$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa File: f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa (raw, json) Hash identifier: XcqlFeTlKfOmfrJw8LxD5whTwvAMw5TSf+LV61R8Y5g= Subject key identifier: A8:53:A7:BD:1F:41:EE:9F:A2:EC:D4:C5:F3:22:9C:B9:37:8E:89:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA05525F6400D37F06CC080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa Signing time: Thu 21 Aug 2025 17:06:12 +0000 ROA not before: Thu 21 Aug 2025 17:06:12 +0000 ROA not after: Wed 19 Nov 2025 18:06:12 +0000 asID: 31898 IP address blocks: 159.112.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:55:25:f6:40:0d:37:f0:6c:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:06:12 2025 GMT Not After : Nov 19 18:06:12 2025 GMT Subject: CN=ade02208-4c47-4453-9948-e317ac61b589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:91:67:14:a1:8b:f9:b7:9d:ea:36:57:b1: ce:1a:2b:91:87:4e:c9:33:fb:15:53:04:a8:61:36: 6f:20:ad:f6:ae:6a:5a:e9:7c:16:02:d9:ee:ee:af: ab:b5:df:15:cb:2b:b0:89:b3:38:ef:53:78:17:b4: 2c:c3:03:8d:4e:b1:62:88:38:54:99:d0:22:d1:ff: 78:cf:23:46:5e:62:15:2f:c5:44:9a:6e:05:99:c4: 6a:19:45:7c:25:c8:0f:ea:73:7f:5e:5f:a5:8a:f1: 7c:85:54:0a:a7:00:e3:e7:a1:87:48:29:4f:c1:d2: 6e:c7:df:a6:5c:40:7f:c2:af:11:92:4e:03:35:51: 02:8d:37:84:41:e1:4e:0a:36:b9:9c:dc:ce:c9:2e: 40:fd:6a:df:33:ca:05:63:2f:32:12:04:bf:90:11: 6a:50:5e:ff:29:7b:38:21:2c:88:7e:eb:5b:2f:0e: 98:8d:67:d0:0b:4b:b6:2b:90:be:86:7f:1f:82:d2: 5c:01:de:c1:6d:ca:a1:ec:56:74:99:1d:87:5e:cb: 79:78:19:da:4d:2e:30:5f:83:53:d4:1a:4e:3c:88: 7a:9a:32:48:a7:86:1f:22:ff:61:95:85:a6:e3:f1: 83:48:b2:38:aa:e0:a7:2b:bb:4f:21:5c:30:2b:a3: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:A7:BD:1F:41:EE:9F:A2:EC:D4:C5:F3:22:9C:B9:37:8E:89:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5464ec8-9296-3ab4-bccf-6d6d296147d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.112.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7f:06:9e:65:70:70:e9:3f:1e:55:07:c0:2d:04:89:7d:1b: 53:af:35:de:bb:39:31:78:ed:90:59:a6:45:29:48:06:ec:f6: 18:49:7c:6a:fb:a9:2b:46:8f:f1:c2:ce:33:06:bd:e0:4c:13: 44:f4:34:03:48:9b:2b:36:e5:f3:01:45:18:ce:63:9b:67:86: 0d:75:43:cd:28:30:1b:9e:c9:42:1e:a1:0c:19:46:ad:26:20: 99:02:0b:a4:4f:51:20:20:6b:3c:f0:13:7e:50:36:88:a6:94: ea:7d:0c:1c:49:9b:cf:0b:2b:22:07:6b:ac:5b:3f:34:5f:2d: fa:d3:9b:db:b6:0e:af:8a:5b:c7:e0:3d:1c:96:0c:96:b1:3e: 55:57:c6:2f:b5:a5:db:22:ac:91:1d:dd:36:6a:65:ce:b9:af: 3b:61:a2:36:68:5f:62:86:9d:b4:25:88:22:93:24:af:68:ec: 4d:34:67:83:e3:69:28:ef:05:67:45:12:fa:8e:83:ea:7b:56: 91:05:53:9e:ff:31:5f:55:f4:fc:1b:d0:f2:51:cd:ca:ed:82: 8d:29:e2:25:7e:44:16:3c:69:d6:3d:c4:14:2b:a0:ce:8f:4b: 29:9e:d6:1d:f4:67:81:e2:bb:1c:de:d2:2c:ad:5e:2e:8e:3f: c1:ad:71:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoFUl9kANN/BswIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDYxMloXDTI1MTExOTE4MDYxMlowLzEtMCsGA1UEAxMk YWRlMDIyMDgtNGM0Ny00NDUzLTk5NDgtZTMxN2FjNjFiNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthSRZxShi/m3neo2V7HOGiuRh07JM/sVUwSo YTZvIK32rmpa6XwWAtnu7q+rtd8VyyuwibM471N4F7QswwONTrFiiDhUmdAi0f94 zyNGXmIVL8VEmm4FmcRqGUV8JcgP6nN/Xl+livF8hVQKpwDj56GHSClPwdJux9+m XEB/wq8Rkk4DNVECjTeEQeFOCja5nNzOyS5A/WrfM8oFYy8yEgS/kBFqUF7/KXs4 ISyIfutbLw6YjWfQC0u2K5C+hn8fgtJcAd7Bbcqh7FZ0mR2HXst5eBnaTS4wX4NT 1BpOPIh6mjJIp4YfIv9hlYWm4/GDSLI4quCnK7tPIVwwK6O2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhTp70fQe6fouzUxfMinLk3jonRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjU0NjRlYzgtOTI5Ni0z YWI0LWJjY2YtNmQ2ZDI5NjE0N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn3CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh/Bp5lcHDpPx5VB8AtBIl9G1OvNd67OTF47ZBZpkUpSAbs9hhJfGr7 qStGj/HCzjMGveBME0T0NANImys25fMBRRjOY5tnhg11Q80oMBueyUIeoQwZRq0m IJkCC6RPUSAgazzwE35QNoimlOp9DBxJm88LKyIHa6xbPzRfLfrTm9u2Dq+KW8fg PRyWDJaxPlVXxi+1pdsirJEd3TZqZc65rzthojZoX2KGnbQliCKTJK9o7E00Z4Pj aSjvBWdFEvqOg+p7VpEFU57/MV9V9Pwb0PJRzcrtgo0p4iV+RBY8adY9xBQroM6P Syme1h30Z4Hiuxze0iytXi6OP8GtcTE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:43 2025 by rpki-client