$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa File: 3bdd446b-d8ca-3ac7-91b7-261492558eca.roa (raw, json) Hash identifier: 5+iim+XusPac4dVrRCfkX/0ck976SawZEC7VmWncDS4= Subject key identifier: 95:09:CD:F0:79:32:35:F0:1A:09:4B:95:3C:84:7D:EB:99:F0:C3:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB4413948E200C8E8F3F6248 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa Signing time: Wed 20 Aug 2025 12:12:53 +0000 ROA not before: Wed 20 Aug 2025 12:12:53 +0000 ROA not after: Tue 18 Nov 2025 13:12:53 +0000 asID: 31898 IP address blocks: 157.151.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:13:94:8e:20:0c:8e:8f:3f:62:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:53 2025 GMT Not After : Nov 18 13:12:53 2025 GMT Subject: CN=429fae96-b31f-4e1a-ad09-16476aef521c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:a2:d6:31:33:a1:7b:7d:c0:be:00:d9:17: 26:2f:a7:6a:9c:cd:b4:2a:e7:98:c9:ac:af:05:d6: 1f:cc:6a:73:b3:30:b0:31:5e:36:8c:e1:12:96:f1: 32:3d:3e:c5:26:e6:e6:1d:67:8e:bc:df:0d:61:12: c2:4c:08:5c:d4:bb:41:03:85:18:30:de:75:95:4c: e6:55:d7:a7:9e:c7:02:a9:e1:ab:47:17:64:c0:88: 39:eb:62:f8:93:99:5f:cd:11:e6:66:22:7f:a7:9a: 6b:13:e7:14:16:65:c7:83:0a:9c:3f:6d:16:a4:7e: 7e:2a:53:ef:fe:97:2f:ac:a7:1d:53:fb:e4:a0:ba: 88:36:f3:9e:e5:ba:e9:2f:c9:4a:2e:dc:5f:64:67: 4f:9d:13:e1:65:9c:bb:fa:da:ca:00:b0:a3:a4:e7: bc:d2:22:67:c8:54:fc:a2:46:53:a8:60:e5:91:06: 4c:6b:6f:7e:bb:32:92:26:c1:b1:86:8a:37:56:5b: da:21:b3:30:2f:35:d9:2d:cf:91:f8:63:9c:b5:a3: 97:c8:03:61:9b:2c:c2:d3:e3:1d:20:78:f0:08:50: ef:39:5d:f8:a6:41:9a:e4:0d:a8:c6:13:3a:77:c9: 94:e3:6a:96:34:ac:bb:f6:ce:30:bc:c5:b6:de:3d: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:CD:F0:79:32:35:F0:1A:09:4B:95:3C:84:7D:EB:99:F0:C3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:83:1f:74:29:fb:19:23:8b:34:ef:e4:51:1d:4a:c3:04:e2: 65:e6:73:26:92:38:95:5c:79:4c:f2:07:5d:51:e0:68:b3:53: 0c:4d:2d:b1:b2:57:37:8a:8b:ac:41:ee:f6:16:a3:63:44:b4: e4:00:a2:df:0e:96:00:56:fb:7d:8e:31:c1:f3:ba:04:b1:5d: f1:c1:d3:92:b5:a3:10:1c:e9:ab:9d:e6:4c:42:c8:e3:cf:ef: 95:c1:2e:6a:ce:96:7d:84:82:a2:4d:b0:ea:a1:8c:fc:90:4f: 35:40:3a:f9:c2:7b:46:6e:8b:f1:6e:c0:da:1d:e5:e1:77:30: 69:0b:8f:9c:43:1c:17:9f:b9:88:cd:38:f7:c3:c4:10:bd:5d: c9:ac:ad:eb:20:9e:8e:40:83:d9:51:c4:ad:44:fd:9e:41:f3: 04:30:86:a8:1f:9a:71:99:f0:f9:5b:97:73:25:80:2f:1b:cc: 1b:6f:dd:b5:f6:c0:d8:12:78:5e:21:75:ba:44:46:ab:15:eb: 2d:40:c5:55:74:2d:99:00:9f:9b:8f:e0:c7:05:d8:cc:fa:b9: d6:6c:4e:22:18:2c:85:f1:37:3a:bb:e5:cc:3a:c3:45:9a:5b: 6e:f1:3b:7b:a9:9f:03:e6:66:63:a5:a3:d6:9a:1e:83:84:d3: e9:c5:1d:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRBOUjiAMjo8/YkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1M1oXDTI1MTExODEzMTI1M1owLzEtMCsGA1UEAxMk NDI5ZmFlOTYtYjMxZi00ZTFhLWFkMDktMTY0NzZhZWY1MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DOi1jEzoXt9wL4A2RcmL6dqnM20KueYyayv BdYfzGpzszCwMV42jOESlvEyPT7FJubmHWeOvN8NYRLCTAhc1LtBA4UYMN51lUzm VdennscCqeGrRxdkwIg562L4k5lfzRHmZiJ/p5prE+cUFmXHgwqcP20WpH5+KlPv /pcvrKcdU/vkoLqINvOe5brpL8lKLtxfZGdPnRPhZZy7+trKALCjpOe80iJnyFT8 okZTqGDlkQZMa29+uzKSJsGxhoo3VlvaIbMwLzXZLc+R+GOctaOXyANhmyzC0+Md IHjwCFDvOV34pkGa5A2oxhM6d8mU42qWNKy79s4wvMW23j0/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUJzfB5MjXwGglLlTyEfeuZ8MOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JkZDQ0NmItZDhjYS0z YWM3LTkxYjctMjYxNDkyNTU4ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnZcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6DH3Qp+xkjizTv5FEdSsME4mXmcyaSOJVceUzyB11R4GizUwxNLbGy VzeKi6xB7vYWo2NEtOQAot8OlgBW+32OMcHzugSxXfHB05K1oxAc6aud5kxCyOPP 75XBLmrOln2EgqJNsOqhjPyQTzVAOvnCe0Zui/FuwNod5eF3MGkLj5xDHBefuYjN OPfDxBC9Xcmsresgno5Ag9lRxK1E/Z5B8wQwhqgfmnGZ8Plbl3MlgC8bzBtv3bX2 wNgSeF4hdbpERqsV6y1AxVV0LZkAn5uP4McF2Mz6udZsTiIYLIXxNzq75cw6w0Wa W27xO3upnwPmZmOlo9aaHoOE0+nFHY4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:41 2025 by rpki-client