$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa File: 3e5c56cc-e071-39b7-ac6f-232ea578b908.roa (raw, json) Hash identifier: wqXfzleG3zY6CFFZd5XKMId575GimNBzGIlfafQuBsk= Subject key identifier: C8:A5:D3:DE:0F:78:97:1A:01:99:06:EE:15:38:8C:F1:31:A8:CF:73 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE661BAB2B2CF68F4F64B7B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa Signing time: Mon 18 Aug 2025 18:13:36 +0000 ROA not before: Mon 18 Aug 2025 18:13:36 +0000 ROA not after: Sun 16 Nov 2025 19:13:36 +0000 asID: 31898 IP address blocks: 161.33.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:61:ba:b2:b2:cf:68:f4:f6:4b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:13:36 2025 GMT Not After : Nov 16 19:13:36 2025 GMT Subject: CN=4f653ffa-9f90-4334-bea8-36af7cfcac74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:10:0e:61:5f:e7:ae:d0:27:56:03:6f:c3: 5b:16:4c:b6:c5:54:39:a8:ab:1b:41:4c:8e:f4:54: 40:5e:8d:cb:65:45:3e:48:c7:38:71:d6:0f:c0:a8: 27:36:73:f3:e0:68:85:e7:4b:76:9d:85:c6:0f:f9: ce:9b:c2:09:cd:b2:88:f1:4b:d3:7c:bc:b5:cb:19: c0:54:c4:f2:a5:07:6d:e1:bb:e7:74:41:20:cb:54: d5:1e:a5:7e:48:4c:1f:be:65:29:a5:7f:15:2b:38: c5:c8:37:47:44:76:af:c6:c9:da:a4:a1:f5:06:56: b2:21:d3:e3:5a:33:c7:29:0c:3a:3f:32:e2:96:f2: be:44:47:b5:19:6b:1d:29:6d:76:51:a8:81:57:99: 0d:7a:3e:8d:ff:5e:63:72:a9:5c:71:a4:ef:3a:37: 1e:9c:a3:71:e6:66:d5:9a:e5:25:4d:65:14:47:03: b2:d6:e7:99:99:3b:e4:3c:22:59:9c:fb:c0:42:20: e7:ac:07:e7:dc:c4:3c:1e:28:67:8a:72:82:6f:cd: f5:43:39:b7:94:4d:33:94:4d:56:80:6b:5d:fb:8a: 8a:a2:9c:dd:23:95:af:db:cc:35:68:35:5e:57:ed: 0d:98:5a:cf:1d:fd:af:93:de:31:2d:1d:79:18:dc: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:D3:DE:0F:78:97:1A:01:99:06:EE:15:38:8C:F1:31:A8:CF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:91:92:dc:ff:5c:0b:07:15:25:8c:7e:97:43:ce:4c:d4:50: 51:e2:22:79:20:0d:71:d5:ef:3e:68:a9:44:5c:37:9c:ab:df: 5b:18:c2:81:69:19:cd:d3:9a:bc:71:7a:23:d5:c3:43:72:0e: 08:f0:b7:2e:ef:30:f7:bc:3f:18:0f:06:99:74:1d:8d:b6:0b: b1:59:fc:11:ca:71:e8:0b:2c:3f:de:f6:9b:54:f9:82:09:5f: 96:09:9b:7d:5a:85:13:7d:03:af:98:d9:9e:17:9a:82:99:41: f6:f0:85:9b:e3:94:9f:ea:82:bf:03:01:67:6c:47:29:a3:c6: dd:b2:80:42:66:53:d2:5c:5d:93:19:d7:6b:f1:94:d6:57:dd: a7:a9:c5:b2:0c:82:66:14:4b:31:25:10:53:c2:79:c0:26:fd: 66:22:c6:ac:5f:48:8d:20:24:18:43:6f:9f:50:d8:00:55:92: 69:f3:36:8f:74:4f:6b:44:7c:67:17:11:32:94:58:1b:7e:dd: cd:2f:17:e5:e1:bd:e4:c5:eb:7c:64:50:62:32:cc:77:67:3f: 63:85:de:af:39:7a:bb:47:1d:d1:b7:c0:bd:3d:45:37:89:bf: c0:b6:e8:88:a3:50:ce:7a:d8:2b:7c:65:ff:3a:e5:3a:9e:d8: 27:b7:bb:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYbqyss9o9PZLe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTMzNloXDTI1MTExNjE5MTMzNlowLzEtMCsGA1UEAxMk NGY2NTNmZmEtOWY5MC00MzM0LWJlYTgtMzZhZjdjZmNhYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7MQDmFf567QJ1YDb8NbFky2xVQ5qKsbQUyO 9FRAXo3LZUU+SMc4cdYPwKgnNnPz4GiF50t2nYXGD/nOm8IJzbKI8UvTfLy1yxnA VMTypQdt4bvndEEgy1TVHqV+SEwfvmUppX8VKzjFyDdHRHavxsnapKH1BlayIdPj WjPHKQw6PzLilvK+REe1GWsdKW12UaiBV5kNej6N/15jcqlccaTvOjcenKNx5mbV muUlTWUURwOy1ueZmTvkPCJZnPvAQiDnrAfn3MQ8HihninKCb831Qzm3lE0zlE1W gGtd+4qKopzdI5Wv28w1aDVeV+0NmFrPHf2vk94xLR15GNzXIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMil094PeJcaAZkG7hU4jPExqM9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U1YzU2Y2MtZTA3MS0z OWI3LWFjNmYtMjMyZWE1NzhiOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoSHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSRktz/XAsHFSWMfpdDzkzUUFHiInkgDXHV7z5oqURcN5yr31sYwoFp Gc3TmrxxeiPVw0NyDgjwty7vMPe8PxgPBpl0HY22C7FZ/BHKcegLLD/e9ptU+YIJ X5YJm31ahRN9A6+Y2Z4XmoKZQfbwhZvjlJ/qgr8DAWdsRymjxt2ygEJmU9JcXZMZ 12vxlNZX3aepxbIMgmYUSzElEFPCecAm/WYixqxfSI0gJBhDb59Q2ABVkmnzNo90 T2tEfGcXETKUWBt+3c0vF+XhveTF63xkUGIyzHdnP2OF3q85ertHHdG3wL09RTeJ v8C26IijUM562Ct8Zf865Tqe2Ce3u2Q= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:32 2025 by rpki-client