$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa File: fbb63f68-4f41-3f80-9da5-3d10066be957.roa (raw, json) Hash identifier: rYWGnSt5BUmB0em+Ie9qsYtantxziRm5T+4+reOh0N0= Subject key identifier: 05:0A:2B:84:90:F0:4C:47:CD:4B:B2:A0:32:9E:98:0A:EC:37:1F:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE5981C632AB97F316D66780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa Signing time: Fri 15 Aug 2025 21:10:34 +0000 ROA not before: Fri 15 Aug 2025 21:10:34 +0000 ROA not after: Thu 13 Nov 2025 22:10:34 +0000 asID: 31898 IP address blocks: 152.67.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:81:c6:32:ab:97:f3:16:d6:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:34 2025 GMT Not After : Nov 13 22:10:34 2025 GMT Subject: CN=56e30f56-83e6-4ac5-abf6-57cdf7495ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:e3:d6:d6:75:82:8b:e1:10:21:fa:c0:21: f1:39:56:2b:55:9a:0a:7d:a3:07:dc:0f:02:45:44: de:ad:e7:2a:50:a8:ac:06:63:5b:61:a8:1e:ee:3a: dc:a8:07:0f:12:9b:c4:0e:77:5d:ee:0f:3f:f7:d2: b7:ec:e8:5c:ac:06:4c:0f:97:fc:85:f5:c1:56:ce: 65:68:b1:bf:1d:bb:0b:79:66:d4:56:50:7a:21:e3: c5:a5:27:da:7e:72:af:20:9a:2d:fc:cc:3a:ee:0f: 84:71:6b:21:4c:25:b8:c2:53:f4:16:4a:aa:91:4f: 48:2f:01:55:bd:5c:90:a9:39:9a:90:77:80:01:59: a3:b9:e9:ea:a8:33:23:50:ed:f7:b4:ca:38:33:9b: 7a:c7:75:e5:74:7c:75:37:b4:21:7d:2a:65:c8:a1: 2e:1d:3d:22:66:f7:03:c7:94:dd:69:6d:17:80:99: 80:dc:76:37:d1:57:38:44:70:4e:4c:69:6a:a4:0f: 7c:46:30:d0:ae:0c:57:60:38:ba:e7:a7:24:fb:d0: 44:df:d9:f7:b9:09:5d:ad:3c:6e:68:45:22:b8:dd: 9b:0d:cc:3b:92:b6:66:06:04:76:71:4a:c8:c7:14: 0a:8e:dc:b1:78:7a:72:a2:2b:70:12:ee:f6:40:e9: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0A:2B:84:90:F0:4C:47:CD:4B:B2:A0:32:9E:98:0A:EC:37:1F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fbb63f68-4f41-3f80-9da5-3d10066be957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a0:54:98:77:35:88:69:00:70:a5:98:4d:ba:68:18:ef:c4: a6:31:70:7b:90:4b:d3:6f:67:5b:6f:5b:8b:47:8e:65:ae:66: fc:e1:e7:73:34:a6:86:4b:31:61:b1:49:0e:72:1e:64:c6:08: 45:7c:38:19:02:13:85:53:2d:0c:b6:b1:d2:c1:e5:2b:96:b3: bc:e4:d0:47:7a:af:b2:a3:ba:f7:81:ec:cc:88:07:a8:43:d3: ee:6d:8e:81:1d:9d:78:cc:0f:03:07:0e:26:fb:35:02:dc:90: c4:97:cc:f6:32:61:12:8e:45:46:4e:30:98:c2:8d:90:bd:cc: 2c:2b:cb:b9:a2:38:e2:ac:21:73:36:60:7d:ac:cb:54:b6:81: 1b:09:4a:a8:a0:7e:09:9c:60:3a:6a:69:1c:ea:ee:9c:19:17: dd:14:ea:71:bb:9f:74:86:dc:39:6e:82:d7:c3:84:5b:e2:f3: d2:78:7a:24:e5:92:aa:2a:68:5a:c3:69:9c:bd:d4:92:36:03: b8:06:3f:6e:c1:5d:5a:3c:08:49:23:69:cf:dc:ea:ef:2b:7b: 76:ed:3c:db:10:da:25:ff:07:93:6c:87:82:a9:88:47:ba:e7: b4:d4:9b:31:aa:08:a7:af:88:46:fc:93:3e:5d:b6:4d:b2:56: 9e:d9:09:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWYHGMquX8xbWZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAzNFoXDTI1MTExMzIyMTAzNFowLzEtMCsGA1UEAxMk NTZlMzBmNTYtODNlNi00YWM1LWFiZjYtNTdjZGY3NDk1YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk/j1tZ1govhECH6wCHxOVYrVZoKfaMH3A8C RUTerecqUKisBmNbYage7jrcqAcPEpvEDndd7g8/99K37OhcrAZMD5f8hfXBVs5l aLG/HbsLeWbUVlB6IePFpSfafnKvIJot/Mw67g+EcWshTCW4wlP0FkqqkU9ILwFV vVyQqTmakHeAAVmjuenqqDMjUO33tMo4M5t6x3XldHx1N7QhfSplyKEuHT0iZvcD x5TdaW0XgJmA3HY30Vc4RHBOTGlqpA98RjDQrgxXYDi656ck+9BE39n3uQldrTxu aEUiuN2bDcw7krZmBgR2cUrIxxQKjtyxeHpyoitwEu72QOlr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUKK4SQ8ExHzUuyoDKemArsNx/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmJiNjNmNjgtNGY0MS0z ZjgwLTlkYTUtM2QxMDA2NmJlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKegVJh3NYhpAHClmE26aBjvxKYxcHuQS9NvZ1tvW4tHjmWuZvzh53M0 poZLMWGxSQ5yHmTGCEV8OBkCE4VTLQy2sdLB5SuWs7zk0Ed6r7KjuveB7MyIB6hD 0+5tjoEdnXjMDwMHDib7NQLckMSXzPYyYRKORUZOMJjCjZC9zCwry7miOOKsIXM2 YH2sy1S2gRsJSqigfgmcYDpqaRzq7pwZF90U6nG7n3SG3DlugtfDhFvi89J4eiTl kqoqaFrDaZy91JI2A7gGP27BXVo8CEkjac/c6u8re3btPNsQ2iX/B5Nsh4KpiEe6 57TUmzGqCKeviEb8kz5dtk2yVp7ZCd8= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:43 2025 by rpki-client