$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa File: ba3f71ac-75d6-3352-a412-f8edf007c36e.roa (raw, json) Hash identifier: nUrwcY1Ds4CsqR/TRk+bFrHm+V+WZ83lIs2p9/3JiOI= Subject key identifier: E0:EB:AB:71:76:A3:FA:D9:D5:F3:59:B2:74:3C:D9:93:AA:D7:65:C4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26E581659D7EF93B17A6D080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa Signing time: Wed 10 Sep 2025 20:50:51 +0000 ROA not before: Wed 10 Sep 2025 20:50:51 +0000 ROA not after: Tue 09 Dec 2025 21:50:51 +0000 asID: 54253 IP address blocks: 159.13.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e5:81:65:9d:7e:f9:3b:17:a6:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 20:50:51 2025 GMT Not After : Dec 9 21:50:51 2025 GMT Subject: CN=bccfa76f-32b2-49ad-8c9b-4c2d4bd4dfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:64:c4:d1:5d:75:dc:31:f4:75:11:30:4d: d6:32:ac:bc:01:82:e1:99:b8:e9:c3:79:f9:34:64: ad:56:5c:b5:3d:44:f0:8f:9c:9f:2b:a7:fc:e9:06: 3e:81:5c:18:79:20:a1:65:79:e4:de:17:a5:b8:bb: c9:ea:98:e4:7b:1e:66:30:b7:03:07:57:01:ed:24: 5b:67:b9:4c:9a:1e:5d:c4:27:fc:dc:34:5a:2f:9b: ab:b6:df:f1:22:4b:e4:d4:2c:e2:9b:38:08:56:07: a2:25:83:bd:cd:c5:4f:c4:28:83:c8:85:56:9b:e8: 98:11:b1:96:d0:8b:49:01:6e:e6:12:7a:6a:ef:8b: d6:1d:85:8b:70:4d:71:fe:86:2b:81:fd:5c:60:7e: 31:f6:ea:b1:7c:6d:59:7d:92:dc:7d:8c:a1:a4:65: 4b:5d:7e:18:95:46:47:4c:ba:ed:c5:68:89:c0:c7: 04:e3:49:c2:08:98:46:2e:81:5a:b2:dd:95:59:85: ee:09:32:47:ed:a0:4c:48:df:ac:39:29:1c:ec:ff: c6:7f:cd:09:2d:a2:96:8d:2f:4f:34:b9:7d:f9:1a: 45:2c:fe:02:80:13:8c:c2:02:b9:e7:4f:5d:ae:a2: e8:c2:a9:08:cf:cf:fd:d1:6c:26:87:27:2f:4a:3f: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:AB:71:76:A3:FA:D9:D5:F3:59:B2:74:3C:D9:93:AA:D7:65:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba3f71ac-75d6-3352-a412-f8edf007c36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 159.13.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4e:3e:6a:1e:95:92:10:ac:c2:b8:06:76:3a:1c:9e:fb:26: 5d:5e:46:42:3e:b0:9d:dd:da:ba:ff:f0:5e:30:8b:53:ce:47: 34:ee:59:63:55:66:3b:06:9f:e3:d8:36:a1:f0:08:10:db:9f: d9:cc:03:b6:32:f0:6c:73:11:25:e7:f9:f1:b9:35:8b:85:f2: 9a:fc:77:b9:50:1e:81:80:05:b3:00:45:d4:66:18:65:13:80: 2c:ab:78:9b:44:18:da:87:cb:96:3f:f3:fa:fb:ee:b1:75:62: 38:8b:fb:43:1c:14:5d:f6:04:ae:a8:7c:0e:9a:42:1b:ca:39: 67:85:b7:43:32:e9:59:45:da:16:1e:98:12:b7:76:b2:91:09: 1c:e6:34:54:bd:6c:fd:52:9c:76:1b:fc:9d:62:61:90:fd:cf: 55:50:dc:76:b7:42:22:2c:d8:f6:4d:78:0e:a3:ae:3e:85:7b: 86:32:e6:4a:9e:3c:2e:c6:be:17:c1:de:bc:0b:cb:e6:1b:30: f9:03:6b:61:da:a2:8e:69:33:3f:7f:95:1a:d4:78:32:38:38: 36:3e:63:5a:7b:a1:1c:00:9d:ce:9a:6d:38:e6:b6:2c:80:a0: 9b:ed:2e:c3:6d:b3:9c:70:fd:5d:f4:33:21:b7:55:35:e7:8f: fa:e2:ce:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm5YFlnX75Oxem0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDIwNTA1MVoXDTI1MTIwOTIxNTA1MVowLzEtMCsGA1UEAxMk YmNjZmE3NmYtMzJiMi00OWFkLThjOWItNGMyZDRiZDRkZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcxkxNFdddwx9HURME3WMqy8AYLhmbjpw3n5 NGStVly1PUTwj5yfK6f86QY+gVwYeSChZXnk3heluLvJ6pjkex5mMLcDB1cB7SRb Z7lMmh5dxCf83DRaL5urtt/xIkvk1CzimzgIVgeiJYO9zcVPxCiDyIVWm+iYEbGW 0ItJAW7mEnpq74vWHYWLcE1x/oYrgf1cYH4x9uqxfG1ZfZLcfYyhpGVLXX4YlUZH TLrtxWiJwMcE40nCCJhGLoFast2VWYXuCTJH7aBMSN+sOSkc7P/Gf80JLaKWjS9P NLl9+RpFLP4CgBOMwgK5509drqLowqkIz8/90WwmhycvSj9AxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODrq3F2o/rZ1fNZsnQ82ZOq12XEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmEzZjcxYWMtNzVkNi0z MzUyLWE0MTItZjhlZGYwMDdjMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnw1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9OPmoelZIQrMK4BnY6HJ77Jl1eRkI+sJ3d2rr/8F4wi1PORzTuWWNV ZjsGn+PYNqHwCBDbn9nMA7Yy8GxzESXn+fG5NYuF8pr8d7lQHoGABbMARdRmGGUT gCyreJtEGNqHy5Y/8/r77rF1YjiL+0McFF32BK6ofA6aQhvKOWeFt0My6VlF2hYe mBK3drKRCRzmNFS9bP1SnHYb/J1iYZD9z1VQ3Ha3QiIs2PZNeA6jrj6Fe4Yy5kqe PC7GvhfB3rwLy+YbMPkDa2Haoo5pMz9/lRrUeDI4ODY+Y1p7oRwAnc6abTjmtiyA oJvtLsNts5xw/V30MyG3VTXnj/rizn4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:43 2025 by rpki-client