$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa File: 02ffddf9-85c6-3491-ae52-3ebc24347218.roa (raw, json) Hash identifier: 3lE0ngoDgDwqwcoagrZ5w2XI7bbBmQBQibZ01bUOrv8= Subject key identifier: E6:1A:86:78:88:3E:FD:7A:E7:2F:B4:7A:BB:82:A9:B2:7C:C3:A9:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A776978EB152184008390 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa Signing time: Thu 21 Aug 2025 13:08:43 +0000 ROA not before: Thu 21 Aug 2025 13:08:43 +0000 ROA not after: Wed 19 Nov 2025 14:08:43 +0000 asID: 31898 IP address blocks: 159.54.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:77:69:78:eb:15:21:84:00:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:43 2025 GMT Not After : Nov 19 14:08:43 2025 GMT Subject: CN=bed0f52a-4521-4b6f-a452-b34a0aa82f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:b3:40:7e:95:c2:5e:41:35:d3:3c:cc:fb: 4a:e1:ec:53:58:56:36:67:2d:e2:dc:dc:a5:20:27: 0c:4c:0c:82:78:e3:48:69:e8:53:85:0e:2d:da:78: 07:b4:b3:e0:20:79:9c:75:6a:8b:8f:a6:36:e1:28: 82:f4:50:53:d9:8a:69:70:da:2b:be:ae:d7:78:8b: f5:e7:a7:8f:98:62:84:2f:03:94:f0:b4:92:7e:ba: 52:ef:79:e8:73:aa:76:b3:99:7d:b3:68:04:23:ca: d6:d9:5e:e8:90:ee:0e:a0:8a:5d:9e:fe:f4:63:58: 2c:56:73:e0:78:f5:ce:79:69:5d:07:a9:07:63:c5: be:74:16:d8:4f:d7:76:77:8f:b8:db:ea:0c:4b:45: 0a:db:80:09:dd:7a:6d:e4:0b:5a:f9:c4:f5:35:e9: 35:66:63:da:17:10:92:43:2b:2a:18:fb:4c:b7:91: f2:e8:f1:62:e4:b4:e4:35:a8:27:6d:e0:e9:0e:32: 46:9e:d2:73:f2:54:7c:55:1b:46:ea:5e:60:fc:84: 9d:7e:3f:2e:70:2d:d0:04:fc:9f:28:6a:1c:d5:8f: fe:e7:f5:d7:9d:9f:57:ec:76:28:9d:ce:5f:c2:f9: 51:2d:c2:27:56:2a:30:46:32:79:58:15:5a:99:e1: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1A:86:78:88:3E:FD:7A:E7:2F:B4:7A:BB:82:A9:B2:7C:C3:A9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.54.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:bf:ca:55:06:45:11:3c:d9:df:88:99:16:17:e9:40:75:b4: 03:a4:fc:f1:75:d1:71:fe:77:2e:ae:34:06:49:9d:18:72:af: 09:b6:84:5a:cc:c3:85:68:d2:98:97:77:fe:69:7a:f5:82:44: d9:12:99:ec:b0:56:16:5f:ec:b1:17:83:e5:27:de:ee:03:d5: 18:32:95:1b:2b:5f:03:b2:2d:e1:28:90:ba:e5:ac:8c:9b:a9: 92:73:5b:8e:9a:ab:ac:e2:2d:d4:cf:16:7a:d6:e0:59:f2:52: ab:4f:8f:5a:f3:bd:7b:01:40:57:a5:b5:df:fd:d9:a7:32:99: cb:ca:19:e5:9b:4f:f7:3a:35:64:9b:8c:05:59:9d:ff:8e:64: fb:c2:6a:5e:b2:e0:51:e0:5e:01:85:17:19:e4:f8:47:21:d3: 3b:25:e8:f8:fb:a8:a8:71:a0:cd:35:75:87:09:b6:fa:36:f7: 26:00:10:36:41:22:99:ca:71:3c:d0:1c:6d:8c:d8:f9:0d:99: 8f:22:bf:b7:74:45:e9:ae:2b:55:fa:78:21:e5:8b:b7:50:e2: 91:7c:5f:da:b3:e4:21:07:1e:a8:eb:d1:9a:3c:fd:9a:bc:ff: 14:dd:bd:42:48:78:47:86:49:60:c3:7b:ee:fe:68:5c:84:14: 18:21:07:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKndpeOsVIYQAg5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDg0M1oXDTI1MTExOTE0MDg0M1owLzEtMCsGA1UEAxMk YmVkMGY1MmEtNDUyMS00YjZmLWE0NTItYjM0YTBhYTgyZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sCzQH6Vwl5BNdM8zPtK4exTWFY2Zy3i3Nyl ICcMTAyCeONIaehThQ4t2ngHtLPgIHmcdWqLj6Y24SiC9FBT2YppcNorvq7XeIv1 56ePmGKELwOU8LSSfrpS73noc6p2s5l9s2gEI8rW2V7okO4OoIpdnv70Y1gsVnPg ePXOeWldB6kHY8W+dBbYT9d2d4+42+oMS0UK24AJ3Xpt5Ata+cT1Nek1ZmPaFxCS QysqGPtMt5Hy6PFi5LTkNagnbeDpDjJGntJz8lR8VRtG6l5g/ISdfj8ucC3QBPyf KGoc1Y/+5/XXnZ9X7HYonc5fwvlRLcInViowRjJ5WBVameGkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYahniIPv165y+0eruCqbJ8w6mhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDJmZmRkZjktODVjNi0z NDkxLWFlNTItM2ViYzI0MzQ3MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnzagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK/ylUGRRE82d+ImRYX6UB1tAOk/PF10XH+dy6uNAZJnRhyrwm2hFrM w4Vo0piXd/5pevWCRNkSmeywVhZf7LEXg+Un3u4D1RgylRsrXwOyLeEokLrlrIyb qZJzW46aq6ziLdTPFnrW4FnyUqtPj1rzvXsBQFeltd/92acymcvKGeWbT/c6NWSb jAVZnf+OZPvCal6y4FHgXgGFFxnk+Ech0zsl6Pj7qKhxoM01dYcJtvo29yYAEDZB IpnKcTzQHG2M2PkNmY8iv7d0RemuK1X6eCHli7dQ4pF8X9qz5CEHHqjr0Zo8/Zq8 /xTdvUJIeEeGSWDDe+7+aFyEFBghB0c= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:06 2025 by rpki-client