$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa File: 4faebc4b-4621-371a-b55b-980b9dfaa752.roa (raw, json) Hash identifier: RLbgwrLw6NvgtdrtgZfcgGFfiqKeHHPBSjc9qHvdAVI= Subject key identifier: AD:FF:58:1B:38:B9:EB:86:44:93:39:43:5B:3A:6A:A8:E4:BC:DE:06 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB6535E3124569838EBF2600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa Signing time: Wed 20 Aug 2025 13:19:39 +0000 ROA not before: Wed 20 Aug 2025 13:19:39 +0000 ROA not after: Tue 18 Nov 2025 14:19:39 +0000 asID: 31898 IP address blocks: 164.152.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:35:e3:12:45:69:83:8e:bf:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:39 2025 GMT Not After : Nov 18 14:19:39 2025 GMT Subject: CN=b6e8bbc5-15f7-43bf-8479-48c3cda7c3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:a4:a3:0f:87:15:3b:f4:5f:6f:13:28:fd: f3:65:10:66:fa:e6:44:57:bf:2c:75:b5:8e:f2:58: 87:84:94:2f:df:d7:8b:20:c1:70:af:98:04:a9:21: 2e:4f:61:9c:2b:5a:2a:ff:67:6a:2e:0c:54:30:25: cc:00:19:7d:05:67:1b:3b:05:d0:0a:e5:32:03:04: c6:85:87:10:51:b9:ac:54:81:4b:d7:60:2b:68:26: ee:cf:31:75:96:84:33:aa:39:94:b6:df:e0:44:84: 7a:28:ab:53:4a:52:2f:48:1a:9a:aa:41:92:18:01: 15:7d:56:47:e3:58:06:54:ba:f6:92:bf:49:83:45: ba:34:86:4b:62:d7:de:8b:38:7d:b4:de:18:ba:c6: 36:00:ab:9f:3f:a2:22:db:a4:c3:1b:c7:83:0e:37: de:b5:22:53:6a:c4:b6:65:40:96:70:b7:bd:33:15: a7:a9:cc:2a:da:e8:8d:42:60:c6:3a:50:43:c0:96: 57:41:57:6c:75:94:bf:92:60:fc:5b:fe:db:52:45: 65:c1:f1:0b:37:35:82:3e:22:c8:c8:d1:a3:02:b2: dc:18:7a:c7:6a:8c:37:a0:d2:a7:3f:df:5b:ba:0a: 4c:0f:ee:c7:2f:55:fe:99:1e:8f:40:0f:f4:c1:05: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:58:1B:38:B9:EB:86:44:93:39:43:5B:3A:6A:A8:E4:BC:DE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:34:1c:6f:a4:b1:b0:9c:1c:4b:da:ee:0e:c1:e9:06:91:71: ec:f8:6c:4b:e7:6e:b6:1d:d4:c5:c7:d2:d6:d8:d8:d0:33:64: 53:ac:b8:68:26:b8:6b:fd:ea:8f:67:35:84:d3:9b:8b:01:be: 8a:00:01:6c:e0:15:36:03:23:70:a9:22:12:d1:f9:65:13:87: d9:9c:5a:68:a4:49:6d:4c:ce:0b:0f:45:fe:d7:ff:ce:b9:b7: 8e:6d:6b:05:2e:f7:f0:3d:25:c9:64:b8:a6:07:99:7d:06:a8: bd:29:7a:e1:d9:4a:f8:34:95:d6:96:18:c1:24:f5:27:2b:86: ce:57:f2:05:0e:da:cd:b1:b8:ce:87:4c:cc:d6:5a:ed:25:96: e4:a4:4b:90:f9:4d:fe:90:19:fc:c7:a9:b9:f8:e2:74:a5:41: 90:6c:ee:14:57:55:d4:4c:b9:0e:5c:fb:42:91:43:5d:c3:75: d1:da:f5:aa:e6:c5:9d:ef:4b:88:bf:0b:5a:a3:c6:e8:7b:01: 31:2b:ca:a9:c8:90:0f:18:ad:4e:43:c0:e3:bf:39:f4:36:33: 7c:9d:11:be:47:31:f3:a3:75:d6:d0:ef:eb:98:24:ac:41:24: e8:02:fa:74:e2:c2:9a:01:60:0b:38:81:91:c5:c3:8d:f8:7f: 5c:a0:ab:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZTXjEkVpg46/JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTkzOVoXDTI1MTExODE0MTkzOVowLzEtMCsGA1UEAxMk YjZlOGJiYzUtMTVmNy00M2JmLTg0NzktNDhjM2NkYTdjM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFOkow+HFTv0X28TKP3zZRBm+uZEV78sdbWO 8liHhJQv39eLIMFwr5gEqSEuT2GcK1oq/2dqLgxUMCXMABl9BWcbOwXQCuUyAwTG hYcQUbmsVIFL12AraCbuzzF1loQzqjmUtt/gRIR6KKtTSlIvSBqaqkGSGAEVfVZH 41gGVLr2kr9Jg0W6NIZLYtfeizh9tN4YusY2AKufP6Ii26TDG8eDDjfetSJTasS2 ZUCWcLe9MxWnqcwq2uiNQmDGOlBDwJZXQVdsdZS/kmD8W/7bUkVlwfELNzWCPiLI yNGjArLcGHrHaow3oNKnP99bugpMD+7HL1X+mR6PQA/0wQWr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3/WBs4ueuGRJM5Q1s6aqjkvN4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZhZWJjNGItNDYyMS0z NzFhLWI1NWItOTgwYjlkZmFhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc0HG+ksbCcHEva7g7B6QaRcez4bEvnbrYd1MXH0tbY2NAzZFOsuGgm uGv96o9nNYTTm4sBvooAAWzgFTYDI3CpIhLR+WUTh9mcWmikSW1MzgsPRf7X/865 t45tawUu9/A9JclkuKYHmX0GqL0peuHZSvg0ldaWGMEk9Scrhs5X8gUO2s2xuM6H TMzWWu0lluSkS5D5Tf6QGfzHqbn44nSlQZBs7hRXVdRMuQ5c+0KRQ13DddHa9arm xZ3vS4i/C1qjxuh7ATEryqnIkA8YrU5DwOO/OfQ2M3ydEb5HMfOjddbQ7+uYJKxB JOgC+nTiwpoBYAs4gZHFw434f1ygq1g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:06 2025 by rpki-client