$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa File: 924c0f53-3657-3125-882c-52af8ebfd139.roa (raw, json) Hash identifier: n5FZfVcg5vh/KOiiPfVMRgp8wkE9WWpao/UY/ffDjq0= Subject key identifier: CA:01:18:D7:F6:DA:3E:D2:FE:8B:7A:E7:8B:79:B5:65:B0:4B:45:C8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE1AF0C3DEE2EB6E01754780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa Signing time: Thu 21 Aug 2025 12:37:26 +0000 ROA not before: Thu 21 Aug 2025 12:37:26 +0000 ROA not after: Wed 19 Nov 2025 13:37:26 +0000 asID: 31898 IP address blocks: 161.153.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:1a:f0:c3:de:e2:eb:6e:01:75:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 12:37:26 2025 GMT Not After : Nov 19 13:37:26 2025 GMT Subject: CN=24b15b1e-35df-4044-8aba-1abd8f703265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:91:c1:c6:b4:28:2b:06:e5:bb:b6:d4:82: fc:0f:b8:36:7a:8f:9f:78:98:16:3c:88:ab:ec:44: 05:26:e8:98:50:6f:23:f1:7c:66:74:fb:e8:49:86: f9:17:38:9f:36:8d:9b:11:d4:64:c8:e9:e3:05:16: 33:6e:54:71:10:18:8e:75:78:f7:39:73:98:57:e1: 41:a7:f8:00:7c:91:64:09:96:d7:65:90:ee:36:f0: 3e:57:b8:ac:dd:74:52:f3:b2:83:a9:1b:1c:f6:6d: 56:33:07:32:cb:cb:9c:4a:cb:c3:71:bd:42:87:91: 14:86:10:dc:40:ec:e1:71:53:38:15:c6:38:cd:ce: c5:59:ee:9b:b2:00:87:a5:01:92:d3:7f:f6:b4:fd: 9a:e9:e6:b8:3a:93:e3:e4:36:5d:37:54:eb:4d:54: 9d:05:cc:50:50:11:79:9a:e9:bc:0a:88:dc:b9:63: 83:a6:5a:27:31:a8:3a:99:43:62:42:bb:23:c2:ef: c1:2b:c2:de:af:aa:bc:9f:fb:2b:e5:8d:f1:62:fa: a0:bf:02:ec:5b:cf:7e:ee:e2:64:01:52:38:07:11: 03:17:e8:4d:b8:f4:c8:a6:47:b6:8e:87:16:47:07: e1:b0:0b:a8:60:3f:33:6c:f9:c5:9a:f4:05:a3:0c: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:18:D7:F6:DA:3E:D2:FE:8B:7A:E7:8B:79:B5:65:B0:4B:45:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c5:35:ca:7e:18:36:92:86:c0:36:53:a2:d5:df:12:f4:13: 6f:ca:13:98:16:0a:ce:05:55:24:7a:b4:5e:fd:eb:df:26:0a: f8:da:07:c2:25:ba:17:5f:65:b8:e0:88:d3:9a:8e:a9:a6:80: 4b:9d:1a:74:c4:55:6e:1b:27:dc:3d:b9:05:60:fb:67:d4:49: 9b:ca:07:31:cf:52:b7:3b:cd:b0:34:97:6c:02:26:e9:e1:86: a2:98:6e:df:07:f1:ac:2e:58:29:df:38:3e:36:17:9e:dc:05: 2f:fc:c0:ca:96:b7:8a:2f:2b:2f:01:a0:7d:5f:9d:9d:64:eb: d3:7c:d5:be:5a:6d:07:17:89:e7:6e:6d:a4:f0:04:9e:17:76: f4:1e:18:65:19:c9:e4:83:47:db:ea:8c:d9:06:88:88:fa:dc: b8:cb:7d:d3:b5:78:b2:6e:c4:fe:0e:4b:c5:65:89:cc:28:15: 11:7f:56:73:dd:b3:f7:f9:87:78:cf:f8:95:65:31:fb:1a:e6: 9f:5d:a7:1a:72:b0:d2:4c:32:33:23:7d:33:4f:6d:74:c8:c7: 1b:01:2b:7a:84:68:71:58:f4:22:ed:05:77:41:b5:49:da:a2: f9:67:47:a5:f7:72:ab:63:31:85:b5:78:f8:54:01:42:92:09: ac:cb:c8:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruGvDD3uLrbgF1R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEyMzcyNloXDTI1MTExOTEzMzcyNlowLzEtMCsGA1UEAxMk MjRiMTViMWUtMzVkZi00MDQ0LThhYmEtMWFiZDhmNzAzMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNORwca0KCsG5bu21IL8D7g2eo+feJgWPIir 7EQFJuiYUG8j8XxmdPvoSYb5FzifNo2bEdRkyOnjBRYzblRxEBiOdXj3OXOYV+FB p/gAfJFkCZbXZZDuNvA+V7is3XRS87KDqRsc9m1WMwcyy8ucSsvDcb1Ch5EUhhDc QOzhcVM4FcY4zc7FWe6bsgCHpQGS03/2tP2a6ea4OpPj5DZdN1TrTVSdBcxQUBF5 mum8CojcuWODplonMag6mUNiQrsjwu/BK8Ler6q8n/sr5Y3xYvqgvwLsW89+7uJk AVI4BxEDF+hNuPTIpke2jocWRwfhsAuoYD8zbPnFmvQFoww0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoBGNf22j7S/ot654t5tWWwS0XIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTI0YzBmNTMtMzY1Ny0z MTI1LTg4MmMtNTJhZjhlYmZkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPFNcp+GDaShsA2U6LV3xL0E2/KE5gWCs4FVSR6tF79698mCvjaB8Il uhdfZbjgiNOajqmmgEudGnTEVW4bJ9w9uQVg+2fUSZvKBzHPUrc7zbA0l2wCJunh hqKYbt8H8awuWCnfOD42F57cBS/8wMqWt4ovKy8BoH1fnZ1k69N81b5abQcXiedu baTwBJ4XdvQeGGUZyeSDR9vqjNkGiIj63LjLfdO1eLJuxP4OS8VlicwoFRF/VnPd s/f5h3jP+JVlMfsa5p9dpxpysNJMMjMjfTNPbXTIxxsBK3qEaHFY9CLtBXdBtUna ovlnR6X3cqtjMYW1ePhUAUKSCazLyIU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:02 2025 by rpki-client