$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa File: 4c6fa256-56c5-3d60-8844-419c8aa16499.roa (raw, json) Hash identifier: Zgrr+9N6kMVvhzW0w+CstQBefyflM5zNrB2bN7+CRXk= Subject key identifier: 4E:6C:EB:5B:10:7E:8E:82:F2:99:3D:F3:2E:24:60:0B:41:84:2E:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2719D5A0991B7220B4721A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa Signing time: Wed 10 Sep 2025 22:36:17 +0000 ROA not before: Wed 10 Sep 2025 22:36:17 +0000 ROA not after: Tue 09 Dec 2025 23:36:17 +0000 asID: 54253 IP address blocks: 151.104.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:19:d5:a0:99:1b:72:20:b4:72:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 22:36:17 2025 GMT Not After : Dec 9 23:36:17 2025 GMT Subject: CN=bb081a6c-9eec-4df1-9d94-3d6dfd712821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:4b:ca:29:73:c5:e1:f7:77:e8:45:4b:ef: 00:54:74:37:f1:cb:4e:95:9d:14:4c:e9:05:c7:78: 47:b3:0a:34:a7:df:d0:f9:d8:7e:1e:da:6b:7e:b0: df:46:3c:72:4c:af:d1:df:5d:ec:37:ab:52:5e:0f: 7f:5a:b6:2e:7e:aa:21:d8:34:4d:3e:e3:06:1c:e8: 63:91:c2:6a:5a:ea:a2:84:97:e5:4f:be:0f:bc:2d: 5e:6d:39:5f:f2:07:e6:32:e7:98:cd:1a:48:eb:91: e8:39:b1:99:c2:77:6c:35:43:17:c3:dc:6c:ac:57: 5d:b7:c6:2e:0f:98:2c:28:e6:27:0f:7b:22:23:40: 3b:ce:7b:18:85:a3:9a:92:8a:67:c8:a9:a3:d7:51: fa:56:9c:4e:5b:ec:dd:83:11:77:92:e2:c1:6a:f6: b1:0f:e5:5d:a8:ad:8e:7f:00:a8:bc:8e:03:29:71: 18:9e:47:05:c2:fc:0e:96:ea:5b:31:0c:45:a2:50: c8:4b:31:ff:e0:0d:f6:6d:9a:b8:ab:93:63:0e:9d: 13:36:72:03:20:99:17:de:9f:4c:99:9e:97:2a:c6: 86:ee:a2:06:a4:a6:cc:d5:77:ec:3f:d2:f9:5f:cc: c9:ae:18:e2:9d:6f:ae:e4:72:b4:57:cc:0c:cc:9f: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6C:EB:5B:10:7E:8E:82:F2:99:3D:F3:2E:24:60:0B:41:84:2E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4c6fa256-56c5-3d60-8844-419c8aa16499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.104.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fe:30:75:52:e9:70:99:05:6b:d5:0e:74:83:d2:f2:fc:24: aa:13:35:ea:ff:72:cc:77:36:89:14:6c:39:37:57:50:75:80: 74:54:05:88:94:7a:15:92:3c:c4:d2:82:c5:7c:e3:38:53:81: be:1a:8a:a7:7d:c4:19:99:7c:4b:f8:2f:52:47:0d:79:96:7f: 55:23:ac:35:8b:fb:fb:e5:eb:06:63:7c:64:9f:83:d2:d8:33: ab:a3:53:02:65:b8:49:20:24:a2:b3:7a:ce:ac:d2:29:ae:1b: c9:71:84:3c:6f:12:d6:88:4a:f2:fa:61:f9:a8:8f:e7:7f:4a: a1:61:87:96:ab:84:e1:5c:92:fc:c3:ed:46:10:5c:f3:29:0b: ff:0c:97:df:e0:e5:16:73:0e:60:8c:3d:f9:27:90:7a:40:4a: 3a:c9:a3:00:a0:17:c4:25:59:c2:8f:82:49:75:14:78:e9:ad: a9:9e:53:8d:1f:4b:0d:97:2a:fe:83:f5:c5:ad:f9:6a:21:53: 91:f1:ac:ab:a1:8e:9c:8b:eb:ea:51:60:56:65:64:cf:64:9e: da:45:e0:9a:28:22:af:91:f4:65:05:6a:7f:44:95:de:84:0b: 1d:ec:75:ba:98:64:26:9e:c1:b6:d5:e1:97:ec:f8:1a:5c:37: 1f:24:07:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnGdWgmRtyILRyGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIyMzYxN1oXDTI1MTIwOTIzMzYxN1owLzEtMCsGA1UEAxMk YmIwODFhNmMtOWVlYy00ZGYxLTlkOTQtM2Q2ZGZkNzEyODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFtLyilzxeH3d+hFS+8AVHQ38ctOlZ0UTOkF x3hHswo0p9/Q+dh+HtprfrDfRjxyTK/R313sN6tSXg9/WrYufqoh2DRNPuMGHOhj kcJqWuqihJflT74PvC1ebTlf8gfmMueYzRpI65HoObGZwndsNUMXw9xsrFddt8Yu D5gsKOYnD3siI0A7znsYhaOakopnyKmj11H6VpxOW+zdgxF3kuLBavaxD+VdqK2O fwCovI4DKXEYnkcFwvwOlupbMQxFolDISzH/4A32bZq4q5NjDp0TNnIDIJkX3p9M mZ6XKsaG7qIGpKbM1XfsP9L5X8zJrhjinW+u5HK0V8wMzJ+r7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5s61sQfo6C8pk98y4kYAtBhC7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGM2ZmEyNTYtNTZjNS0z ZDYwLTg4NDQtNDE5YzhhYTE2NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl2jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf+MHVS6XCZBWvVDnSD0vL8JKoTNer/csx3NokUbDk3V1B1gHRUBYiU ehWSPMTSgsV84zhTgb4aiqd9xBmZfEv4L1JHDXmWf1UjrDWL+/vl6wZjfGSfg9LY M6ujUwJluEkgJKKzes6s0imuG8lxhDxvEtaISvL6Yfmoj+d/SqFhh5arhOFckvzD 7UYQXPMpC/8Ml9/g5RZzDmCMPfknkHpASjrJowCgF8QlWcKPgkl1FHjprameU40f Sw2XKv6D9cWt+WohU5HxrKuhjpyL6+pRYFZlZM9kntpF4JooIq+R9GUFan9Eld6E Cx3sdbqYZCaewbbV4Zfs+BpcNx8kB4I= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:08 2025 by rpki-client