$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa File: b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa (raw, json) Hash identifier: ecqeeRMTNMXUGQezz6jK2kWLq2cO5Xsaj3dMr9oIqzg= Subject key identifier: 8C:74:87:D6:05:A0:E6:4A:BE:1B:39:A7:AE:38:8B:F7:4E:3D:14:0B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E57081D2C0D677FD3BD580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa Signing time: Wed 10 Sep 2025 20:50:43 +0000 ROA not before: Wed 10 Sep 2025 20:50:43 +0000 ROA not after: Tue 09 Dec 2025 21:50:43 +0000 asID: 54253 IP address blocks: 159.13.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:70:81:d2:c0:d6:77:fd:3b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:50:43 2025 GMT Not After : Dec 9 21:50:43 2025 GMT Subject: CN=57ee1eea-ebd4-483e-8d2e-7c8dc8c7e6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:db:9d:8d:3e:94:73:16:ba:4e:70:66:cd: 38:f0:59:ca:76:11:df:31:03:87:65:1b:72:cd:b5: 38:eb:84:e7:81:33:36:b9:82:76:c7:93:d1:f8:a3: 41:be:70:05:95:86:03:88:d4:48:68:a9:97:84:d6: a9:6d:84:8d:f2:a5:74:db:7f:e9:8e:2f:3f:20:88: f2:0e:98:ce:7a:00:da:c7:86:c5:00:7d:2a:2a:0f: 3d:3a:f2:d4:73:49:53:5c:3c:bb:56:8f:8c:81:74: 8e:2e:be:f9:7f:65:15:f4:e8:60:4c:74:ef:97:8c: 99:58:e8:32:09:08:fe:db:fc:a6:9e:dc:d9:1c:0d: a0:d3:3b:9d:fe:e7:7d:8b:f1:32:80:79:9f:70:82: 80:cc:c4:8b:59:cb:66:e3:96:93:36:c4:da:46:f6: 5f:a8:04:6c:0f:fc:5a:18:49:02:4e:05:ea:3b:73: 5e:30:64:dd:ec:2f:7e:cb:bd:c6:e6:cd:08:94:5c: 14:50:f1:9f:c4:68:33:b0:c8:b7:5e:69:d0:d6:93: 44:9a:36:7e:e4:03:cb:72:ab:bc:48:b1:42:18:54: 91:5f:3c:4c:93:7b:50:e3:0c:50:dd:17:aa:ff:f3: 64:06:0e:35:a5:2c:f6:82:52:69:cc:8f:d7:ac:c7: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:74:87:D6:05:A0:E6:4A:BE:1B:39:A7:AE:38:8B:F7:4E:3D:14:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b39dffdd-e7b6-33de-8788-9e9b5a3d8065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4b:01:b4:e1:f0:f2:c4:77:d6:0a:50:be:1d:5e:73:6b:d9: 2e:ba:58:1c:47:89:06:44:2e:e3:9f:24:b5:70:31:e0:bd:e9: b7:ad:3d:a1:3b:3c:96:06:40:7d:30:b7:06:1e:08:a9:57:8f: 2d:03:db:60:7d:a4:80:0d:5f:82:c1:6c:fc:b6:a2:e6:4f:71: e8:86:ca:7b:74:37:99:95:c0:a9:34:dd:b0:10:20:a8:18:fe: 52:c0:5b:7c:f0:64:e8:ee:41:ef:04:82:18:0f:1f:c8:b8:89: f9:4c:a4:a4:38:2a:f7:60:f3:cb:2b:8a:4d:de:e9:41:f5:92: a8:39:58:e7:68:51:60:12:67:1a:ea:44:61:ff:fd:c5:64:51: ba:1d:20:1f:36:dc:81:86:fb:a4:03:27:9b:aa:2d:d4:a9:d9: 95:b9:47:ac:21:9a:21:f7:46:67:7c:52:2e:35:e0:f6:2a:a6: cf:bb:82:be:df:f0:f2:4c:5a:46:58:76:8e:1a:52:22:d8:3d: a9:c7:a5:f3:ae:58:3a:17:7e:c6:a3:e6:0e:a5:7e:53:51:71: 74:fe:80:b5:86:2b:15:31:a0:53:43:b3:33:7e:36:c3:5c:cd: dd:73:45:1b:7a:33:92:7b:ce:d4:c3:f7:66:bd:02:a2:21:41: 4b:b4:91:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5XCB0sDWd/071YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTA0M1oXDTI1MTIwOTIxNTA0M1owLzEtMCsGA1UEAxMk NTdlZTFlZWEtZWJkNC00ODNlLThkMmUtN2M4ZGM4YzdlNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSnbnY0+lHMWuk5wZs048FnKdhHfMQOHZRty zbU464TngTM2uYJ2x5PR+KNBvnAFlYYDiNRIaKmXhNapbYSN8qV023/pji8/IIjy DpjOegDax4bFAH0qKg89OvLUc0lTXDy7Vo+MgXSOLr75f2UV9OhgTHTvl4yZWOgy CQj+2/ymntzZHA2g0zud/ud9i/EygHmfcIKAzMSLWctm45aTNsTaRvZfqARsD/xa GEkCTgXqO3NeMGTd7C9+y73G5s0IlFwUUPGfxGgzsMi3XmnQ1pNEmjZ+5APLcqu8 SLFCGFSRXzxMk3tQ4wxQ3Req//NkBg41pSz2glJpzI/XrMelJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx0h9YFoOZKvhs5p644i/dOPRQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjM5ZGZmZGQtZTdiNi0z M2RlLTg3ODgtOWU5YjVhM2Q4MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnw0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVLAbTh8PLEd9YKUL4dXnNr2S66WBxHiQZELuOfJLVwMeC96betPaE7 PJYGQH0wtwYeCKlXjy0D22B9pIANX4LBbPy2ouZPceiGynt0N5mVwKk03bAQIKgY /lLAW3zwZOjuQe8EghgPH8i4iflMpKQ4Kvdg88srik3e6UH1kqg5WOdoUWASZxrq RGH//cVkUbodIB823IGG+6QDJ5uqLdSp2ZW5R6whmiH3Rmd8Ui414PYqps+7gr7f 8PJMWkZYdo4aUiLYPanHpfOuWDoXfsaj5g6lflNRcXT+gLWGKxUxoFNDszN+NsNc zd1zRRt6M5J7ztTD92a9AqIhQUu0kUw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:08 2025 by rpki-client