$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa File: ff1445e0-469f-31d5-a0b0-84a6c9008554.roa (raw, json) Hash identifier: d3ZwZBo0HwzDbyPSWIVxvRI7Fa33lQoqKDzoPTvnBq8= Subject key identifier: 5C:12:14:89:5D:44:56:19:A7:97:BD:D2:88:C5:53:EF:7E:86:B6:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAE0FE3552E8838A8249C20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa Signing time: Thu 21 Aug 2025 17:33:52 +0000 ROA not before: Thu 21 Aug 2025 17:33:52 +0000 ROA not after: Wed 19 Nov 2025 18:33:52 +0000 asID: 31898 IP address blocks: 159.54.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ae:0f:e3:55:2e:88:38:a8:24:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:52 2025 GMT Not After : Nov 19 18:33:52 2025 GMT Subject: CN=ccfb3fb7-1faa-4aca-922a-53f0f115e285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:5f:38:de:66:60:e1:c3:02:19:56:21:fe: fb:69:c0:d9:ef:ce:25:c9:1f:af:52:82:4c:f2:1a: 9a:c5:f0:b0:f4:1f:3d:51:fd:51:4f:bc:95:6a:93: 7f:53:56:8b:ef:c6:4d:8a:37:80:95:1c:31:dd:7a: 1c:5b:4e:ae:c3:65:3c:a5:95:dd:11:d8:a0:31:24: 32:46:f3:f9:c4:63:cd:70:1d:00:5b:b6:09:62:a3: a5:ca:37:99:03:06:70:ae:8d:3b:e1:58:e4:18:66: 22:96:0e:9a:80:f1:c2:4e:3d:94:cc:35:66:07:81: 1b:a9:63:c5:53:15:af:a4:a8:e4:9c:c6:57:19:4f: 27:0d:f7:5b:d6:bc:99:3e:49:e9:1f:fa:f7:f5:18: ae:b4:af:9e:d6:bc:d6:d7:4c:68:f1:e7:22:1a:85: 7c:43:28:86:89:6c:29:95:02:48:ff:f5:6d:2b:bb: fd:0a:0d:c9:80:99:6f:00:a3:b1:11:9d:bd:73:c4: d4:11:90:57:c7:ce:38:ce:93:c8:08:5d:87:1a:c3: 21:6d:9b:95:e1:eb:a9:ec:00:31:e6:d1:9d:13:1d: 2b:ed:0c:51:23:ef:17:f5:c2:2b:0b:f9:f0:9f:41: 7d:03:5b:33:3b:00:54:e8:50:77:9d:5b:1d:84:fe: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:14:89:5D:44:56:19:A7:97:BD:D2:88:C5:53:EF:7E:86:B6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff1445e0-469f-31d5-a0b0-84a6c9008554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.54.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:94:86:33:26:8d:ef:63:22:2f:8b:a9:ff:ae:22:b3:9e:32: 7d:52:09:21:20:89:93:c5:ab:a8:99:0b:48:0a:f7:9c:f5:0c: 75:42:d9:77:0f:ef:9a:c4:7e:33:54:ab:5e:b8:ab:32:9d:42: e4:b8:34:b1:06:7b:fc:6b:0c:f9:1c:09:b7:0e:28:e6:4f:e4: 91:23:3a:26:72:78:89:62:ab:38:57:a5:07:d2:64:7d:10:31: 0c:43:44:8f:c3:d5:70:72:ea:5f:1a:5b:31:d2:01:d3:ad:56: 9f:b4:11:54:b6:14:e9:15:a5:72:52:19:e2:25:e2:4a:76:f9: 85:8b:5e:96:3c:23:10:a0:e2:35:4d:42:2c:80:d7:22:59:d6: bf:08:2c:29:85:9c:07:fd:f0:e1:84:0a:92:25:07:42:cb:89: 53:22:48:d0:0f:69:07:be:2b:b8:f0:d4:1d:96:a9:e9:49:90: 10:ef:d7:4b:8a:35:82:00:dd:65:56:f6:b4:90:e7:bc:12:82: 0b:9e:5f:b2:04:5d:9e:c3:69:3a:bc:43:0d:fb:72:e5:0f:39: c0:70:21:a3:01:c6:51:56:e3:15:e6:d9:f5:1b:36:2a:fc:98: a0:b8:44:b9:34:9f:e2:66:d1:78:6e:62:21:90:3a:33:5c:58: a7:ce:c9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurg/jVS6IOKgknCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzM1MloXDTI1MTExOTE4MzM1MlowLzEtMCsGA1UEAxMk Y2NmYjNmYjctMWZhYS00YWNhLTkyMmEtNTNmMGYxMTVlMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa5fON5mYOHDAhlWIf77acDZ784lyR+vUoJM 8hqaxfCw9B89Uf1RT7yVapN/U1aL78ZNijeAlRwx3XocW06uw2U8pZXdEdigMSQy RvP5xGPNcB0AW7YJYqOlyjeZAwZwro074VjkGGYilg6agPHCTj2UzDVmB4EbqWPF UxWvpKjknMZXGU8nDfdb1ryZPknpH/r39RiutK+e1rzW10xo8eciGoV8QyiGiWwp lQJI//VtK7v9Cg3JgJlvAKOxEZ29c8TUEZBXx844zpPICF2HGsMhbZuV4eup7AAx 5tGdEx0r7QxRI+8X9cIrC/nwn0F9A1szOwBU6FB3nVsdhP5w0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwSFIldRFYZp5e90ojFU+9+hraYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmYxNDQ1ZTAtNDY5Zi0z MWQ1LWEwYjAtODRhNmM5MDA4NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnzZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeUhjMmje9jIi+Lqf+uIrOeMn1SCSEgiZPFq6iZC0gK95z1DHVC2XcP 75rEfjNUq164qzKdQuS4NLEGe/xrDPkcCbcOKOZP5JEjOiZyeIliqzhXpQfSZH0Q MQxDRI/D1XBy6l8aWzHSAdOtVp+0EVS2FOkVpXJSGeIl4kp2+YWLXpY8IxCg4jVN QiyA1yJZ1r8ILCmFnAf98OGECpIlB0LLiVMiSNAPaQe+K7jw1B2WqelJkBDv10uK NYIA3WVW9rSQ57wSggueX7IEXZ7DaTq8Qw37cuUPOcBwIaMBxlFW4xXm2fUbNir8 mKC4RLk0n+Jm0XhuYiGQOjNcWKfOyZE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:06 2025 by rpki-client