$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa File: 6c6956da-5a56-346a-a9db-6eeb4c439a78.roa (raw, json) Hash identifier: BSBvh7NfI0bTJ6+N9xpNocWRjTl9V4UreCew++23BZw= Subject key identifier: F3:E5:F3:D1:63:FE:0D:FB:1C:99:45:82:BE:60:FB:D0:5C:18:4B:72 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE8639B35047043E31C01C840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa Signing time: Tue 19 Aug 2025 11:29:00 +0000 ROA not before: Tue 19 Aug 2025 11:29:00 +0000 ROA not after: Mon 17 Nov 2025 12:29:00 +0000 asID: 31898 IP address blocks: 158.247.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:63:9b:35:04:70:43:e3:1c:01:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 11:29:00 2025 GMT Not After : Nov 17 12:29:00 2025 GMT Subject: CN=d3ca804e-f2c1-4a15-9642-dd7c3ce3d3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:f3:c9:fa:e5:60:cb:84:a1:aa:85:44:25: 03:cc:cf:89:c9:53:07:d5:67:45:5b:ec:f9:7b:06: 30:71:ae:39:4d:d2:74:e0:32:99:c6:de:d3:11:0d: 48:6f:de:65:23:b5:99:9e:58:e7:0f:23:04:14:d7: d9:4f:59:06:32:9a:1f:da:aa:6b:36:c1:ec:f7:d8: 62:c2:32:4a:94:50:05:12:34:f1:7f:3c:59:65:c9: ba:e1:ce:7a:7a:53:e6:fe:d3:4b:bb:d7:76:64:fe: 60:27:4b:c4:fd:d2:a0:61:72:f4:28:12:9d:53:55: 45:b0:b7:96:70:8e:a9:7e:2f:8f:04:8d:a7:ce:23: 1c:d9:be:08:2b:c7:a8:23:4c:35:45:a8:a9:b0:e0: e5:0b:c6:b5:b3:c7:1f:1c:9b:90:ed:89:b6:74:9e: a9:a1:c3:f8:51:39:a0:33:e9:82:1f:fc:63:7a:ae: 06:d8:d3:81:6e:d4:f9:cc:3e:1b:a8:d9:45:b8:e3: ff:8c:4d:f7:d1:2f:d6:75:75:fa:8a:05:7e:26:8d: 7c:36:4f:49:7d:5d:d6:6e:ca:78:18:3e:4a:f2:d3: 05:07:e7:c3:26:d7:3e:b0:fc:dc:c5:c5:d5:95:bc: cc:9d:69:9e:a2:47:36:28:66:ae:a0:cb:55:27:0f: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:F3:D1:63:FE:0D:FB:1C:99:45:82:BE:60:FB:D0:5C:18:4B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6c6956da-5a56-346a-a9db-6eeb4c439a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.247.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:81:ea:e3:4c:71:bf:47:88:3d:11:0f:ec:6c:fb:93:bf:74: c9:a4:df:05:2e:7c:db:7b:53:a0:2d:0b:00:d2:7c:84:0c:3b: e9:a9:8a:61:43:68:49:de:7f:71:60:de:33:2c:a3:54:14:9b: ad:85:38:4e:86:96:0a:ae:c1:45:8e:f3:b8:f5:5c:41:c4:01: 15:ab:fe:bf:9c:6a:3e:eb:d0:5a:cd:ef:96:5e:9b:78:4e:96: ca:e0:ae:3b:f0:76:38:9b:6e:a0:72:19:75:3a:05:57:36:fb: cc:e5:cf:c7:e3:c0:e3:78:27:8b:1c:e0:5e:57:9b:c3:fb:bb: 08:5a:cb:1d:87:ec:33:2d:75:a1:fa:a2:6c:68:b4:19:c5:0c: db:1e:54:9d:85:ac:0f:46:78:03:41:df:45:af:28:56:8e:14: 88:b6:ce:42:52:0c:18:ac:d0:a1:14:cc:4f:ed:ae:8f:30:57: 5d:5e:fd:71:0f:bb:60:48:c0:fa:7d:3e:5f:03:43:30:a9:30: 15:28:4d:a7:0c:ed:85:47:08:c2:df:76:01:e3:b2:9e:51:64: 2f:23:d4:15:46:86:ff:50:15:32:1d:dc:9a:a6:2e:61:04:3e: d7:f4:ea:93:f0:42:8c:77:32:32:10:d2:6d:80:ec:7b:64:54: 1b:11:72:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroY5s1BHBD4xwByEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTExMjkwMFoXDTI1MTExNzEyMjkwMFowLzEtMCsGA1UEAxMk ZDNjYTgwNGUtZjJjMS00YTE1LTk2NDItZGQ3YzNjZTNkM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gLzyfrlYMuEoaqFRCUDzM+JyVMH1WdFW+z5 ewYwca45TdJ04DKZxt7TEQ1Ib95lI7WZnljnDyMEFNfZT1kGMpof2qprNsHs99hi wjJKlFAFEjTxfzxZZcm64c56elPm/tNLu9d2ZP5gJ0vE/dKgYXL0KBKdU1VFsLeW cI6pfi+PBI2nziMc2b4IK8eoI0w1RaipsODlC8a1s8cfHJuQ7Ym2dJ6pocP4UTmg M+mCH/xjeq4G2NOBbtT5zD4bqNlFuOP/jE330S/WdXX6igV+Jo18Nk9JfV3Wbsp4 GD5K8tMFB+fDJtc+sPzcxcXVlbzMnWmeokc2KGauoMtVJw/gLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPl89Fj/g37HJlFgr5g+9BcGEtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmM2OTU2ZGEtNWE1Ni0z NDZhLWE5ZGItNmVlYjRjNDM5YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnvdyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiB6uNMcb9HiD0RD+xs+5O/dMmk3wUufNt7U6AtCwDSfIQMO+mpimFD aEnef3Fg3jMso1QUm62FOE6GlgquwUWO87j1XEHEARWr/r+caj7r0FrN75Zem3hO lsrgrjvwdjibbqByGXU6BVc2+8zlz8fjwON4J4sc4F5Xm8P7uwhayx2H7DMtdaH6 omxotBnFDNseVJ2FrA9GeANB30WvKFaOFIi2zkJSDBis0KEUzE/tro8wV11e/XEP u2BIwPp9Pl8DQzCpMBUoTacM7YVHCMLfdgHjsp5RZC8j1BVGhv9QFTId3JqmLmEE Ptf06pPwQox3MjIQ0m2A7HtkVBsRci4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:23 2025 by rpki-client