$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa File: c3aee60c-17be-3d6e-a062-eace2af95bd4.roa (raw, json) Hash identifier: 0swIh1YC8n4W4wD7t05aDGpKFIv7uZJzD9LE7Rlw9b0= Subject key identifier: 87:F2:8A:78:C0:B3:ED:74:75:8F:38:8A:B1:0E:9C:D4:24:10:48:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB312B67CD143959C1951800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa Signing time: Wed 20 Aug 2025 11:34:48 +0000 ROA not before: Wed 20 Aug 2025 11:34:48 +0000 ROA not after: Tue 18 Nov 2025 12:34:48 +0000 asID: 31898 IP address blocks: 64.181.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:31:2b:67:cd:14:39:59:c1:95:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 11:34:48 2025 GMT Not After : Nov 18 12:34:48 2025 GMT Subject: CN=80b82ed1-ed87-433b-a99e-9a1de9dc0061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:5e:2c:bc:36:e1:c8:8b:bd:87:9e:4c:e1: f1:fc:56:f2:27:57:ac:e1:42:53:f2:05:9a:9b:f4: 74:8a:15:eb:97:7c:91:96:70:2b:76:ba:b0:c5:51: c8:a6:74:e4:3e:52:8f:a7:c5:37:b9:bb:52:35:21: 35:a5:c3:f7:76:f7:b0:18:ec:fb:90:5f:d0:5d:41: 74:73:d9:2f:5b:aa:e4:af:1c:38:33:06:41:3f:18: a2:69:26:de:97:d4:40:82:86:bd:68:e3:08:ca:55: e2:89:80:47:7c:02:4e:b4:fc:af:30:b6:98:d4:a8: f1:1b:95:10:62:14:26:7e:2a:b7:a5:2a:a4:88:a7: e8:d6:b0:11:1f:a0:80:58:ce:72:63:4e:54:bb:06: d1:6e:ff:a6:34:ec:7a:df:68:28:25:0a:91:bf:fb: 9d:de:e5:ce:12:f5:d2:ab:33:1d:b7:f9:82:63:f5: 20:6f:bc:50:d8:0d:47:5b:d0:3c:94:a1:5c:18:89: 26:4c:94:5b:53:97:84:08:73:50:fa:ab:fb:08:1e: 70:94:5f:5b:a2:d5:44:d3:b3:6d:f6:44:ec:29:16: 20:f0:c8:aa:05:42:82:09:ac:c7:7f:37:fc:0c:9d: 59:7b:42:91:ac:b9:c6:92:17:8e:50:52:d6:9f:a0: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F2:8A:78:C0:B3:ED:74:75:8F:38:8A:B1:0E:9C:D4:24:10:48:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3aee60c-17be-3d6e-a062-eace2af95bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 64.181.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:da:12:15:3f:60:b6:a0:c7:85:d6:e4:f9:f9:b1:89:0e:d3: 67:fb:fa:b6:b9:1d:b8:d2:6a:05:6d:6a:6d:7e:04:2c:7e:29: 5a:46:d8:71:b1:91:60:c6:3b:15:fb:fd:57:ee:b7:54:7a:47: 46:53:5e:d5:8d:4b:b4:6e:60:4f:8b:95:35:a3:d3:8f:ce:7c: e9:e9:c8:60:f1:66:36:08:42:fe:a8:42:84:e7:e9:2e:c8:44: ae:7d:89:39:21:d9:25:38:dd:ba:a1:1a:7f:0d:d7:c7:d2:88: 89:2b:b7:8d:a6:4f:95:73:91:3c:75:44:5b:9b:29:91:11:47: 37:a5:54:b0:f0:8b:4d:7f:ad:ff:2f:47:d4:0c:a9:f1:a6:85: cd:0f:b3:2e:64:ff:89:f5:af:a6:92:67:b5:c3:83:d5:48:08: ae:df:b7:e1:98:d1:42:0a:32:04:8e:91:34:8f:17:77:95:a6: aa:35:78:d4:10:3c:3f:74:90:83:9c:9f:69:e4:4b:b2:ef:16: d8:16:f7:18:7a:2b:a8:ba:be:75:7e:11:8d:ba:7e:a1:93:79: 2d:e3:0f:4b:78:48:d6:36:41:bb:c1:52:7b:5e:cf:8b:69:c1: cf:16:dc:18:de:cb:7f:fd:f4:3f:7d:29:77:f0:d6:1a:a8:b6: fc:1b:24:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrMStnzRQ5WcGVGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDExMzQ0OFoXDTI1MTExODEyMzQ0OFowLzEtMCsGA1UEAxMk ODBiODJlZDEtZWQ4Ny00MzNiLWE5OWUtOWExZGU5ZGMwMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7BeLLw24ciLvYeeTOHx/FbyJ1es4UJT8gWa m/R0ihXrl3yRlnArdrqwxVHIpnTkPlKPp8U3ubtSNSE1pcP3dvewGOz7kF/QXUF0 c9kvW6rkrxw4MwZBPxiiaSbel9RAgoa9aOMIylXiiYBHfAJOtPyvMLaY1KjxG5UQ YhQmfiq3pSqkiKfo1rARH6CAWM5yY05UuwbRbv+mNOx632goJQqRv/ud3uXOEvXS qzMdt/mCY/Ugb7xQ2A1HW9A8lKFcGIkmTJRbU5eECHNQ+qv7CB5wlF9botVE07Nt 9kTsKRYg8MiqBUKCCazHfzf8DJ1Ze0KRrLnGkheOUFLWn6DS4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfyinjAs+10dY84irEOnNQkEEjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNhZWU2MGMtMTdiZS0z ZDZlLWEwNjItZWFjZTJhZjk1YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzaEhU/YLagx4XW5Pn5sYkO02f7+ra5HbjSagVtam1+BCx+KVpG2HGx kWDGOxX7/Vfut1R6R0ZTXtWNS7RuYE+LlTWj04/OfOnpyGDxZjYIQv6oQoTn6S7I RK59iTkh2SU43bqhGn8N18fSiIkrt42mT5VzkTx1RFubKZERRzelVLDwi01/rf8v R9QMqfGmhc0Psy5k/4n1r6aSZ7XDg9VICK7ft+GY0UIKMgSOkTSPF3eVpqo1eNQQ PD90kIOcn2nkS7LvFtgW9xh6K6i6vnV+EY26fqGTeS3jD0t4SNY2QbvBUntez4tp wc8W3Bjey3/99D99KXfw1hqotvwbJPc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:30 2025 by rpki-client