20:9f:67:c3:65:a9:1b:a6:23:22:a2:6b: 92:51:45:3b:22:98:7d:2e:79:19:ab:63:91:34:69: c3:84:9e:9f:3b:f9:81:d7:d9:6a:54:49:df:18:47: 2d:71:2d:b7:1b:2b:12:d0:44:14:ad:18:86:ce:0d: 9b:fc:06:9e:f0:1a:b0:76:4f:06:47:eb:e9:82:48: 16:f4:47:57:b5:45:8e:68:34:64:93:43:db:9b:fe: 13:cd:b8:da:82:e6:60:6b:b0:c0:b0:f5:54:78:c7: 8e:f5:f4:52:56:a4:8c:b0:a5:b0:83:a7:b6:8b:8f: 6f:db:32:36:9c:7b:9c:ff:8c:9f:ea:b0:e8:44:eb: 40:9a:6e:2a:53:b3:1d:db:81:16:75:8a:c4:37:72: 6a:4a:e4:70:6a:8a:52:e0:74:5f:8f:08:34:1f:72: 4b:2d:8c:91:61:56:4f:c1:45:cc:0f:ee:9a:68:74: 76:6f:ef:26:0f:b8:39:d5:c1:b5:b6:28:49:c6:a3: 05:ec:3e:fd:0b:03:e6:c8:d8:01:79:75:ac:7d:39: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D1:9F:99:B4:68:02:A7:08:9A:86:09:3F:66:B7:FA:46:6C:C7:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3230ac-98bd-3952-b53a-2b013b5f2169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1a:06:44:ae:54:4a:4a:36:b3:fb:27:11:8b:a4:de:14:00: f0:9b:f7:55:5a:23:51:55:f5:9b:3d:b5:68:7f:c2:8c:ec:69: f4:98:c3:48:e6:15:b2:51:6b:a8:35:da:62:dd:87:99:44:3e: c1:3d:77:a1:06:1e:c3:39:4a:11:93:28:76:36:a0:63:f0:0c: 40:72:6a:01:4b:62:13:67:0a:5c:07:f8:74:36:3e:ae:9d:65: 8c:a6:eb:18:dd:cb:97:df:3d:7d:74:b3:dc:17:64:a8:21:8d: 16:6d:89:9a:37:b9:3b:16:09:c5:ae:66:39:f2:99:3c:36:b0: d7:01:63:1b:d4:52:17:11:52:af:6d:a9:59:43:af:2e:3c:7d: 47:fe:6a:14:08:d5:10:fc:df:42:e0:f2:60:e9:19:34:1f:b3: aa:85:f9:f0:c0:7f:92:e2:1f:a2:5c:d2:a1:92:79:4f:72:9d: 2b:77:53:ab:67:f9:80:27:b1:bf:b1:8e:bc:cc:5d:25:65:87: 75:f5:59:6d:3f:75:a7:c0:b2:92:6c:27:02:32:33:8d:bf:4f: 39:4a:ba:b0:28:45:15:62:63:61:be:0c:fa:1e:9e:cb:c1:4d: b0:75:85:d5:4b:55:49:a1:61:bf:45:49:3a:20:14:01:17:fd: 68:77:3c:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHLINZe+upQsPKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDE1NloXDTI1MTExNzE4NDE1NlowLzEtMCsGA1UEAxMk MmQwZWY1YTItYTRjMC00Mjk0LWI0ZjEtYmFmOGM1YjE4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuCfTjR2KCLZgigBkgZtQGQOy/I68LwSET8g 9SmtBVqDYK2Y7jkkUHW+fOVhqpUgn2fDZakbpiMiomuSUUU7Iph9LnkZq2ORNGnD hJ6fO/mB19lqVEnfGEctcS23GysS0EQUrRiGzg2b/Aae8Bqwdk8GR+vpgkgW9EdX tUWOaDRkk0Pbm/4TzbjaguZga7DAsPVUeMeO9fRSVqSMsKWwg6e2i49v2zI2nHuc /4yf6rDoROtAmm4qU7Md24EWdYrEN3JqSuRwaopS4HRfjwg0H3JLLYyRYVZPwUXM D+6aaHR2b+8mD7g51cG1tihJxqMF7D79CwPmyNgBeXWsfTmELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPRn5m0aAKnCJqGCT9mt/pGbMfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUzMjMwYWMtOThiZC0z OTUyLWI1M2EtMmIwMTNiNWYyMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsaBkSuVEpKNrP7JxGLpN4UAPCb91VaI1FV9Zs9tWh/wozsafSYw0jm FbJRa6g12mLdh5lEPsE9d6EGHsM5ShGTKHY2oGPwDEByagFLYhNnClwH+HQ2Pq6d ZYym6xjdy5ffPX10s9wXZKghjRZtiZo3uTsWCcWuZjnymTw2sNcBYxvUUhcRUq9t qVlDry48fUf+ahQI1RD830Lg8mDpGTQfs6qF+fDAf5LiH6Jc0qGSeU9ynSt3U6tn +YAnsb+xjrzMXSVlh3X1WW0/dafAspJsJwIyM42/TzlKurAoRRViY2G+DPoensvB TbB1hdVLVUmhYb9FSTogFAEX/Wh3PD8= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:00 2025 by rpki-client