$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa File: 39d654c8-0020-3957-b80a-8ed859b7e746.roa (raw, json) Hash identifier: H8rPOiXWYj1uEQm+Eyk7+DXLjd8aLJATD4lEMi3zt9E= Subject key identifier: 66:CF:D5:4E:E0:34:41:95:86:3E:5A:5C:CF:AD:44:2B:9F:82:B2:9E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAE09CB30C36FBA953F9BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa Signing time: Thu 21 Aug 2025 17:33:49 +0000 ROA not before: Thu 21 Aug 2025 17:33:49 +0000 ROA not after: Wed 19 Nov 2025 18:33:49 +0000 asID: 31898 IP address blocks: 158.101.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ae:09:cb:30:c3:6f:ba:95:3f:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:49 2025 GMT Not After : Nov 19 18:33:49 2025 GMT Subject: CN=371959bc-021a-4091-a174-6cf5d2e6a277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:2c:fb:58:a4:cf:c1:ba:e2:4a:df:82:7d: 0f:2e:81:49:5b:20:3c:c8:b2:66:ea:0c:59:b7:86: 6d:84:a2:bb:bd:97:6c:ce:c4:c1:05:e8:03:08:f2: a7:09:6c:d8:d1:97:d5:ba:48:30:af:2f:c3:75:4b: db:2d:33:12:36:70:62:94:df:75:f9:8c:29:86:d8: 9f:96:36:1b:34:ce:2f:3e:c0:19:66:9e:aa:ce:d8: 2b:66:48:36:68:85:db:a1:32:64:32:3d:10:80:fb: 99:8c:e4:d3:a1:9c:77:1b:2f:58:4c:9d:93:ce:2b: c4:df:6c:0a:bb:c9:95:4c:14:fb:8b:82:f9:66:4b: 4e:18:4e:34:2e:c6:14:6c:5e:1b:52:76:f3:b7:14: b9:ef:f3:b9:e2:2e:de:8c:19:a6:ef:25:14:55:e5: 08:52:9c:ff:c2:d8:a7:4f:a7:2a:68:7e:38:d7:1e: 72:55:68:e3:67:d6:8b:dd:31:57:17:80:47:cf:2c: 27:98:1e:cf:34:9e:54:7e:6a:5f:91:98:8c:d1:90: 2b:16:c6:8f:0d:1d:99:fc:9c:25:f2:ab:7f:7a:8d: 64:0d:b7:a3:6b:a7:ac:61:e1:7d:e4:71:d7:8b:46: 43:26:2d:50:8e:f7:6d:b2:ba:44:3b:ac:2b:79:49: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:D5:4E:E0:34:41:95:86:3E:5A:5C:CF:AD:44:2B:9F:82:B2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:15:91:90:23:21:63:3d:f9:ff:58:98:44:84:04:34:ef:c5: 60:e3:e1:eb:9b:5c:ae:25:4f:13:b0:b8:b0:f5:aa:d3:8f:da: fa:80:78:34:9b:97:9d:39:ab:04:03:9c:3b:85:2f:5d:81:c1: 64:0e:a6:05:87:a5:bd:b0:39:6e:4e:8b:a8:f0:49:bd:eb:20: 0a:40:50:79:22:2d:e1:b0:5d:bd:21:79:f7:db:5e:1a:60:ee: b7:61:51:84:dc:c2:f7:c8:7c:e5:aa:c1:a4:6e:8a:38:d0:89: fb:49:a1:aa:f9:79:4b:87:f2:95:d6:12:95:78:41:84:c5:58: 81:32:07:ad:0f:0e:cd:1a:cf:ca:e3:36:c7:e1:9e:7f:9a:e1: d8:1a:01:0d:cc:26:c4:33:78:9e:a0:ad:cf:77:27:ca:06:fc: 76:16:be:1f:44:48:70:fb:58:1b:cf:60:61:55:3c:cf:56:15: 8a:d4:e3:7b:3f:f4:98:b8:19:e2:ac:8e:38:c9:1c:81:41:b9: d9:c0:4a:71:69:cb:2e:88:1b:c4:f5:0b:cc:33:5a:ab:54:66: 74:7f:11:51:18:e9:2f:0a:2d:77:a7:c3:aa:a7:e1:32:bf:55: 57:f3:b8:7c:ff:2d:71:ea:6b:52:00:92:c8:4e:2b:d6:c2:d2: e6:25:48:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurgnLMMNvupU/m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzM0OVoXDTI1MTExOTE4MzM0OVowLzEtMCsGA1UEAxMk MzcxOTU5YmMtMDIxYS00MDkxLWExNzQtNmNmNWQyZTZhMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd4s+1ikz8G64krfgn0PLoFJWyA8yLJm6gxZ t4ZthKK7vZdszsTBBegDCPKnCWzY0ZfVukgwry/DdUvbLTMSNnBilN91+Ywphtif ljYbNM4vPsAZZp6qztgrZkg2aIXboTJkMj0QgPuZjOTToZx3Gy9YTJ2TzivE32wK u8mVTBT7i4L5ZktOGE40LsYUbF4bUnbztxS57/O54i7ejBmm7yUUVeUIUpz/wtin T6cqaH441x5yVWjjZ9aL3TFXF4BHzywnmB7PNJ5UfmpfkZiM0ZArFsaPDR2Z/Jwl 8qt/eo1kDbeja6esYeF95HHXi0ZDJi1QjvdtsrpEO6wreUkHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbP1U7gNEGVhj5aXM+tRCufgrKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzlkNjU0YzgtMDAyMC0z OTU3LWI4MGEtOGVkODU5YjdlNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0VkZAjIWM9+f9YmESEBDTvxWDj4eubXK4lTxOwuLD1qtOP2vqAeDSb l505qwQDnDuFL12BwWQOpgWHpb2wOW5Oi6jwSb3rIApAUHkiLeGwXb0heffbXhpg 7rdhUYTcwvfIfOWqwaRuijjQiftJoar5eUuH8pXWEpV4QYTFWIEyB60PDs0az8rj Nsfhnn+a4dgaAQ3MJsQzeJ6grc93J8oG/HYWvh9ESHD7WBvPYGFVPM9WFYrU43s/ 9Ji4GeKsjjjJHIFBudnASnFpyy6IG8T1C8wzWqtUZnR/EVEY6S8KLXenw6qn4TK/ VVfzuHz/LXHqa1IAkshOK9bC0uYlSIw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:06 2025 by rpki-client