$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa File: 74b80e32-2028-3837-a19e-a86bbffc7ae0.roa (raw, json) Hash identifier: i0X3JRDN5umTrRrGveRMEo2d+WCn4TOp9XH4H1I/3VI= Subject key identifier: 66:92:8B:97:1F:7A:AD:FE:CA:DF:9F:73:18:B3:ED:C6:84:20:63:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC094BFB14BBA776F1FE4100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa Signing time: Wed 20 Aug 2025 18:50:16 +0000 ROA not before: Wed 20 Aug 2025 18:50:16 +0000 ROA not after: Tue 18 Nov 2025 19:50:16 +0000 asID: 31898 IP address blocks: 161.33.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:09:4b:fb:14:bb:a7:76:f1:fe:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:50:16 2025 GMT Not After : Nov 18 19:50:16 2025 GMT Subject: CN=62857d90-9705-43b3-a645-fc11ff3fc97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:81:19:f4:97:d3:e3:59:ea:eb:eb:6f:e6: 18:51:28:35:b2:97:c2:6d:52:90:fa:fa:a0:11:14: d3:26:a6:13:79:a7:a9:0a:e9:78:8e:48:8f:5b:e9: c6:4a:79:28:36:3e:28:39:4c:21:27:7e:ae:58:56: b2:b4:5a:4c:f2:87:20:a1:82:ad:9f:27:81:d3:4a: 52:d3:a3:4d:62:58:86:fb:23:59:f4:0c:18:c8:86: 58:2b:98:fd:9e:73:8c:67:0d:18:d5:f3:23:49:90: 58:9e:ea:39:56:eb:d6:27:c4:c4:b5:35:bb:93:9c: fb:ed:4b:9b:da:d6:4c:c3:f2:97:c7:18:0a:ae:4b: 43:77:21:71:2b:01:45:b5:99:3b:1a:d1:e0:93:6a: eb:2f:3c:0a:57:47:13:c4:92:7e:d6:b4:0a:b1:17: cc:92:53:6d:55:e1:70:48:0e:e5:0b:3b:24:8e:81: c8:41:c6:d4:3c:7f:10:eb:73:49:34:1c:20:31:06: 12:70:bc:65:81:15:e4:66:b7:70:b8:25:7b:0d:4f: cf:cd:2e:6f:83:e9:12:2b:6e:78:84:60:78:3c:d1: 75:c4:ac:c2:63:0b:a3:8d:da:b8:2c:00:11:d1:58: 06:5f:07:e2:d4:e8:64:e0:bb:af:24:cd:d8:bc:3c: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:8B:97:1F:7A:AD:FE:CA:DF:9F:73:18:B3:ED:C6:84:20:63:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4a:a4:a2:39:cc:d6:fd:c1:bc:88:79:67:f6:ff:6d:0e:5f: 70:27:2e:a4:fa:ff:64:4c:ec:1a:cf:c9:70:c9:37:2d:fb:6c: cb:78:26:7f:d1:71:61:d1:d5:0c:58:bb:2d:6d:3e:a2:9e:d8: a5:fe:b0:64:78:a0:16:60:16:28:ba:e3:35:af:c8:cc:0f:73: 14:13:c0:40:60:60:ab:2d:99:6d:d4:30:0e:71:a8:57:d4:87: 5c:de:d0:43:9f:02:44:d5:11:15:17:ac:3a:93:c3:57:c1:64: ba:a7:ae:f4:36:d8:2d:8e:16:7b:02:3a:f0:57:c9:cc:d8:41: 7d:3a:8a:b4:29:9d:25:2b:27:3b:41:12:fe:64:5e:16:d8:2d: 6c:54:ec:e8:f9:41:83:bc:05:77:98:ad:2c:36:74:3a:51:7c: 07:a2:ab:ef:f7:96:4e:f9:b4:0d:83:de:27:dd:1d:a7:d7:cb: 4e:03:b5:7c:a6:45:2a:1d:75:d2:7d:53:2f:59:bd:fb:88:a3: 64:fe:eb:f7:8a:29:32:9c:21:58:cc:1f:6d:c0:d4:40:cc:68: ae:ad:df:9b:15:78:d7:6b:7e:60:14:32:a7:e2:28:74:61:69: 07:34:f3:aa:b4:74:ed:fd:79:32:fc:16:0e:1e:f3:a6:d4:10: cb:d2:bd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsCUv7FLundvH+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4NTAxNloXDTI1MTExODE5NTAxNlowLzEtMCsGA1UEAxMk NjI4NTdkOTAtOTcwNS00M2IzLWE2NDUtZmMxMWZmM2ZjOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4yBGfSX0+NZ6uvrb+YYUSg1spfCbVKQ+vqg ERTTJqYTeaepCul4jkiPW+nGSnkoNj4oOUwhJ36uWFaytFpM8ocgoYKtnyeB00pS 06NNYliG+yNZ9AwYyIZYK5j9nnOMZw0Y1fMjSZBYnuo5VuvWJ8TEtTW7k5z77Uub 2tZMw/KXxxgKrktDdyFxKwFFtZk7GtHgk2rrLzwKV0cTxJJ+1rQKsRfMklNtVeFw SA7lCzskjoHIQcbUPH8Q63NJNBwgMQYScLxlgRXkZrdwuCV7DU/PzS5vg+kSK254 hGB4PNF1xKzCYwujjdq4LAAR0VgGXwfi1Ohk4LuvJM3YvDygfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaSi5cfeq3+yt+fcxiz7caEIGNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzRiODBlMzItMjAyOC0z ODM3LWExOWUtYTg2YmJmZmM3YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZKpKI5zNb9wbyIeWf2/20OX3AnLqT6/2RM7BrPyXDJNy37bMt4Jn/R cWHR1QxYuy1tPqKe2KX+sGR4oBZgFii64zWvyMwPcxQTwEBgYKstmW3UMA5xqFfU h1ze0EOfAkTVERUXrDqTw1fBZLqnrvQ22C2OFnsCOvBXyczYQX06irQpnSUrJztB Ev5kXhbYLWxU7Oj5QYO8BXeYrSw2dDpRfAeiq+/3lk75tA2D3ifdHafXy04DtXym RSodddJ9Uy9ZvfuIo2T+6/eKKTKcIVjMH23A1EDMaK6t35sVeNdrfmAUMqfiKHRh aQc086q0dO39eTL8Fg4e86bUEMvSvdc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:40 2025 by rpki-client