$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa File: eea532ab-078c-39c1-ab60-65d324b56dbe.roa (raw, json) Hash identifier: pQTu9dvVQ0KiFuqrsRSetGxPpFSEG91TWtPYfOPpEMY= Subject key identifier: 48:2D:C7:DF:0F:0A:60:52:10:C1:A8:72:7A:A8:17:38:19:C0:19:3C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA060C4F9A69FF73E25AE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa Signing time: Thu 21 Aug 2025 17:06:17 +0000 ROA not before: Thu 21 Aug 2025 17:06:17 +0000 ROA not after: Wed 19 Nov 2025 18:06:17 +0000 asID: 31898 IP address blocks: 161.153.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:60:c4:f9:a6:9f:f7:3e:25:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:17 2025 GMT Not After : Nov 19 18:06:17 2025 GMT Subject: CN=7c25deb0-4377-4a37-8700-225002c26c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:3f:8e:37:65:5d:bd:fe:88:46:c6:26:3f: 5d:e7:c6:04:a4:d3:7d:d4:de:97:13:33:7e:49:ad: 7d:8f:c0:b0:0a:24:f9:f6:c2:4a:23:40:c6:5e:61: f8:8d:35:fa:c3:b2:3b:f0:66:08:63:67:2d:c3:53: 9b:e8:99:1a:93:68:40:1a:c5:08:40:50:7c:52:c6: 75:69:54:dd:55:c9:cd:5f:fb:34:e2:a1:ce:ba:b0: cc:74:a8:b3:d7:97:b0:77:ce:35:f7:ca:4f:f1:66: 78:8e:69:5b:f1:28:e4:ea:25:02:a8:a6:47:59:18: cc:cb:62:c9:aa:43:be:85:29:f3:a3:6e:bb:85:12: 2f:1d:0c:41:c3:83:8b:05:f5:06:ec:ac:9a:1c:3a: 88:20:88:0d:e6:3b:90:db:b1:66:5a:19:52:6f:fb: 97:f0:9d:3b:c4:d1:85:ea:00:8e:f9:7d:64:d8:22: 45:fb:e5:bb:18:04:58:40:ec:b7:00:23:15:d4:ae: 97:65:f8:ec:df:e1:f2:88:cc:3c:f7:2d:9a:1e:b6: b7:5e:d9:d7:17:a0:d5:4b:1b:60:5e:8d:a8:3a:a7: 03:a6:0b:a4:9a:6a:eb:46:f0:39:36:cf:ea:ed:fc: e5:af:ec:09:01:f5:ca:14:d5:ee:4a:09:5c:48:b8: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2D:C7:DF:0F:0A:60:52:10:C1:A8:72:7A:A8:17:38:19:C0:19:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eea532ab-078c-39c1-ab60-65d324b56dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:95:08:08:f0:ff:da:80:3d:d0:b6:90:d7:cd:c3:d3:99:49: e9:ff:c0:65:e8:3c:2d:9d:ed:3e:02:b1:8a:50:85:b2:c6:0f: c8:2b:6a:5e:69:1a:76:44:06:d1:38:f7:ba:fd:33:32:f3:68: 6b:6d:41:45:73:fb:3c:22:27:f6:4d:54:72:5d:9a:c1:d7:24: fb:77:b2:34:36:80:25:71:10:7e:f5:94:81:72:c3:31:0d:35: 74:af:cd:c8:6f:59:5a:1c:3d:6d:c0:ec:42:d5:04:f6:1d:b6: 4a:3d:3b:57:ae:24:c5:b4:53:65:2d:30:8a:5b:72:31:a3:2b: a9:b9:6e:c6:9f:40:a6:91:25:0f:71:54:8e:5a:24:78:ea:80: 33:16:46:cd:8e:52:d7:05:08:15:68:1f:7f:c2:38:40:36:50: ad:83:cf:b7:73:22:17:db:1f:df:cd:32:39:05:72:08:4a:4c: 90:b6:38:38:c0:4b:16:3a:42:13:e0:b6:40:4e:48:7d:68:6b: 70:aa:ba:97:00:13:7c:3d:1f:2b:84:20:b7:2d:43:fd:f6:34: a3:ce:49:79:66:bf:23:b4:7a:ef:6d:4b:8b:1d:42:03:fb:43: b5:b0:3c:65:56:88:ac:53:f9:98:a9:15:b2:89:2b:25:3f:ff: b1:03:61:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoGDE+aaf9z4lrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYxN1oXDTI1MTExOTE4MDYxN1owLzEtMCsGA1UEAxMk N2MyNWRlYjAtNDM3Ny00YTM3LTg3MDAtMjI1MDAyYzI2YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3g/jjdlXb3+iEbGJj9d58YEpNN91N6XEzN+ Sa19j8CwCiT59sJKI0DGXmH4jTX6w7I78GYIY2ctw1Ob6Jkak2hAGsUIQFB8UsZ1 aVTdVcnNX/s04qHOurDMdKiz15ewd84198pP8WZ4jmlb8Sjk6iUCqKZHWRjMy2LJ qkO+hSnzo267hRIvHQxBw4OLBfUG7KyaHDqIIIgN5juQ27FmWhlSb/uX8J07xNGF 6gCO+X1k2CJF++W7GARYQOy3ACMV1K6XZfjs3+HyiMw89y2aHra3XtnXF6DVSxtg Xo2oOqcDpgukmmrrRvA5Ns/q7fzlr+wJAfXKFNXuSglcSLiqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgtx98PCmBSEMGocnqoFzgZwBk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWVhNTMyYWItMDc4Yy0z OWMxLWFiNjAtNjVkMzI0YjU2ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoZn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyVCAjw/9qAPdC2kNfNw9OZSen/wGXoPC2d7T4CsYpQhbLGD8gral5p GnZEBtE497r9MzLzaGttQUVz+zwiJ/ZNVHJdmsHXJPt3sjQ2gCVxEH71lIFywzEN NXSvzchvWVocPW3A7ELVBPYdtko9O1euJMW0U2UtMIpbcjGjK6m5bsafQKaRJQ9x VI5aJHjqgDMWRs2OUtcFCBVoH3/COEA2UK2Dz7dzIhfbH9/NMjkFcghKTJC2ODjA SxY6QhPgtkBOSH1oa3CqupcAE3w9HyuEILctQ/32NKPOSXlmvyO0eu9tS4sdQgP7 Q7WwPGVWiKxT+ZipFbKJKyU//7EDYeM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:52 2025 by rpki-client