$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa File: 935c0808-8308-360f-8691-6301e234c891.roa (raw, json) Hash identifier: j2PoY/aeX9dQm8Z/EaNiMWRoRzUzVWqnMmHw+cahPAM= Subject key identifier: E3:2D:5E:9F:23:EC:89:94:13:8D:98:93:77:32:BF:CE:E1:A2:DB:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDABE106E6193CF85B77258 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa Signing time: Thu 21 Aug 2025 10:28:05 +0000 ROA not before: Thu 21 Aug 2025 10:28:05 +0000 ROA not after: Wed 19 Nov 2025 11:28:05 +0000 asID: 31898 IP address blocks: 152.67.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:be:10:6e:61:93:cf:85:b7:72:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:28:05 2025 GMT Not After : Nov 19 11:28:05 2025 GMT Subject: CN=48b7a926-d8b4-4056-8d69-1e3e1a499418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:53:24:9f:9e:4b:80:12:9d:af:4e:d2:4e: b2:b6:0a:31:a9:3a:17:7d:bc:2c:9f:7d:c2:5c:5d: 8e:b4:72:85:fb:4c:d4:33:11:c7:e5:49:59:31:a6: 0c:78:ef:dd:f3:46:34:37:53:25:5e:68:4e:ad:d3: 99:fd:cb:9c:08:63:1a:ff:35:2a:57:7f:cc:a6:54: 17:f0:2f:a5:94:f3:db:64:5b:5b:4f:26:d8:dd:38: f3:98:68:36:11:c7:2e:61:62:bf:5d:7b:3b:ae:5c: ac:95:ea:db:94:cc:de:38:43:25:3c:0b:f1:b7:f3: 72:5a:27:63:f5:62:76:79:ed:13:f9:29:85:8f:7b: a8:c8:ba:01:11:b9:7b:af:09:3c:21:c2:57:0a:5f: c7:87:e2:30:7b:f7:38:e6:a8:38:0e:97:20:43:6d: 88:a6:26:84:c5:bf:9e:21:71:3e:17:b5:c8:2e:e3: ac:df:07:e6:53:6a:8a:c6:48:06:78:2b:27:3c:bf: 12:ae:5f:f3:2e:c2:75:50:61:9f:e4:2a:7f:fb:be: b9:3a:d4:0a:67:46:a0:a9:00:da:cd:c8:6a:b5:ea: ec:b4:18:e8:9f:c1:f2:2e:b5:ba:88:21:fd:4a:9f: 01:1e:aa:2d:86:59:c3:a7:ee:16:1e:34:f0:61:1e: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:5E:9F:23:EC:89:94:13:8D:98:93:77:32:BF:CE:E1:A2:DB:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/935c0808-8308-360f-8691-6301e234c891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ed:d4:70:ac:40:fc:3c:36:f0:ab:da:e9:20:aa:92:b0:a2: a8:6e:49:67:f7:6b:19:0c:34:a0:a3:68:b8:05:c3:c1:1f:2d: 27:d7:50:be:ef:ef:65:f4:4b:2f:92:95:8d:f1:cf:13:2e:24: 74:09:9c:24:4c:8b:53:3a:7e:2b:d0:2f:9a:6d:75:83:f8:7c: 36:4b:b7:bd:46:08:9b:71:88:c7:e2:57:1d:7f:53:11:04:df: 63:cf:c4:a1:ee:df:98:64:07:a7:79:ab:5f:c7:5a:9e:1f:6e: 91:c8:79:0c:eb:87:a2:0f:97:4e:5a:d4:36:c7:a4:18:aa:f6: 77:ed:bc:e3:b5:d3:8e:1e:ab:f7:bd:78:41:1b:e1:36:ca:a9: 28:6e:a0:a5:81:bb:cc:9b:78:a1:79:52:d4:20:09:16:0e:db: a6:6e:f2:5b:95:0f:0d:ae:47:93:01:d6:2b:45:96:92:44:5a: 8a:36:a9:c8:52:20:81:69:be:5a:72:ef:ba:0a:b5:5d:70:e7: fa:30:77:08:5f:4f:09:af:24:55:eb:de:6d:c0:d1:31:4d:c9: f2:b8:fc:fe:14:f0:32:f6:4a:be:73:9a:20:b9:43:bd:84:81: 4c:04:a9:ac:49:3b:e3:2f:e4:9e:d4:4b:2f:42:30:56:22:eb: 0e:cf:d1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2r4QbmGTz4W3clgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjgwNVoXDTI1MTExOTExMjgwNVowLzEtMCsGA1UEAxMk NDhiN2E5MjYtZDhiNC00MDU2LThkNjktMWUzZTFhNDk5NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3VTJJ+eS4ASna9O0k6ytgoxqToXfbwsn33C XF2OtHKF+0zUMxHH5UlZMaYMeO/d80Y0N1MlXmhOrdOZ/cucCGMa/zUqV3/MplQX 8C+llPPbZFtbTybY3TjzmGg2EccuYWK/XXs7rlyslerblMzeOEMlPAvxt/NyWidj 9WJ2ee0T+SmFj3uoyLoBEbl7rwk8IcJXCl/Hh+Iwe/c45qg4DpcgQ22IpiaExb+e IXE+F7XILuOs3wfmU2qKxkgGeCsnPL8Srl/zLsJ1UGGf5Cp/+765OtQKZ0agqQDa zchqterstBjon8HyLrW6iCH9Sp8BHqothlnDp+4WHjTwYR4cWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMtXp8j7ImUE42Yk3cyv87hotsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTM1YzA4MDgtODMwOC0z NjBmLTg2OTEtNjMwMWUyMzRjODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbt1HCsQPw8NvCr2ukgqpKwoqhuSWf3axkMNKCjaLgFw8EfLSfXUL7v 72X0Sy+SlY3xzxMuJHQJnCRMi1M6fivQL5ptdYP4fDZLt71GCJtxiMfiVx1/UxEE 32PPxKHu35hkB6d5q1/HWp4fbpHIeQzrh6IPl05a1DbHpBiq9nftvOO1044eq/e9 eEEb4TbKqShuoKWBu8ybeKF5UtQgCRYO26Zu8luVDw2uR5MB1itFlpJEWoo2qchS IIFpvlpy77oKtV1w5/owdwhfTwmvJFXr3m3A0TFNyfK4/P4U8DL2Sr5zmiC5Q72E gUwEqaxJO+Mv5J7USy9CMFYi6w7P0SU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:36 2025 by rpki-client