$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa File: 15a4f54d-f4bc-3779-afab-c700fc05fe12.roa (raw, json) Hash identifier: 5Zv4vHrfvGO07cCF96J5UIEdrTZhcbBbAs65LpTc73o= Subject key identifier: 89:C5:37:77:8C:4B:59:62:E3:7D:1D:9F:20:9C:5A:29:EF:B1:6F:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB312370EC3E2FDFFABAFB6A Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa Signing time: Wed 20 Aug 2025 11:34:44 +0000 ROA not before: Wed 20 Aug 2025 11:34:44 +0000 ROA not after: Tue 18 Nov 2025 12:34:44 +0000 asID: 31898 IP address blocks: 157.137.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:31:23:70:ec:3e:2f:df:fa:ba:fb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 11:34:44 2025 GMT Not After : Nov 18 12:34:44 2025 GMT Subject: CN=27f8df88-ffee-47da-a567-f733b5ade0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:5a:43:2f:98:d3:f3:bb:8e:5b:39:03:22: 47:54:1d:a1:2c:a1:18:3b:e8:aa:e1:ee:3f:52:03: 62:b3:59:4a:38:c7:a8:0f:78:9d:bd:90:ea:2f:c1: 52:9a:07:9c:1a:46:43:ef:19:3a:d8:5a:9e:86:29: cb:1c:34:c0:d4:0c:a3:48:da:01:23:54:be:b8:d2: 22:43:ba:fb:6a:d8:e7:0f:01:2b:5a:2c:34:3d:7f: 1e:0d:2c:50:b5:70:61:84:7d:1c:2d:ca:24:34:f5: bd:c2:a5:13:5e:dc:6f:19:f9:74:7f:1f:c4:23:ac: 6d:97:1d:85:14:36:14:60:38:ad:6a:d9:cd:10:be: 7f:52:6a:5f:94:f6:75:68:3f:5a:90:33:03:97:57: 5e:af:b7:39:83:e7:e1:7c:86:b9:cf:ae:3b:2a:21: e9:6e:70:d6:5b:ce:6c:a8:fd:40:25:53:ac:93:8a: 78:9d:34:9f:7a:58:49:4d:cb:f1:e2:30:f6:1e:c0: 15:b4:f2:70:b4:56:1d:3a:bd:6f:69:0b:2d:da:b8: fe:89:db:15:38:90:48:18:d1:0e:ed:09:09:79:07: d6:6f:06:d7:07:89:d0:bf:43:c9:bb:98:1a:40:6f: be:6b:73:d7:28:0b:f7:ee:a0:3b:ae:83:1e:88:5a: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C5:37:77:8C:4B:59:62:E3:7D:1D:9F:20:9C:5A:29:EF:B1:6F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6a:db:75:b7:69:b4:df:f3:de:f6:5c:a2:85:b7:b4:3d:30: e2:d6:bc:c0:96:55:1f:a0:d7:0e:fa:84:be:89:29:de:d1:4d: 42:20:34:4f:c1:44:ce:47:2e:1e:72:2d:eb:a0:01:43:23:04: e4:51:c5:76:e9:ed:74:bf:7e:15:89:88:28:38:55:fb:87:e5: 27:74:0c:7d:3b:9d:82:3c:6c:1d:03:b6:e9:0c:c4:fe:8f:bc: 0d:57:cb:70:1f:24:a6:de:47:d7:02:a9:95:47:c5:6d:b5:90: 49:8b:aa:6a:17:d2:57:dc:1b:84:e0:46:ed:ba:90:59:a8:4b: 10:8e:fe:95:c9:e1:50:09:df:31:2e:b6:c2:04:2c:89:27:8f: bb:c6:f4:44:b1:9c:23:c8:52:94:4e:b9:bd:8f:64:b0:61:b8: 52:3e:c9:3d:fc:c8:ac:dc:88:13:fb:f1:69:ee:e2:ec:80:0c: 55:5d:ee:ed:48:0b:e6:3d:93:d9:e7:4f:fc:ca:05:0a:c2:3f: 72:06:8a:ae:20:62:29:da:72:dc:c1:5f:46:14:8a:1e:58:ce: e7:14:df:ca:b3:3b:55:5f:50:c1:28:0e:22:34:65:d4:85:c1: 26:bf:1e:c0:40:11:a9:7e:75:6d:a3:14:e3:56:9a:17:82:26: e4:c2:b1:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrMSNw7D4v3/q6+2owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDExMzQ0NFoXDTI1MTExODEyMzQ0NFowLzEtMCsGA1UEAxMk MjdmOGRmODgtZmZlZS00N2RhLWE1NjctZjczM2I1YWRlMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCtaQy+Y0/O7jls5AyJHVB2hLKEYO+iq4e4/ UgNis1lKOMeoD3idvZDqL8FSmgecGkZD7xk62FqehinLHDTA1AyjSNoBI1S+uNIi Q7r7atjnDwErWiw0PX8eDSxQtXBhhH0cLcokNPW9wqUTXtxvGfl0fx/EI6xtlx2F FDYUYDitatnNEL5/UmpflPZ1aD9akDMDl1der7c5g+fhfIa5z647KiHpbnDWW85s qP1AJVOsk4p4nTSfelhJTcvx4jD2HsAVtPJwtFYdOr1vaQst2rj+idsVOJBIGNEO 7QkJeQfWbwbXB4nQv0PJu5gaQG++a3PXKAv37qA7roMeiFoJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInFN3eMS1li430dnyCcWinvsW/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTVhNGY1NGQtZjRiYy0z Nzc5LWFmYWItYzcwMGZjMDVmZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtq23W3abTf8972XKKFt7Q9MOLWvMCWVR+g1w76hL6JKd7RTUIgNE/B RM5HLh5yLeugAUMjBORRxXbp7XS/fhWJiCg4VfuH5Sd0DH07nYI8bB0DtukMxP6P vA1Xy3AfJKbeR9cCqZVHxW21kEmLqmoX0lfcG4TgRu26kFmoSxCO/pXJ4VAJ3zEu tsIELIknj7vG9ESxnCPIUpROub2PZLBhuFI+yT38yKzciBP78Wnu4uyADFVd7u1I C+Y9k9nnT/zKBQrCP3IGiq4gYinactzBX0YUih5YzucU38qzO1VfUMEoDiI0ZdSF wSa/HsBAEal+dW2jFONWmheCJuTCsbY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:30 2025 by rpki-client