$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa File: be5afb24-ad07-3150-835e-21c7285740e8.roa (raw, json) Hash identifier: PmayLV6Zq+HoFUtR0wAZt/ouZW02Sh50zVrl9Vs2rbM= Subject key identifier: E4:88:E9:2E:CD:89:75:46:63:35:47:9B:55:60:5E:0E:AA:9F:F1:FF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFCC7C2D6B7C591FCF3C000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa Signing time: Thu 21 Aug 2025 11:36:40 +0000 ROA not before: Thu 21 Aug 2025 11:36:40 +0000 ROA not after: Wed 19 Nov 2025 12:36:40 +0000 asID: 31898 IP address blocks: 149.130.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:c7:c2:d6:b7:c5:91:fc:f3:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:40 2025 GMT Not After : Nov 19 12:36:40 2025 GMT Subject: CN=ecaa79d6-2e83-4887-a615-be9a5607f224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:3c:cc:80:44:05:5d:8e:1b:92:0c:a1:42: 70:62:3b:44:e4:fe:bb:c0:a4:e3:3d:6b:a2:03:0e: a9:f0:c3:11:8c:5b:0c:27:b8:d0:e9:4f:a6:56:cb: 31:7e:b1:31:c7:e8:47:83:49:3e:48:54:60:54:2c: be:a0:5b:aa:fc:97:7e:e3:d6:93:62:7c:7b:c8:ca: 76:0d:5d:81:57:28:d6:bc:db:5f:a7:bc:cd:15:56: bf:20:58:d5:81:7c:72:d0:96:74:2c:88:80:a3:56: 92:af:bf:8f:d6:c0:4d:59:42:c9:d3:59:0f:79:b0: a7:49:83:04:5b:5d:bc:23:ad:5f:16:77:ab:82:53: f6:c8:05:68:44:82:e8:47:cd:eb:eb:75:c4:28:8e: ce:13:87:ab:06:09:72:ac:68:e9:59:8b:94:a7:4d: e9:8b:59:7c:5a:fa:6c:12:a5:9e:78:20:04:d6:5a: ea:4f:50:ac:7b:80:5b:ff:37:ad:36:74:f9:05:6e: ee:f1:10:7d:90:f6:00:23:07:4f:05:29:49:68:3f: c1:44:bc:3d:84:a4:f8:af:20:e5:8a:82:05:6d:64: 07:1b:fd:8f:b1:7b:7f:a3:7f:77:b1:9d:08:14:c2: 83:b7:ef:3f:c6:dd:b6:3e:a2:5c:8d:88:9f:8b:db: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:E9:2E:CD:89:75:46:63:35:47:9B:55:60:5E:0E:AA:9F:F1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be5afb24-ad07-3150-835e-21c7285740e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:92:d6:45:b0:48:2f:12:6e:12:cd:55:1b:60:6e:33:7b: 3c:37:d9:19:f9:7e:84:6c:af:88:36:ae:aa:9c:e5:b9:06:26: 25:78:8e:cd:9b:d6:2c:fc:a0:0f:3f:7e:1a:77:ff:14:7d:f5: 21:d1:60:a3:ee:33:b4:67:18:76:ce:ff:38:60:60:f2:a1:1e: 8b:a2:c8:8b:9c:d6:22:97:31:b5:b2:9c:f8:0f:81:a5:16:62: f8:f7:34:f6:80:f8:41:6b:6f:d5:18:ed:50:24:fa:7f:fb:68: 20:81:6d:14:1a:d4:f6:1d:5d:27:19:b1:42:12:10:c2:00:f8: 8b:d5:9c:ca:13:29:0d:fb:7c:9b:8d:46:f9:40:23:04:52:e8: ad:01:00:77:cb:ce:62:4a:b3:f7:2c:63:f8:35:7d:69:e9:27: 55:b7:7d:d5:fc:66:ca:fe:ba:7c:a6:f5:2d:08:0e:2d:c2:03: 80:4b:82:ea:85:c6:1c:39:48:ee:79:6d:ae:d0:eb:fb:9a:3b: 51:5d:1d:a4:4d:32:c5:4c:60:41:df:1e:6b:65:b8:03:2f:36: 53:3d:0d:c1:68:e4:c7:2d:09:0d:50:1e:a1:1d:72:52:7b:5a: f1:b0:97:50:7a:ae:73:eb:35:da:f8:65:2a:14:f3:a1:6c:d4: 20:02:34:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt/MfC1rfFkfzzwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzY0MFoXDTI1MTExOTEyMzY0MFowLzEtMCsGA1UEAxMk ZWNhYTc5ZDYtMmU4My00ODg3LWE2MTUtYmU5YTU2MDdmMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsg8zIBEBV2OG5IMoUJwYjtE5P67wKTjPWui Aw6p8MMRjFsMJ7jQ6U+mVssxfrExx+hHg0k+SFRgVCy+oFuq/Jd+49aTYnx7yMp2 DV2BVyjWvNtfp7zNFVa/IFjVgXxy0JZ0LIiAo1aSr7+P1sBNWULJ01kPebCnSYME W128I61fFnerglP2yAVoRILoR83r63XEKI7OE4erBglyrGjpWYuUp03pi1l8Wvps EqWeeCAE1lrqT1Cse4Bb/zetNnT5BW7u8RB9kPYAIwdPBSlJaD/BRLw9hKT4ryDl ioIFbWQHG/2PsXt/o393sZ0IFMKDt+8/xt22PqJcjYifi9tj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSI6S7NiXVGYzVHm1VgXg6qn/H/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmU1YWZiMjQtYWQwNy0z MTUwLTgzNWUtMjFjNzI4NTc0MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4lktZFsEgvEm4SzVUbYG4zezw32Rn5foRsr4g2rqqc5bkGJiV4js2b 1iz8oA8/fhp3/xR99SHRYKPuM7RnGHbO/zhgYPKhHouiyIuc1iKXMbWynPgPgaUW Yvj3NPaA+EFrb9UY7VAk+n/7aCCBbRQa1PYdXScZsUISEMIA+IvVnMoTKQ37fJuN RvlAIwRS6K0BAHfLzmJKs/csY/g1fWnpJ1W3fdX8Zsr+unym9S0IDi3CA4BLguqF xhw5SO55ba7Q6/uaO1FdHaRNMsVMYEHfHmtluAMvNlM9DcFo5MctCQ1QHqEdclJ7 WvGwl1B6rnPrNdr4ZSoU86Fs1CACNMg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:38 2025 by rpki-client