$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa File: fde4a4e5-df22-35a2-8f89-3598e07ad613.roa (raw, json) Hash identifier: wWXHWueHZhXndL7oyCGz3EgM1cmkuyDmVS/56agBd80= Subject key identifier: CA:6E:4B:7A:31:86:E7:E9:A5:D3:7E:DB:AB:2E:67:88:F1:B5:72:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF01577B35C9C50BC88882940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa Signing time: Fri 22 Aug 2025 05:38:01 +0000 ROA not before: Fri 22 Aug 2025 05:38:01 +0000 ROA not after: Thu 20 Nov 2025 06:38:01 +0000 asID: 31898 IP address blocks: 157.137.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:15:77:b3:5c:9c:50:bc:88:88:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:38:01 2025 GMT Not After : Nov 20 06:38:01 2025 GMT Subject: CN=b87f1ea0-9c32-497d-b11c-2405a08a2d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:75:53:56:b5:cb:b1:3c:1f:4c:b9:80:75: 96:56:1a:88:a4:dc:4f:d7:2d:d3:6e:e1:6f:1f:af: 1a:be:20:fb:2b:05:65:cf:56:af:0f:d0:50:f3:a9: 6c:fc:0d:94:f8:0f:d7:50:ce:16:ba:c4:98:45:4a: b0:cb:8b:a9:a6:40:de:a7:48:1c:33:20:f2:12:07: de:51:61:cb:f5:4a:b7:89:13:31:42:28:2d:b1:11: f5:4f:1f:3b:bf:ba:9f:17:dc:49:d6:1e:f1:75:a3: ec:c9:8e:6b:39:1d:d0:02:e8:9e:a3:82:43:4c:28: 03:4e:22:42:c2:1c:71:a9:7f:f6:42:08:7f:56:54: c7:27:01:85:44:6c:b9:d1:61:94:86:6f:b3:65:28: c6:c1:89:66:92:67:b6:a5:bb:c8:58:87:a2:ab:01: 07:8c:ed:29:73:db:c6:c0:c8:59:c6:69:cc:a3:78: 15:e5:9e:0d:1d:b9:6f:3c:5f:a6:ed:f2:83:b5:0a: cc:5a:ab:cf:05:91:8d:ea:29:6e:96:12:05:78:dc: 06:63:f3:f1:73:e0:f9:51:f1:0f:90:e2:fa:61:73: eb:1d:73:7a:46:f8:6b:30:26:3c:9e:a8:b0:c5:6f: ba:99:f2:12:76:06:c7:72:c0:cb:f3:25:c7:f8:00: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:4B:7A:31:86:E7:E9:A5:D3:7E:DB:AB:2E:67:88:F1:B5:72:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fde4a4e5-df22-35a2-8f89-3598e07ad613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e3:51:5e:e6:d7:0a:25:29:e3:d5:43:12:a6:75:f7:be:ff: c6:34:10:75:00:1a:8b:8d:4e:29:24:6d:42:81:cd:58:22:fc: 87:34:88:c2:eb:88:6c:a8:55:19:ad:95:35:96:f5:dc:c0:52: e9:16:59:dd:91:ae:ce:a7:e8:d6:b2:f6:b2:73:9b:4a:fe:9a: 1e:f0:29:af:89:7f:b9:a1:de:d0:98:ad:44:3c:1d:0b:d5:bb: 07:c0:76:9a:59:e9:b1:21:ca:a2:da:9c:b8:62:17:e3:55:42: a5:78:54:f4:35:30:12:14:2a:73:f6:60:47:10:0b:09:1a:02: 42:34:f3:d8:19:be:83:3f:4a:4c:cd:a4:79:ac:5a:a6:05:bf: df:f4:b2:e3:c6:36:33:6d:6a:8e:77:d2:b6:91:e3:a8:c0:64: 89:44:eb:40:db:08:e6:10:9c:bf:0d:1e:6a:23:38:32:57:65: 27:a7:d8:f6:76:85:18:24:c7:78:0b:cf:03:85:52:3f:af:49: 5c:33:86:d6:35:2a:40:e0:12:53:70:3f:ca:37:03:4c:53:41: 1f:13:0e:79:56:a2:19:56:c6:da:87:f7:80:71:e5:4f:f2:e4: d1:36:4c:9a:58:a8:bf:80:45:56:52:c2:75:2b:86:d7:fb:93: bd:13:94:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFXezXJxQvIiIKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzgwMVoXDTI1MTEyMDA2MzgwMVowLzEtMCsGA1UEAxMk Yjg3ZjFlYTAtOWMzMi00OTdkLWIxMWMtMjQwNWEwOGEyZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpV1U1a1y7E8H0y5gHWWVhqIpNxP1y3TbuFv H68aviD7KwVlz1avD9BQ86ls/A2U+A/XUM4WusSYRUqwy4uppkDep0gcMyDyEgfe UWHL9Uq3iRMxQigtsRH1Tx87v7qfF9xJ1h7xdaPsyY5rOR3QAuieo4JDTCgDTiJC whxxqX/2Qgh/VlTHJwGFRGy50WGUhm+zZSjGwYlmkme2pbvIWIeiqwEHjO0pc9vG wMhZxmnMo3gV5Z4NHblvPF+m7fKDtQrMWqvPBZGN6ilulhIFeNwGY/Pxc+D5UfEP kOL6YXPrHXN6RvhrMCY8nqiwxW+6mfISdgbHcsDL8yXH+AAQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpuS3oxhufppdN+26suZ4jxtXLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRlNGE0ZTUtZGYyMi0z NWEyLThmODktMzU5OGUwN2FkNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnYmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7jUV7m1wolKePVQxKmdfe+/8Y0EHUAGouNTikkbUKBzVgi/Ic0iMLr iGyoVRmtlTWW9dzAUukWWd2Rrs6n6Nay9rJzm0r+mh7wKa+Jf7mh3tCYrUQ8HQvV uwfAdppZ6bEhyqLanLhiF+NVQqV4VPQ1MBIUKnP2YEcQCwkaAkI089gZvoM/SkzN pHmsWqYFv9/0suPGNjNtao530raR46jAZIlE60DbCOYQnL8NHmojODJXZSen2PZ2 hRgkx3gLzwOFUj+vSVwzhtY1KkDgElNwP8o3A0xTQR8TDnlWohlWxtqH94Bx5U/y 5NE2TJpYqL+ARVZSwnUrhtf7k70TlME= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:23 2025 by rpki-client