$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa File: c893b725-ffce-34d7-87b0-7dbaad2f039c.roa (raw, json) Hash identifier: TtPFtvP4RB7ROlkbcDpBflAFue7u3NwrcRkX33zdtyA= Subject key identifier: 17:2B:AE:02:00:38:E4:DB:8B:8F:7C:D4:DF:D0:F5:4A:41:E4:7F:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B93CE4FB2F4DADD92D600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa Signing time: Tue 19 Aug 2025 17:39:40 +0000 ROA not before: Tue 19 Aug 2025 17:39:40 +0000 ROA not after: Mon 17 Nov 2025 18:39:40 +0000 asID: 31898 IP address blocks: 161.33.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:93:ce:4f:b2:f4:da:dd:92:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:40 2025 GMT Not After : Nov 17 18:39:40 2025 GMT Subject: CN=8b6c6434-fa8f-4cb0-b253-11e1404addc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:a6:78:08:a1:f3:87:90:4d:1d:d4:ce:87: 3d:ab:d0:bf:fd:e9:db:10:14:be:e6:7a:60:b6:3f: 42:78:45:67:70:02:8d:b3:f8:ec:ad:7f:15:bc:66: 25:bf:c4:76:76:b4:e9:1e:fb:c4:dc:f7:32:3c:00: 87:9a:aa:fa:11:1f:ef:4a:1c:45:07:07:7e:32:d0: 35:bf:50:b3:0b:fe:9e:67:8e:6e:7c:a9:c2:27:43: e4:71:68:bc:02:72:2f:11:4a:07:f0:e1:f5:0d:8f: d7:e9:94:22:e6:59:a3:5f:83:8d:f3:68:b0:e9:cc: 6c:e5:ce:d8:51:1c:3b:f1:92:b0:e2:83:3f:7f:72: 8f:2e:d4:f8:8f:01:22:4c:c8:47:f1:26:73:64:4a: f5:46:ff:23:46:89:84:1a:20:34:37:aa:7c:53:b6: 1a:27:51:73:e6:b1:ea:77:7e:e1:55:68:dc:ae:3b: c2:9e:c8:d4:a7:97:99:56:a7:78:a7:55:74:93:6e: 75:e0:1f:65:c8:27:27:8a:f8:fe:f4:aa:40:5f:18: c0:88:7c:61:7a:1e:37:6d:8b:f6:1c:6f:a1:67:77: ea:75:67:ed:a2:28:45:a1:21:f8:3f:c2:ba:33:49: 0d:06:fd:51:b2:75:24:60:62:cf:34:ec:f0:f9:3b: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:AE:02:00:38:E4:DB:8B:8F:7C:D4:DF:D0:F5:4A:41:E4:7F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:88:f2:47:d5:4a:08:85:13:fd:64:d0:b0:d1:5c:d5:58:57: 6a:14:af:59:9d:0c:1c:fb:e4:21:e4:ce:56:51:0e:fa:58:d0: 1b:95:56:b3:b3:08:b2:f8:01:51:3d:00:fa:cf:1a:b7:d6:f3: b4:c7:27:da:fd:4d:b2:b0:42:b0:06:20:4e:1d:19:ee:4e:85: 8f:39:e7:96:d0:87:d3:3b:14:b5:ae:96:4c:6b:bd:6a:35:78: e2:58:ce:22:e8:53:10:71:4b:63:6b:d1:83:6b:bf:46:33:c8: 4d:8a:c9:0a:d7:9e:fe:a0:7b:ee:6e:a1:1e:40:59:00:17:3a: 81:9a:53:27:1d:dc:b9:95:91:6e:6d:e7:4c:06:1b:94:55:33: 13:4e:72:7b:c1:39:18:95:ca:a8:98:f1:65:09:7c:02:5d:1f: b1:da:c9:9b:ad:e1:dd:f6:53:83:a2:7d:39:f3:33:5a:b5:5c: 71:e4:6c:0b:28:ca:c1:0f:a4:f0:18:ac:b7:8a:41:68:c4:94: c7:8f:b9:1c:c2:b7:e0:9c:dd:34:f1:d6:32:37:0a:b8:b4:60: fc:73:4c:89:56:c4:24:0d:b0:33:73:f2:4a:5f:55:5c:f9:d9: c7:7a:e0:f8:cd:fd:f8:62:2d:da:79:d9:05:ec:c9:b6:4a:38: c2:5f:f3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG5POT7L02t2S1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3Mzk0MFoXDTI1MTExNzE4Mzk0MFowLzEtMCsGA1UEAxMk OGI2YzY0MzQtZmE4Zi00Y2IwLWIyNTMtMTFlMTQwNGFkZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0emeAih84eQTR3Uzoc9q9C//enbEBS+5npg tj9CeEVncAKNs/jsrX8VvGYlv8R2drTpHvvE3PcyPACHmqr6ER/vShxFBwd+MtA1 v1CzC/6eZ45ufKnCJ0PkcWi8AnIvEUoH8OH1DY/X6ZQi5lmjX4ON82iw6cxs5c7Y URw78ZKw4oM/f3KPLtT4jwEiTMhH8SZzZEr1Rv8jRomEGiA0N6p8U7YaJ1Fz5rHq d37hVWjcrjvCnsjUp5eZVqd4p1V0k2514B9lyCcnivj+9KpAXxjAiHxheh43bYv2 HG+hZ3fqdWftoihFoSH4P8K6M0kNBv1RsnUkYGLPNOzw+TuMsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcrrgIAOOTbi4981N/Q9UpB5H+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzg5M2I3MjUtZmZjZS0z NGQ3LTg3YjAtN2RiYWFkMmYwMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiI8kfVSgiFE/1k0LDRXNVYV2oUr1mdDBz75CHkzlZRDvpY0BuVVrOz CLL4AVE9APrPGrfW87THJ9r9TbKwQrAGIE4dGe5OhY8555bQh9M7FLWulkxrvWo1 eOJYziLoUxBxS2Nr0YNrv0YzyE2KyQrXnv6ge+5uoR5AWQAXOoGaUycd3LmVkW5t 50wGG5RVMxNOcnvBORiVyqiY8WUJfAJdH7HayZut4d32U4OifTnzM1q1XHHkbAso ysEPpPAYrLeKQWjElMePuRzCt+Cc3TTx1jI3Cri0YPxzTIlWxCQNsDNz8kpfVVz5 2cd64PjN/fhiLdp52QXsybZKOMJf86s= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:57 2025 by rpki-client