$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6139f3e-081b-3704-b73e-9ff1811d4401.roa File: e6139f3e-081b-3704-b73e-9ff1811d4401.roa (raw, json) Hash identifier: cAQZK1iwpi7NnkD0SLgcBfSE8jRyFrvKcHOfsXieGU0= Subject key identifier: 01:F9:E3:30:BF:75:42:5C:C1:DD:8E:E9:C4:21:F3:33:3B:2A:4B:50 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4349FB20D9F65752D8F980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6139f3e-081b-3704-b73e-9ff1811d4401.roa Signing time: Tue 26 Aug 2025 22:55:51 +0000 ROA not before: Tue 26 Aug 2025 22:55:51 +0000 ROA not after: Mon 24 Nov 2025 23:55:51 +0000 asID: 31898 IP address blocks: 160.34.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:49:fb:20:d9:f6:57:52:d8:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:51 2025 GMT Not After : Nov 24 23:55:51 2025 GMT Subject: CN=71d9ede9-92d5-414f-a18a-3b60f62880c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:52:a4:2f:0f:b2:5e:6a:b9:d8:1e:59:ce: d8:35:89:93:35:c0:b9:7d:9e:59:10:db:8b:5e:6e: c6:c7:92:2a:05:63:e9:a4:af:77:78:18:51:60:24: ec:c6:db:d1:76:c2:c4:35:2d:2e:0c:84:0e:9d:69: 1e:23:1a:ff:b8:ec:6c:bf:65:90:d3:9f:8e:fd:5d: 33:11:db:6f:7d:8e:8b:84:22:65:ad:c1:3c:56:e6: d1:a7:76:11:d5:c4:60:da:d6:45:8a:6e:0a:73:ee: 06:7a:c3:00:dc:74:a2:ef:6e:35:35:b8:99:77:fc: 3a:cf:2d:43:85:85:4c:68:bd:40:48:48:8f:29:20: ed:9c:07:4b:81:e4:a5:6e:b9:f3:fe:a4:55:3f:9d: fc:7c:8c:e7:98:41:38:ec:e8:10:ed:f8:f9:73:57: 85:cf:a7:a0:b5:91:cd:1c:fd:91:91:33:96:3e:62: cb:82:c9:b3:6e:4b:71:e6:5c:f6:c4:b1:c8:d4:6c: 62:f8:29:5b:7f:2d:2e:ce:c0:6a:82:27:c4:a4:4f: d4:35:b3:35:38:40:2b:4c:6f:3a:81:65:0e:a4:94: d8:e2:e8:29:5c:b0:be:d0:89:6c:ef:7e:4f:6b:76: bf:95:cf:0f:ee:d8:6d:ed:a7:d7:ed:cd:ab:a9:ec: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F9:E3:30:BF:75:42:5C:C1:DD:8E:E9:C4:21:F3:33:3B:2A:4B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6139f3e-081b-3704-b73e-9ff1811d4401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 160.34.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c4:99:46:da:64:3f:3e:1c:f6:76:01:7f:43:91:86:f4:7a: 99:30:03:80:27:2f:eb:9c:6a:da:f7:97:75:e1:4e:26:07:bd: 2a:71:b1:8d:3b:ec:fe:93:e5:57:4e:73:5e:e4:a9:bf:02:53: 9f:57:9c:35:ec:a0:e9:d5:da:ba:94:d1:ea:f4:85:a4:fc:f3: 0a:1f:8f:d2:50:9b:74:a5:cc:59:9f:12:d9:80:78:14:61:38: ce:a1:6d:a3:a4:76:b8:1d:a6:6f:52:f9:4e:b7:8f:1d:5f:eb: ed:60:72:04:31:ee:42:d7:de:05:9c:ba:5f:d7:e1:b3:0b:69: 71:09:fe:02:c0:d8:f4:e5:4b:1f:64:f8:52:3d:1e:bd:3d:34: ac:2a:aa:a3:30:c4:1a:f1:a9:97:7f:67:32:c8:bb:30:f3:6f: 2d:39:04:34:16:ac:3e:57:ef:7f:c9:c1:d2:db:a4:72:25:c6: 7f:0e:81:7d:7e:87:fd:6d:2a:7f:d2:9f:93:45:cc:47:e5:4b: d7:35:00:96:e0:eb:f2:51:2f:2d:b1:ae:4b:69:02:03:73:18: a0:46:b2:04:ed:fe:f1:12:d7:12:53:d0:d8:51:45:e3:da:28: 1b:17:30:de:3d:e5:e6:e6:25:d9:0c:0b:57:84:89:a4:66:cb: a8:c2:4e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Q0n7INn2V1LY+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTU1MVoXDTI1MTEyNDIzNTU1MVowLzEtMCsGA1UEAxMk NzFkOWVkZTktOTJkNS00MTRmLWExOGEtM2I2MGY2Mjg4MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/RSpC8Psl5qudgeWc7YNYmTNcC5fZ5ZENuL Xm7Gx5IqBWPppK93eBhRYCTsxtvRdsLENS0uDIQOnWkeIxr/uOxsv2WQ05+O/V0z EdtvfY6LhCJlrcE8VubRp3YR1cRg2tZFim4Kc+4GesMA3HSi7241NbiZd/w6zy1D hYVMaL1ASEiPKSDtnAdLgeSlbrnz/qRVP538fIznmEE47OgQ7fj5c1eFz6egtZHN HP2RkTOWPmLLgsmzbktx5lz2xLHI1Gxi+Clbfy0uzsBqgifEpE/UNbM1OEArTG86 gWUOpJTY4ugpXLC+0Ils735Pa3a/lc8P7tht7afX7c2rqez6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH54zC/dUJcwd2O6cQh8zM7KktQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTYxMzlmM2UtMDgxYi0z NzA0LWI3M2UtOWZmMTgxMWQ0NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHEmUbaZD8+HPZ2AX9DkYb0epkwA4AnL+ucatr3l3XhTiYHvSpxsY07 7P6T5VdOc17kqb8CU59XnDXsoOnV2rqU0er0haT88wofj9JQm3SlzFmfEtmAeBRh OM6hbaOkdrgdpm9S+U63jx1f6+1gcgQx7kLX3gWcul/X4bMLaXEJ/gLA2PTlSx9k +FI9Hr09NKwqqqMwxBrxqZd/ZzLIuzDzby05BDQWrD5X73/JwdLbpHIlxn8OgX1+ h/1tKn/Sn5NFzEflS9c1AJbg6/JRLy2xrktpAgNzGKBGsgTt/vES1xJT0NhRRePa KBsXMN495ebmJdkMC1eEiaRmy6jCTmk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:50 2025 by rpki-client