$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa File: b236930b-e520-39d9-8b0f-9a8ee151dc01.roa (raw, json) Hash identifier: l/kDQTeEElQifrI5njDE2K5mGSGCtAhzQqwhA/IGNDM= Subject key identifier: 40:7E:25:E1:C3:39:18:F6:5A:01:99:DF:6A:57:04:5C:82:C3:1E:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE1AF22A3302E6AAD61A5E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa Signing time: Thu 21 Aug 2025 12:37:27 +0000 ROA not before: Thu 21 Aug 2025 12:37:27 +0000 ROA not after: Wed 19 Nov 2025 13:37:27 +0000 asID: 31898 IP address blocks: 161.153.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:1a:f2:2a:33:02:e6:aa:d6:1a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 12:37:27 2025 GMT Not After : Nov 19 13:37:27 2025 GMT Subject: CN=617083b1-a483-4939-8295-0ce8c01060c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:9d:c5:12:38:86:4b:97:7b:d4:84:58:01: e8:bf:ff:6d:6e:4e:a5:a6:d4:54:21:46:2a:a4:65: 0c:35:69:12:80:33:39:23:0b:ab:7b:2b:55:b3:28: b2:82:ca:ba:b2:0a:cd:9f:02:06:f5:64:73:59:44: 79:53:69:9a:64:d7:2a:db:d6:86:3e:a2:fa:23:15: 34:90:3f:c4:47:03:b2:46:5d:6b:39:6b:01:af:38: de:bc:55:59:c4:ba:2c:97:2c:0d:87:6b:8e:d5:94: b5:14:e1:42:ae:26:d0:cf:ec:52:80:26:60:2d:c9: af:3a:d0:b4:ec:a5:6e:c5:a7:85:81:4e:2d:8e:39: 51:8c:5b:03:e8:92:5f:dc:08:1b:6a:0a:b6:32:49: 62:04:b4:b2:b0:55:7e:c0:72:95:b7:87:21:5f:9a: 4a:22:8a:fb:50:cf:93:2d:9c:98:c9:0b:cb:0c:87: a0:3c:66:e7:55:2f:1e:7b:cf:24:78:6e:27:fe:67: 20:90:f1:80:24:cb:2a:a7:8f:c5:73:3c:39:8d:5a: 93:e9:cf:29:de:88:fb:b7:e2:f3:cb:3d:ab:98:1b: 81:5f:e3:75:28:07:4c:5d:88:b2:4d:63:13:a3:de: d7:7d:b8:f4:ed:a6:3f:22:91:cc:42:20:63:72:1b: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:25:E1:C3:39:18:F6:5A:01:99:DF:6A:57:04:5C:82:C3:1E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b236930b-e520-39d9-8b0f-9a8ee151dc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a4:66:48:b1:05:0b:8d:fe:3b:fe:13:80:59:66:a9:45:37: 4d:71:90:3d:bb:3b:8c:e8:26:31:b9:f8:7e:84:24:a7:2d:ec: 59:83:cc:62:f3:76:c2:75:4f:eb:91:fe:f2:e4:bf:43:10:d4: 9a:bf:33:f7:2a:56:84:bc:77:e1:94:d6:09:5d:19:c6:b2:88: 97:49:00:d3:c9:1b:07:55:68:67:05:43:b6:e6:41:b3:67:f2: c7:4e:b4:cf:52:16:e3:d3:fd:be:52:8a:0e:35:3a:96:3c:d0: 30:fe:72:65:f0:fa:a2:b7:57:34:e4:f7:b2:e5:49:ca:52:b4: 84:00:d9:f9:94:75:f4:8d:ba:b6:66:1b:4f:08:d9:71:41:97: db:c4:02:85:ae:0d:2a:61:79:49:80:54:6e:2f:86:71:25:2a: b6:07:df:27:f9:2f:67:8b:40:e0:d1:2f:db:47:b1:b0:8a:02: 34:8d:66:c7:dc:59:a1:d8:82:64:8c:9a:8e:ed:68:94:84:88: 25:e0:f8:dc:19:0b:09:3b:f1:2b:ed:62:d8:38:b2:6c:91:15: e1:74:fe:1a:a4:19:4e:a9:fa:60:a1:31:2e:4c:bd:a4:46:23: 0a:c1:b1:df:fd:27:ad:1d:13:58:10:3c:b0:7d:3a:c8:cd:d5: e8:3e:7a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruGvIqMwLmqtYaXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEyMzcyN1oXDTI1MTExOTEzMzcyN1owLzEtMCsGA1UEAxMk NjE3MDgzYjEtYTQ4My00OTM5LTgyOTUtMGNlOGMwMTA2MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmdxRI4hkuXe9SEWAHov/9tbk6lptRUIUYq pGUMNWkSgDM5IwureytVsyiygsq6sgrNnwIG9WRzWUR5U2maZNcq29aGPqL6IxU0 kD/ERwOyRl1rOWsBrzjevFVZxLoslywNh2uO1ZS1FOFCribQz+xSgCZgLcmvOtC0 7KVuxaeFgU4tjjlRjFsD6JJf3Agbagq2MkliBLSysFV+wHKVt4chX5pKIor7UM+T LZyYyQvLDIegPGbnVS8ee88keG4n/mcgkPGAJMsqp4/Fczw5jVqT6c8p3oj7t+Lz yz2rmBuBX+N1KAdMXYiyTWMTo97Xfbj07aY/IpHMQiBjchuCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB+JeHDORj2WgGZ32pXBFyCwx5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjIzNjkzMGItZTUyMC0z OWQ5LThiMGYtOWE4ZWUxNTFkYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqkZkixBQuN/jv+E4BZZqlFN01xkD27O4zoJjG5+H6EJKct7FmDzGLz dsJ1T+uR/vLkv0MQ1Jq/M/cqVoS8d+GU1gldGcayiJdJANPJGwdVaGcFQ7bmQbNn 8sdOtM9SFuPT/b5Sig41OpY80DD+cmXw+qK3VzTk97LlScpStIQA2fmUdfSNurZm G08I2XFBl9vEAoWuDSpheUmAVG4vhnElKrYH3yf5L2eLQODRL9tHsbCKAjSNZsfc WaHYgmSMmo7taJSEiCXg+NwZCwk78SvtYtg4smyRFeF0/hqkGU6p+mChMS5MvaRG IwrBsd/9J60dE1gQPLB9OsjN1eg+egs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:48 2025 by rpki-client