$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa File: 157a669d-49e7-3703-b00d-b654c64ec4a1.roa (raw, json) Hash identifier: O+5GXa3x9023afMs5GHe/RkZy56Lujg2KdNSEXHa9vA= Subject key identifier: A3:B0:B0:A9:E8:EF:11:63:59:B6:FE:48:9D:FB:49:69:91:AC:CC:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD43BA240628A435FB3F1700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa Signing time: Tue 26 Aug 2025 22:56:44 +0000 ROA not before: Tue 26 Aug 2025 22:56:44 +0000 ROA not after: Mon 24 Nov 2025 23:56:44 +0000 asID: 31898 IP address blocks: 192.22.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:ba:24:06:28:a4:35:fb:3f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:56:44 2025 GMT Not After : Nov 24 23:56:44 2025 GMT Subject: CN=7f787be7-1a80-4a97-9cbb-92be62fa6cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:44:4f:70:93:c7:78:4a:e8:aa:1d:8b:18: 54:15:a8:34:3d:c7:48:2e:c8:8f:65:bb:5e:3e:05: a7:64:d4:43:29:d7:34:66:29:63:12:8a:95:5a:dd: 76:85:f2:a1:60:2d:bf:24:91:0e:7d:eb:76:32:a2: 32:85:fe:0b:ed:71:22:1b:f5:2b:f7:94:3b:bc:b2: a3:5a:7d:bf:1b:fd:ab:1f:68:b9:a6:fa:57:cf:cc: 56:cc:d0:0d:14:ff:57:0c:82:19:50:ad:dd:88:48: 18:cb:57:1b:c6:ac:90:3c:f8:6c:c5:81:31:3a:72: c0:3c:94:6f:f2:5b:1e:79:53:d8:61:d8:c3:8e:75: 43:7f:64:8b:7f:c3:85:3e:2e:8a:c0:6e:51:69:c3: 59:13:aa:61:6c:5e:f7:d9:69:23:6f:73:fa:c8:96: 76:d2:b3:55:4b:bd:b1:61:46:9f:9c:35:4d:b4:be: b0:d4:e3:34:7e:1f:7c:41:62:d7:c1:c3:06:73:ab: 54:0d:9d:2d:e0:3d:8d:2f:4e:1d:52:ff:f7:f4:3e: 36:8a:9d:06:9c:02:3a:53:f7:b6:67:36:c3:b3:6f: b0:93:b5:5c:30:a1:e3:95:d6:47:6a:b7:49:ec:c0: ef:fa:dd:38:37:36:21:15:a9:69:fc:7c:84:a1:32: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:B0:A9:E8:EF:11:63:59:B6:FE:48:9D:FB:49:69:91:AC:CC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/157a669d-49e7-3703-b00d-b654c64ec4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.22.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0a:ec:e1:01:e9:84:2c:ce:42:ec:5c:b9:90:2a:17:44:de: 61:c6:15:9d:f2:8d:3d:e5:06:56:4d:b4:7d:fd:e7:08:a5:3e: 09:31:55:bb:76:54:b2:ba:81:05:00:08:3e:3c:82:c2:64:37: 75:8c:24:8f:cd:29:b3:ac:54:b7:27:e4:1c:7f:0b:a7:6e:6a: 9f:4e:3c:c5:f6:01:5e:36:8e:28:cf:a0:2d:95:0e:6a:c2:0c: 7e:90:51:72:5a:1e:ca:f5:67:58:44:80:c6:56:da:22:a9:83: f4:c4:a2:9f:00:46:37:63:42:82:f0:27:53:04:d5:72:3a:44: 32:43:1f:d3:d4:a7:e0:25:0a:65:7c:77:71:2e:9b:16:47:27: d1:68:a7:c6:68:ae:9a:5f:50:9f:17:9a:35:cc:e1:06:13:f0: 75:f4:49:01:da:bb:e8:98:e7:3f:31:4d:72:ba:37:99:a6:c3: ae:53:e5:22:71:59:f9:2f:4f:89:d0:09:e2:49:e7:ea:7c:f4: fc:d8:c2:c0:ea:8c:37:7f:55:03:15:37:63:22:98:67:c6:21: 3a:71:d6:32:cf:ff:c4:7c:7e:5a:40:a3:b0:15:23:fa:db:17: 5c:2f:f2:6f:2a:3c:79:9e:08:dc:00:59:35:90:4b:b6:1f:57: 40:3e:18:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q7okBiikNfs/FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTY0NFoXDTI1MTEyNDIzNTY0NFowLzEtMCsGA1UEAxMk N2Y3ODdiZTctMWE4MC00YTk3LTljYmItOTJiZTYyZmE2Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjblET3CTx3hK6KodixhUFag0PcdILsiPZbte PgWnZNRDKdc0ZiljEoqVWt12hfKhYC2/JJEOfet2MqIyhf4L7XEiG/Ur95Q7vLKj Wn2/G/2rH2i5pvpXz8xWzNANFP9XDIIZUK3diEgYy1cbxqyQPPhsxYExOnLAPJRv 8lseeVPYYdjDjnVDf2SLf8OFPi6KwG5RacNZE6phbF732Wkjb3P6yJZ20rNVS72x YUafnDVNtL6w1OM0fh98QWLXwcMGc6tUDZ0t4D2NL04dUv/39D42ip0GnAI6U/e2 ZzbDs2+wk7VcMKHjldZHardJ7MDv+t04NzYhFalp/HyEoTJSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOwsKno7xFjWbb+SJ37SWmRrMxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTU3YTY2OWQtNDllNy0z NzAzLWIwMGQtYjY1NGM2NGVjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAK7OEB6YQszkLsXLmQKhdE3mHGFZ3yjT3lBlZNtH395wilPgkxVbt2 VLK6gQUACD48gsJkN3WMJI/NKbOsVLcn5Bx/C6duap9OPMX2AV42jijPoC2VDmrC DH6QUXJaHsr1Z1hEgMZW2iKpg/TEop8ARjdjQoLwJ1ME1XI6RDJDH9PUp+AlCmV8 d3EumxZHJ9Fop8ZorppfUJ8XmjXM4QYT8HX0SQHau+iY5z8xTXK6N5mmw65T5SJx WfkvT4nQCeJJ5+p89PzYwsDqjDd/VQMVN2MimGfGITpx1jLP/8R8flpAo7AVI/rb F1wv8m8qPHmeCNwAWTWQS7YfV0A+GBQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:29 2025 by rpki-client