$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/961273cd-0787-3001-a2de-7b77e51e33af.roa File: 961273cd-0787-3001-a2de-7b77e51e33af.roa (raw, json) Hash identifier: p0QR57TS7llKweqDdrNGH/KHPZdkHZ1H61TBRIQdHC4= Subject key identifier: B3:5F:BC:43:23:22:77:75:D5:78:2A:7A:22:2F:5F:51:A0:37:C8:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A78BDE82DFB114E2181D6 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/961273cd-0787-3001-a2de-7b77e51e33af.roa Signing time: Thu 21 Aug 2025 13:08:43 +0000 ROA not before: Thu 21 Aug 2025 13:08:43 +0000 ROA not after: Wed 19 Nov 2025 14:08:43 +0000 asID: 31898 IP address blocks: 163.192.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:78:bd:e8:2d:fb:11:4e:21:81:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:43 2025 GMT Not After : Nov 19 14:08:43 2025 GMT Subject: CN=8deac912-e23c-427b-878c-8a34aed14b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:8c:1e:3a:89:b0:10:ba:29:2e:38:30:7b: 19:a0:02:5e:b2:9c:6d:69:94:3d:62:79:d1:80:17: 69:27:69:d0:d0:86:e8:ed:a9:0b:a8:3a:68:89:7c: ac:7f:5a:a2:ee:51:aa:25:a0:3f:01:08:10:b7:9d: 20:0f:9d:cd:33:5f:5d:87:6e:a8:57:81:ab:85:99: 46:0c:67:f3:0e:07:90:71:cf:f1:ed:4a:7f:0a:1c: df:2a:a9:c5:6b:bb:0f:c6:b3:8c:cd:12:ee:58:42: c2:e0:c0:01:cd:29:5d:6d:29:08:6f:9f:67:f1:fb: c0:a6:49:06:50:ff:ae:31:6a:22:6e:23:e4:fa:99: 01:05:5d:b4:1a:73:59:99:19:67:37:dc:a9:e3:da: a4:f5:f3:20:31:ba:41:5f:28:ad:6f:2d:cb:39:58: 25:48:46:b5:e5:62:b1:3f:32:d9:7e:d8:2b:6c:4a: 79:35:af:10:78:82:07:f0:4f:06:27:f0:48:d0:b5: 9c:8b:5e:85:d1:95:aa:40:17:0a:fb:46:eb:76:11: b6:fb:90:be:9d:3a:c5:47:ea:c7:8c:00:0e:77:b1: 8d:ef:f9:6d:55:32:f3:e4:67:08:ad:d0:d2:03:8f: 87:28:74:81:75:d1:df:68:e7:5d:17:f6:ff:6a:e1: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5F:BC:43:23:22:77:75:D5:78:2A:7A:22:2F:5F:51:A0:37:C8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/961273cd-0787-3001-a2de-7b77e51e33af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 163.192.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:02:85:95:42:51:0e:c6:3f:08:f8:6a:a1:a5:9b:aa:e0:a8: 74:93:e2:21:b9:4f:b7:6e:b6:8e:ad:f2:e2:cd:1b:cf:59:a0: 6b:b5:41:9e:a1:13:d4:18:8d:c7:ab:62:3c:ec:1e:34:0e:ff: ab:a3:4d:74:91:57:47:2a:99:bb:29:6b:10:7d:c2:e5:73:e7: 05:13:e8:f0:f5:97:94:54:51:96:4b:4a:55:a5:d8:51:62:cd: d9:9b:be:35:b0:1b:09:1f:32:a4:46:78:ec:5e:d1:5a:1f:b8: 53:f8:7d:34:5d:6e:8b:aa:c6:3e:16:b8:1f:f3:e3:81:84:aa: 5a:e9:09:06:bc:9a:bd:f0:2a:95:1f:8c:dc:51:84:dd:fb:62: 7a:2d:6d:a8:17:da:43:e2:bd:25:c6:09:97:1c:77:30:a8:6c: d3:4c:1b:2c:71:4b:2f:de:7f:9e:cc:5a:9b:f7:89:03:4c:e1: b5:46:52:93:3e:47:3a:96:77:2d:6b:0a:5b:99:55:2e:a8:9f: 99:e5:08:f9:10:d1:b3:e1:97:c8:cc:59:69:52:21:0f:db:5c: b1:b2:a9:40:17:78:cb:ff:f6:a3:94:e3:e1:73:9a:a6:36:ee: 71:79:79:df:0b:73:53:8e:a4:d5:c0:6e:d2:46:30:80:44:b3: 36:fe:8c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKni96C37EU4hgdYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDg0M1oXDTI1MTExOTE0MDg0M1owLzEtMCsGA1UEAxMk OGRlYWM5MTItZTIzYy00MjdiLTg3OGMtOGEzNGFlZDE0YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkryMHjqJsBC6KS44MHsZoAJespxtaZQ9YnnR gBdpJ2nQ0Ibo7akLqDpoiXysf1qi7lGqJaA/AQgQt50gD53NM19dh26oV4GrhZlG DGfzDgeQcc/x7Up/ChzfKqnFa7sPxrOMzRLuWELC4MABzSldbSkIb59n8fvApkkG UP+uMWoibiPk+pkBBV20GnNZmRlnN9yp49qk9fMgMbpBXyitby3LOVglSEa15WKx PzLZftgrbEp5Na8QeIIH8E8GJ/BI0LWci16F0ZWqQBcK+0brdhG2+5C+nTrFR+rH jAAOd7GN7/ltVTLz5GcIrdDSA4+HKHSBddHfaOddF/b/auF/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNfvEMjInd11XgqeiIvX1GgN8jqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYxMjczY2QtMDc4Ny0z MDAxLWEyZGUtN2I3N2U1MWUzM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGo8AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgChZVCUQ7GPwj4aqGlm6rgqHST4iG5T7duto6t8uLNG89ZoGu1QZ6h E9QYjcerYjzsHjQO/6ujTXSRV0cqmbspaxB9wuVz5wUT6PD1l5RUUZZLSlWl2FFi zdmbvjWwGwkfMqRGeOxe0VofuFP4fTRdbouqxj4WuB/z44GEqlrpCQa8mr3wKpUf jNxRhN37YnotbagX2kPivSXGCZccdzCobNNMGyxxSy/ef57MWpv3iQNM4bVGUpM+ RzqWdy1rCluZVS6on5nlCPkQ0bPhl8jMWWlSIQ/bXLGyqUAXeMv/9qOU4+FzmqY2 7nF5ed8Lc1OOpNXAbtJGMIBEszb+jFU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:57 2025 by rpki-client