$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa File: 09b5baab-600e-36fb-abec-ad3680ccbc27.roa (raw, json) Hash identifier: aZZ27IP1tKg5dNtjbVkCTprQXwdvaHpaLqV1eVzFdQI= Subject key identifier: 45:1D:31:CD:1F:C6:54:50:57:85:05:64:4F:2A:B4:36:99:1A:34:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA05D8B5C2B4500A7C20BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa Signing time: Thu 21 Aug 2025 17:06:16 +0000 ROA not before: Thu 21 Aug 2025 17:06:16 +0000 ROA not after: Wed 19 Nov 2025 18:06:16 +0000 asID: 31898 IP address blocks: 161.153.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:5d:8b:5c:2b:45:00:a7:c2:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:16 2025 GMT Not After : Nov 19 18:06:16 2025 GMT Subject: CN=6f9cfd65-a1ae-40c3-8541-299273cdeea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:de:a8:80:c4:f0:ab:f3:29:22:dd:ce:14: c7:cb:f0:3e:be:6b:2c:bb:79:20:22:0e:84:45:51: 0e:32:6d:42:54:aa:3f:e3:85:68:17:52:a0:1c:3e: 78:f9:79:0c:ea:43:0d:fe:39:61:19:de:90:26:12: cb:51:7b:ac:5c:86:0f:19:56:9e:35:fb:ce:03:49: e1:c4:10:32:b7:a8:6b:fe:8e:1c:2e:44:7d:95:4a: 37:7d:78:e8:64:ff:32:46:93:47:5c:29:d0:a6:1d: c1:c6:d0:6f:64:22:10:16:dc:a9:34:cd:da:2b:a4: 30:c7:45:a5:48:5a:7e:00:de:06:8a:23:98:33:44: 10:45:8a:f8:72:52:a9:54:02:31:10:9d:8c:0c:b9: 5d:80:2f:da:bd:08:b4:f0:d4:11:81:29:9c:5d:2b: ec:80:19:34:6a:d3:19:55:40:84:af:0a:82:9e:37: 76:0b:49:9c:8b:e3:de:24:da:02:3c:ef:0c:07:64: 85:54:5f:c2:6e:4c:72:91:94:4d:2f:69:7b:e6:61: 2f:55:d6:f8:51:95:10:3c:90:47:88:de:ff:e2:51: 05:19:f9:bb:80:a0:88:2d:16:8d:9b:23:6b:4e:71: 2a:69:d8:78:d0:7c:31:46:18:a1:26:2f:24:7d:67: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:31:CD:1F:C6:54:50:57:85:05:64:4F:2A:B4:36:99:1A:34:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/09b5baab-600e-36fb-abec-ad3680ccbc27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8f:10:82:f0:bf:32:4e:b8:8e:7c:e3:67:4e:8d:52:d4:4f: c9:29:fb:00:4d:07:1d:7f:c7:b9:76:c1:ce:5b:31:19:4f:2d: 9b:5e:56:89:74:be:a3:39:cb:bd:34:fc:39:9e:60:7c:c7:32: 48:00:c0:b4:7c:2b:2f:b0:7b:9b:4c:cb:ce:3b:a8:24:39:fa: 2d:8a:2f:84:99:77:4a:2e:5f:0e:09:42:b5:3c:22:57:bf:cb: 3d:52:2a:40:4c:71:81:44:c1:96:ee:8a:bd:1b:17:c5:f8:90: 05:de:51:8c:4d:2a:cb:bb:54:47:cf:69:0e:42:0b:ab:50:70: 66:9f:c4:7b:fd:0a:08:fd:0a:01:99:5a:69:43:8a:c7:7e:d1: dd:01:24:c6:48:1b:e9:6a:8a:b7:f5:5c:a3:87:c4:69:e6:20: c3:15:2b:cb:14:73:54:ca:8e:90:5e:ef:e8:d1:97:d6:67:1b: 72:31:cc:6d:bc:9b:16:5d:a4:5d:f5:de:02:75:a2:c3:00:c7: 35:94:9a:b9:d3:45:64:b3:ca:97:a2:9c:12:bd:26:15:29:da: dd:a6:70:77:e4:4d:87:ac:17:98:45:90:1d:b3:2e:cd:86:cf: 9d:01:14:60:86:19:42:54:7c:57:bf:6a:27:0a:cd:27:cf:84: c5:b0:8b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoF2LXCtFAKfCC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYxNloXDTI1MTExOTE4MDYxNlowLzEtMCsGA1UEAxMk NmY5Y2ZkNjUtYTFhZS00MGMzLTg1NDEtMjk5MjczY2RlZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAfeqIDE8KvzKSLdzhTHy/A+vmssu3kgIg6E RVEOMm1CVKo/44VoF1KgHD54+XkM6kMN/jlhGd6QJhLLUXusXIYPGVaeNfvOA0nh xBAyt6hr/o4cLkR9lUo3fXjoZP8yRpNHXCnQph3BxtBvZCIQFtypNM3aK6Qwx0Wl SFp+AN4GiiOYM0QQRYr4clKpVAIxEJ2MDLldgC/avQi08NQRgSmcXSvsgBk0atMZ VUCErwqCnjd2C0mci+PeJNoCPO8MB2SFVF/CbkxykZRNL2l75mEvVdb4UZUQPJBH iN7/4lEFGfm7gKCILRaNmyNrTnEqadh40HwxRhihJi8kfWe8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUdMc0fxlRQV4UFZE8qtDaZGjQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDliNWJhYWItNjAwZS0z NmZiLWFiZWMtYWQzNjgwY2NiYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGPEILwvzJOuI5842dOjVLUT8kp+wBNBx1/x7l2wc5bMRlPLZteVol0 vqM5y700/DmeYHzHMkgAwLR8Ky+we5tMy847qCQ5+i2KL4SZd0ouXw4JQrU8Ile/ yz1SKkBMcYFEwZbuir0bF8X4kAXeUYxNKsu7VEfPaQ5CC6tQcGafxHv9Cgj9CgGZ WmlDisd+0d0BJMZIG+lqirf1XKOHxGnmIMMVK8sUc1TKjpBe7+jRl9ZnG3IxzG28 mxZdpF313gJ1osMAxzWUmrnTRWSzypeinBK9JhUp2t2mcHfkTYesF5hFkB2zLs2G z50BFGCGGUJUfFe/aicKzSfPhMWwixw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:56 2025 by rpki-client