$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa File: 4edf815a-03f2-3138-af2a-25b8d01e79fc.roa (raw, json) Hash identifier: KyPVXla7UPqRYH/AUEdV+/aX6F/vS3hhC5oxw/L94Bg= Subject key identifier: DB:3A:21:36:69:48:8F:FD:26:91:DC:90:73:3D:CC:5B:51:CD:7C:5F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EF02CBAA930FF41583BA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa Signing time: Fri 22 Aug 2025 12:56:21 +0000 ROA not before: Fri 22 Aug 2025 12:56:21 +0000 ROA not after: Thu 20 Nov 2025 13:56:21 +0000 asID: 31898 IP address blocks: 168.129.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ef:02:cb:aa:93:0f:f4:15:83:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:21 2025 GMT Not After : Nov 20 13:56:21 2025 GMT Subject: CN=3c36614c-6901-4b66-bfc6-b97dacca3cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:54:c0:41:60:55:5e:61:4d:c1:f0:41:7b: d4:68:02:db:02:08:2e:e0:4d:b4:f8:4d:11:84:6f: 1b:ad:59:19:a6:40:32:71:e8:c9:59:f9:87:22:16: 9b:5a:37:f6:35:1e:37:4e:96:a8:33:47:2d:dd:c1: 7e:4e:45:eb:73:5a:83:74:40:13:d1:28:bb:44:18: 5c:f0:05:19:b4:03:0a:f0:89:92:f9:19:36:6f:2d: c7:93:f1:a4:11:ff:cf:24:62:de:07:b9:bc:81:e1: 27:18:ca:54:06:03:65:4e:89:d2:dc:5b:1a:f5:e5: c5:58:70:14:7c:57:db:7d:a0:44:45:e1:22:3a:24: ca:82:6e:bf:65:7d:a9:45:f6:20:23:e7:5a:7e:59: 26:26:00:b8:51:98:95:1f:74:44:22:00:2d:c5:5f: 84:d5:13:1b:de:3c:b0:f3:48:46:26:ab:28:63:0f: f3:e7:66:12:46:a8:c8:8f:0a:df:b7:e6:a3:1d:9d: 60:6d:0e:79:dc:22:ab:50:d4:1c:61:92:da:a7:70: 73:8b:ba:fc:b7:5f:41:ca:18:09:c1:e9:4f:62:79: f5:ea:2f:f1:80:be:3c:4c:5e:6e:f5:30:0e:cf:df: b5:06:a5:d3:c1:ec:a1:ae:65:c2:82:54:fc:7f:49: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3A:21:36:69:48:8F:FD:26:91:DC:90:73:3D:CC:5B:51:CD:7C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4edf815a-03f2-3138-af2a-25b8d01e79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:94:33:d5:43:ec:27:61:87:2d:b3:97:a7:7e:15:85:2e:06: 70:de:d2:8d:ec:f0:4e:3d:65:3f:41:8a:35:c6:93:6c:f8:b6: 5e:c4:90:a7:a6:b6:d3:f1:09:97:74:2e:1a:56:e9:fb:30:3b: 0e:03:ca:37:cb:4d:9f:53:a4:e5:3f:50:53:20:73:d0:76:a5: 76:4f:39:14:23:3b:06:c1:c5:26:b9:a9:ee:dc:99:f9:43:dd: cf:8a:eb:7e:3d:f9:c9:46:08:46:aa:0a:69:ee:d0:10:5b:80: 99:ba:21:26:85:50:d6:88:b6:f4:a7:4a:5b:1c:a9:c7:86:62: b8:93:a9:66:7a:f3:5c:3f:92:ce:09:ec:8a:3d:f3:29:cc:c1: e8:09:5b:9c:2e:0d:1a:51:a3:a5:38:19:db:a0:f6:a4:c4:35: 04:1f:d0:7e:dc:97:5e:4e:6f:be:e5:fb:39:b7:c1:33:45:f6: 67:3f:c3:8f:74:60:3f:d0:ef:91:ce:69:d7:b6:5e:25:30:a9: ef:47:0b:87:9b:1c:ec:d6:27:05:66:ad:7a:00:d6:49:21:99: 54:53:ec:e7:d8:e5:22:2e:ba:be:df:7f:f0:a6:35:0a:2d:f9: d7:8d:e3:72:03:42:e7:58:b1:18:82:bb:61:c8:40:68:6f:2a: 0d:00:52:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7wLLqpMP9BWDuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYyMVoXDTI1MTEyMDEzNTYyMVowLzEtMCsGA1UEAxMk M2MzNjYxNGMtNjkwMS00YjY2LWJmYzYtYjk3ZGFjY2EzY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMRUwEFgVV5hTcHwQXvUaALbAggu4E20+E0R hG8brVkZpkAycejJWfmHIhabWjf2NR43TpaoM0ct3cF+TkXrc1qDdEAT0Si7RBhc 8AUZtAMK8ImS+Rk2by3Hk/GkEf/PJGLeB7m8geEnGMpUBgNlTonS3Fsa9eXFWHAU fFfbfaBEReEiOiTKgm6/ZX2pRfYgI+daflkmJgC4UZiVH3REIgAtxV+E1RMb3jyw 80hGJqsoYw/z52YSRqjIjwrft+ajHZ1gbQ553CKrUNQcYZLap3Bzi7r8t19ByhgJ welPYnn16i/xgL48TF5u9TAOz9+1BqXTweyhrmXCglT8f0k6iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs6ITZpSI/9JpHckHM9zFtRzXxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVkZjgxNWEtMDNmMi0z MTM4LWFmMmEtMjViOGQwMWU3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOUM9VD7Cdhhy2zl6d+FYUuBnDe0o3s8E49ZT9BijXGk2z4tl7EkKem ttPxCZd0LhpW6fswOw4DyjfLTZ9TpOU/UFMgc9B2pXZPORQjOwbBxSa5qe7cmflD 3c+K6349+clGCEaqCmnu0BBbgJm6ISaFUNaItvSnSlscqceGYriTqWZ681w/ks4J 7Io98ynMwegJW5wuDRpRo6U4Gdug9qTENQQf0H7cl15Ob77l+zm3wTNF9mc/w490 YD/Q75HOade2XiUwqe9HC4ebHOzWJwVmrXoA1kkhmVRT7OfY5SIuur7ff/CmNQot +deN43IDQudYsRiCu2HIQGhvKg0AUnE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:40 2025 by rpki-client