$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa File: c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa (raw, json) Hash identifier: aJLrLrlPWevkX1D78lWu5E89fsZkVNBZOChCjabrpeI= Subject key identifier: A1:0B:69:B8:91:34:66:E9:A5:4B:4D:A4:04:94:6D:58:97:01:B7:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD612CEA107367B2059A0400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa Signing time: Sat 09 Aug 2025 19:17:16 +0000 ROA not before: Sat 09 Aug 2025 19:17:16 +0000 ROA not after: Fri 07 Nov 2025 20:17:16 +0000 asID: 31898 IP address blocks: 150.136.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:2c:ea:10:73:67:b2:05:9a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:16 2025 GMT Not After : Nov 7 20:17:16 2025 GMT Subject: CN=43564fa7-af2b-482c-b308-40f3d4a3c1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:bf:d7:de:c1:f5:e0:31:62:6a:7d:16:03: b7:b3:47:c9:25:46:a5:20:cf:17:17:96:d7:82:34: 21:d2:df:74:33:14:c2:26:3f:46:09:65:5e:8c:bc: 9a:bd:40:a3:5a:9a:c8:e4:cb:6a:b1:05:bc:5c:b2: fa:64:88:95:e7:71:9f:12:8e:20:17:ef:9e:06:4d: 47:69:be:35:6b:4d:5b:76:4c:78:aa:c4:99:d8:58: 04:a8:04:a3:3f:64:91:ba:29:b5:21:0b:5f:4a:eb: 94:87:02:aa:3a:b9:9d:7b:47:f6:c4:1c:1f:0e:d3: cf:c7:d6:19:80:eb:40:d9:17:ab:24:cf:65:fc:8d: 9c:d0:8f:2b:27:c9:fb:03:b6:41:08:68:71:39:33: 6b:38:8f:47:6a:55:19:3d:21:61:a2:fd:56:2d:ec: a1:ea:0e:76:dd:d7:c0:54:98:79:43:b4:7d:d0:09: 28:af:05:e3:3b:ef:80:6a:59:2b:b6:06:9a:24:37: ae:bd:28:24:63:f0:ab:8e:6c:9e:fb:27:a9:cb:6e: c5:ca:03:c3:31:13:ca:09:29:53:5b:ae:87:dd:8a: a4:02:9c:50:d8:45:30:10:a9:2c:81:05:dd:82:90: 96:e9:c9:7b:b6:e2:66:16:53:58:0e:8c:0c:02:e4: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:69:B8:91:34:66:E9:A5:4B:4D:A4:04:94:6D:58:97:01:B7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3dcf896-7b30-3585-ae02-81a5da6b3d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 150.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:14:e3:c4:9c:51:9c:44:1c:08:cc:4d:e4:9e:3c:c0:90:1d: 37:fd:95:e1:22:de:56:4d:2d:dc:e0:a4:dc:1b:d8:6a:0d:b1: 54:e0:ea:bd:de:d7:70:9c:04:c3:d2:20:ca:e7:f5:4c:4d:40: 36:4e:80:45:c6:ca:f8:59:0c:e1:eb:73:a4:7a:09:7e:f6:52: 5b:14:a1:8c:38:f7:1e:ee:e4:d3:47:a5:2c:46:df:71:ff:4f: 55:84:f9:8c:a8:94:b9:01:de:c2:ff:b6:90:5d:10:39:7e:4a: b4:55:17:be:e3:36:a4:b1:db:f3:ed:b2:fe:54:4b:f3:b0:8a: 71:57:ac:6c:b6:86:8c:0d:6b:19:c9:b2:fc:7b:2b:86:16:a9: 68:9d:33:ae:98:b9:5a:e7:c0:5a:88:df:f5:f5:c7:b2:67:05: e2:32:8b:28:87:87:48:2c:5f:77:93:e0:13:d2:03:ae:11:34: 59:3b:cc:0c:0f:37:30:79:68:e4:fc:16:5c:36:f7:ad:36:d4: 98:95:8a:17:cf:78:ac:73:1b:a7:00:87:04:06:92:58:ce:93: 60:f9:3d:42:2c:47:55:86:64:d1:ec:ad:df:bf:fe:18:36:a1: e8:86:a0:e2:8d:d7:a6:7b:49:70:f2:dc:32:14:e1:b1:21:30: 6b:e6:c2:d7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErNYSzqEHNnsgWaBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcxNloXDTI1MTEwNzIwMTcxNlowLzEtMCsGA1UEAxMk NDM1NjRmYTctYWYyYi00ODJjLWIzMDgtNDBmM2Q0YTNjMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUa/197B9eAxYmp9FgO3s0fJJUalIM8XF5bX gjQh0t90MxTCJj9GCWVejLyavUCjWprI5MtqsQW8XLL6ZIiV53GfEo4gF++eBk1H ab41a01bdkx4qsSZ2FgEqASjP2SRuim1IQtfSuuUhwKqOrmde0f2xBwfDtPPx9YZ gOtA2RerJM9l/I2c0I8rJ8n7A7ZBCGhxOTNrOI9HalUZPSFhov1WLeyh6g523dfA VJh5Q7R90AkorwXjO++AalkrtgaaJDeuvSgkY/Crjmye+yepy27FygPDMRPKCSlT W66H3YqkApxQ2EUwEKksgQXdgpCW6cl7tuJmFlNYDowMAuSADwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKELabiRNGbppUtNpASUbViXAbdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNkY2Y4OTYtN2IzMC0z NTg1LWFlMDItODFhNWRhNmIzZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlogwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVhTjxJxRnEQcCMxN5J48wJAdN/2V4SLeVk0t3OCk3BvYag2xVODqvd7X cJwEw9Igyuf1TE1ANk6ARcbK+FkM4etzpHoJfvZSWxShjDj3Hu7k00elLEbfcf9P VYT5jKiUuQHewv+2kF0QOX5KtFUXvuM2pLHb8+2y/lRL87CKcVesbLaGjA1rGcmy /HsrhhapaJ0zrpi5WufAWojf9fXHsmcF4jKLKIeHSCxfd5PgE9IDrhE0WTvMDA83 MHlo5PwWXDb3rTbUmJWKF894rHMbpwCHBAaSWM6TYPk9QixHVYZk0eyt37/+GDah 6Iag4o3XpntJcPLcMhThsSEwa+bC1w== -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:19 2025 by rpki-client