$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66302736-cef4-3578-aa18-a20c5252c266.roa File: 66302736-cef4-3578-aa18-a20c5252c266.roa (raw, json) Hash identifier: 4vGdE3/gG+0BUTr+hkn2r5a4RUzyE6It85PgGdDRrTI= Subject key identifier: AB:41:B9:BC:16:34:41:4F:88:95:2D:D7:95:A2:AE:16:B8:DA:9A:A1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD434737A3EFF380A86087F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66302736-cef4-3578-aa18-a20c5252c266.roa Signing time: Tue 26 Aug 2025 22:55:50 +0000 ROA not before: Tue 26 Aug 2025 22:55:50 +0000 ROA not after: Mon 24 Nov 2025 23:55:50 +0000 asID: 31898 IP address blocks: 160.34.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:47:37:a3:ef:f3:80:a8:60:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:50 2025 GMT Not After : Nov 24 23:55:50 2025 GMT Subject: CN=285c6588-0e90-4456-b86c-d29b36961e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:75:b8:59:02:32:15:23:da:0f:06:a5:24: a2:2c:7b:97:59:8f:c6:b1:43:56:9d:13:2b:63:93: d8:de:eb:ff:9b:be:30:5c:32:ff:5d:88:8e:ee:4e: 13:4a:d6:b2:e1:f0:2c:3e:43:c6:db:5e:a9:4e:6c: 43:6a:0b:af:5e:42:6e:9e:2c:ca:df:d8:58:cf:f0: 00:c5:e9:d2:10:d1:52:85:c0:ba:44:b5:b3:31:3b: 56:ee:7b:32:a2:6c:53:bc:8a:d4:94:d9:6a:d2:0b: dd:76:d1:ae:10:46:87:9b:53:8d:ab:19:2e:eb:1d: 63:3d:92:34:87:9f:97:6f:3f:08:82:59:0b:57:a9: 33:55:13:45:0c:a9:38:15:86:26:e1:fa:3b:e0:2d: b9:a1:08:1a:56:09:22:39:6c:8c:d0:24:e8:f1:a0: 57:b1:b2:42:53:b2:9d:20:11:1c:23:2d:a8:b9:a9: d5:57:31:be:9f:ec:86:23:50:b0:09:19:33:39:41: 42:de:54:57:e9:80:97:2d:9e:35:09:7c:51:03:95: cc:f2:26:3c:7b:c0:02:1e:17:f7:9f:d3:08:65:4f: 12:23:58:36:55:59:2b:f7:7e:a1:bf:28:56:c6:89: 75:e0:9f:66:13:fd:b7:9b:54:9d:17:7f:35:82:aa: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:B9:BC:16:34:41:4F:88:95:2D:D7:95:A2:AE:16:B8:DA:9A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66302736-cef4-3578-aa18-a20c5252c266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:89:55:d2:c7:4e:cb:91:72:13:73:ab:c0:4b:d8:79:b3:cf: ed:40:87:e2:8e:cc:88:8b:2e:e4:50:66:ce:85:45:45:29:23: e6:e6:11:e1:f6:9e:74:57:83:a5:03:2c:31:d6:6e:a2:64:85: 57:61:ef:59:a4:d1:82:bd:7c:f7:40:06:d8:bb:ad:b9:46:83: 4f:46:24:b7:c3:4c:df:b0:6c:7b:82:fd:6d:76:04:6d:70:2d: 60:16:56:5f:aa:d4:70:4f:51:15:af:33:83:d7:ee:13:b8:88: 2f:ff:11:e7:81:70:b1:f1:2b:a4:33:d2:d4:d1:f0:9e:ec:cf: ef:21:47:7c:63:5c:bb:10:08:5c:b8:5a:00:9e:cb:e3:b6:51: 8d:e4:17:51:f9:b6:77:44:c6:5f:03:ec:5f:37:51:eb:e9:1c: 42:60:00:8a:58:ec:db:0e:d3:e2:3e:aa:6e:79:28:67:11:9b: 06:8a:c6:dd:78:7f:74:d9:20:15:8d:67:ce:29:ec:26:21:f2: 53:ff:18:78:26:32:94:60:07:d7:69:42:71:2a:a8:20:bf:30: 7a:26:82:9a:e0:09:bd:59:83:e9:20:13:04:15:ce:13:06:96: bb:6a:a1:e9:97:bb:0d:73:fd:88:74:2c:bc:9a:cb:8b:7a:95: ca:cc:97:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q0c3o+/zgKhgh/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTU1MFoXDTI1MTEyNDIzNTU1MFowLzEtMCsGA1UEAxMk Mjg1YzY1ODgtMGU5MC00NDU2LWI4NmMtZDI5YjM2OTYxZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo91uFkCMhUj2g8GpSSiLHuXWY/GsUNWnRMr Y5PY3uv/m74wXDL/XYiO7k4TStay4fAsPkPG216pTmxDaguvXkJunizK39hYz/AA xenSENFShcC6RLWzMTtW7nsyomxTvIrUlNlq0gvddtGuEEaHm1ONqxku6x1jPZI0 h5+Xbz8IglkLV6kzVRNFDKk4FYYm4fo74C25oQgaVgkiOWyM0CTo8aBXsbJCU7Kd IBEcIy2ouanVVzG+n+yGI1CwCRkzOUFC3lRX6YCXLZ41CXxRA5XM8iY8e8ACHhf3 n9MIZU8SI1g2VVkr936hvyhWxol14J9mE/23m1SdF381gqpPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtBubwWNEFPiJUt15Wirha42pqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjYzMDI3MzYtY2VmNC0z NTc4LWFhMTgtYTIwYzUyNTJjMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOJVdLHTsuRchNzq8BL2Hmzz+1Ah+KOzIiLLuRQZs6FRUUpI+bmEeH2 nnRXg6UDLDHWbqJkhVdh71mk0YK9fPdABti7rblGg09GJLfDTN+wbHuC/W12BG1w LWAWVl+q1HBPURWvM4PX7hO4iC//EeeBcLHxK6Qz0tTR8J7sz+8hR3xjXLsQCFy4 WgCey+O2UY3kF1H5tndExl8D7F83UevpHEJgAIpY7NsO0+I+qm55KGcRmwaKxt14 f3TZIBWNZ84p7CYh8lP/GHgmMpRgB9dpQnEqqCC/MHomgprgCb1Zg+kgEwQVzhMG lrtqoemXuw1z/Yh0LLyay4t6lcrMl58= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:33 2025 by rpki-client