$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa File: cc642cc8-e962-3e0e-9fd3-b811e41de541.roa (raw, json) Hash identifier: Oo7z1ochmbyxE09sno/2CEPU015+7YkJGJa2WeoSZHU= Subject key identifier: 94:44:91:80:C0:17:01:B8:A1:0C:C5:40:E6:06:06:89:89:CD:3C:32 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584A89A60E9CE93586D30E4A07C0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:0e:9c:e9:35:86:d3:0e:4a:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=c2f0a478-c860-4e75-a52e-6aaa9aa21820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:3e:55:b2:03:0e:47:6f:53:7a:62:df:40: 1e:9f:52:c6:6f:1d:12:5c:86:bd:83:44:62:0d:78: 22:71:9e:3e:09:4e:76:bd:0b:ff:a7:38:48:58:d9: 2a:34:1f:e4:e0:6d:67:de:e6:46:4b:c5:c4:32:2c: 3c:ca:42:98:b7:28:26:24:7c:25:0f:4d:2e:9d:f2: 75:99:4e:6b:e9:21:8b:53:05:6c:8a:cc:9c:ec:fa: da:94:b9:4a:b2:80:47:ce:bb:6c:1c:ae:6a:04:fc: bc:11:eb:b6:02:1e:7f:74:f5:a1:82:a1:e7:ea:08: a0:8c:81:a0:3a:7b:5d:3d:07:24:cd:8f:45:31:7c: 2f:7d:2e:2e:5b:72:25:6b:f5:d9:fc:b3:87:31:42: 43:57:3f:67:26:3a:a0:88:a0:af:c2:8c:3b:1b:d5: c0:7f:f1:eb:d2:c2:b3:c1:be:ce:bc:49:8b:da:67: c2:88:29:00:1d:26:1b:ab:ab:a7:fd:fb:35:6d:b5: 3d:ae:20:19:3f:c9:9f:64:c9:dc:45:27:b5:a2:63: cf:84:26:5c:81:ac:a2:2d:f0:5e:70:ed:8b:75:e5: 2b:46:f4:c2:dd:5a:cd:61:c8:e6:0f:c7:f6:29:50: 52:16:7e:73:8a:ca:7e:f0:91:f7:27:2d:c3:5b:51: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:91:80:C0:17:01:B8:A1:0C:C5:40:E6:06:06:89:89:CD:3C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:27:5e:5b:5e:a1:7e:77:bf:42:ea:8c:c0:7c:93:fa:45:7f: a3:a9:41:7e:e0:62:35:71:bd:26:b3:41:14:2f:b4:ec:1f:c5: e4:fe:18:bc:48:26:9f:79:33:c9:31:8d:ed:84:d8:34:d3:7f: 97:72:12:c5:3c:58:b7:e2:9b:9c:a2:75:bb:e8:b7:35:7d:ea: 97:0f:15:9d:a0:ca:d1:39:30:86:6a:0f:bd:1c:e1:b8:c2:4f: 0d:eb:06:dc:39:b4:e6:6b:9f:65:ff:60:99:98:6d:18:49:07: fa:8b:68:3a:9b:4a:fe:89:96:95:0d:68:8e:e0:47:d6:1c:d0: 06:53:74:77:a7:a6:e3:b9:ec:29:ff:dc:c0:3f:94:ff:fa:7d: 39:ea:44:39:1c:19:6b:80:7b:e2:54:98:d2:ba:1a:de:05:c3: f3:ae:77:d8:50:5f:da:09:33:8c:b5:e3:61:42:23:58:59:28: 67:cb:01:a8:a0:98:54:41:2f:c2:a6:c3:72:32:07:f1:79:0a: 6d:ff:ec:80:a9:cd:06:1c:18:8e:a0:87:ec:cf:a4:27:f8:ab: 40:87:33:83:54:4b:c6:e9:7b:90:e4:68:b4:c6:62:e7:be:20: 03:49:9b:1c:fa:50:25:dd:6a:80:9b:b7:4f:ed:eb:19:f0:cc: 32:46:0d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpg6c6TWG0w5KB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YzJmMGE0NzgtYzg2MC00ZTc1LWE1MmUtNmFhYTlhYTIxODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nU+VbIDDkdvU3pi30Aen1LGbx0SXIa9g0Ri DXgicZ4+CU52vQv/pzhIWNkqNB/k4G1n3uZGS8XEMiw8ykKYtygmJHwlD00unfJ1 mU5r6SGLUwVsisyc7PralLlKsoBHzrtsHK5qBPy8Eeu2Ah5/dPWhgqHn6gigjIGg OntdPQckzY9FMXwvfS4uW3Ila/XZ/LOHMUJDVz9nJjqgiKCvwow7G9XAf/Hr0sKz wb7OvEmL2mfCiCkAHSYbq6un/fs1bbU9riAZP8mfZMncRSe1omPPhCZcgayiLfBe cO2LdeUrRvTC3VrNYcjmD8f2KVBSFn5zisp+8JH3Jy3DW1EuNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJREkYDAFwG4oQzFQOYGBomJzTwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2M2NDJjYzgtZTk2Mi0z ZTBlLTlmZDMtYjgxMWU0MWRlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQnXlteoX53v0LqjMB8k/pFf6OpQX7gYjVxvSazQRQvtOwfxeT+GLxI Jp95M8kxje2E2DTTf5dyEsU8WLfim5yidbvotzV96pcPFZ2gytE5MIZqD70c4bjC Tw3rBtw5tOZrn2X/YJmYbRhJB/qLaDqbSv6JlpUNaI7gR9Yc0AZTdHenpuO57Cn/ 3MA/lP/6fTnqRDkcGWuAe+JUmNK6Gt4Fw/Oud9hQX9oJM4y142FCI1hZKGfLAaig mFRBL8Kmw3IyB/F5Cm3/7ICpzQYcGI6gh+zPpCf4q0CHM4NUS8bpe5DkaLTGYue+ IANJmxz6UCXdaoCbt0/t6xnwzDJGDTo= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:37 2025 by rpki-client