$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa File: e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa (raw, json) Hash identifier: XBj1m2moMFQuDzTl5mpHqufxQXwNZGKB9+Qy8/gpIN8= Subject key identifier: FE:38:82:F9:DB:EA:54:55:D6:F4:58:B6:26:B8:A2:EA:6E:68:7A:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4314B11CBA2E035E8AFE10 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa Signing time: Tue 26 Aug 2025 22:55:26 +0000 ROA not before: Tue 26 Aug 2025 22:55:26 +0000 ROA not after: Mon 24 Nov 2025 23:55:26 +0000 asID: 31898 IP address blocks: 157.137.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:43:14:b1:1c:ba:2e:03:5e:8a:fe:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:26 2025 GMT Not After : Nov 24 23:55:26 2025 GMT Subject: CN=5cebee39-257c-4d52-8fe2-5dc29af7bf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:94:56:2f:e3:1c:2b:21:05:96:51:33:24:85: 12:c5:21:26:fe:42:3a:b4:41:ce:f9:e9:1f:58:55: 0e:a9:27:12:81:19:fe:a2:b2:8e:de:4f:d4:0c:9b: fc:03:dd:3e:ab:a5:67:cd:a7:76:4b:b4:a7:4a:d5: 22:5a:00:7b:9b:54:95:b2:d4:6e:96:2a:1c:f7:8c: 5d:dd:ca:7c:23:1f:05:fc:ba:05:38:ca:2b:88:c8: 97:b6:ed:16:1d:61:7d:c9:b5:b8:44:87:6a:2e:7b: 09:67:e7:b3:2b:31:65:b3:a8:8b:17:72:92:c8:68: ec:4a:6b:51:06:73:7f:1f:3f:46:6c:c7:ed:35:39: 20:84:83:fa:d4:9d:2f:8e:54:29:70:89:d1:4d:48: be:99:fc:37:98:ba:85:98:75:52:83:b7:a3:45:da: 27:bd:94:7b:4e:d2:77:83:c4:45:d1:e5:8a:9a:8c: 11:14:98:dd:23:e8:f2:d7:3f:4b:c9:20:82:f5:5d: 6a:54:97:d7:6c:ca:88:2f:99:41:b6:c9:a9:e4:99: 26:4b:7e:af:bc:5d:20:01:52:44:37:9a:9e:56:4b: 21:b3:71:e0:a1:32:5f:a2:95:e9:04:0a:ef:7b:6c: 52:7c:bd:40:f4:84:17:95:36:22:3d:a8:9f:9a:35: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:82:F9:DB:EA:54:55:D6:F4:58:B6:26:B8:A2:EA:6E:68:7A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3c:81:d3:40:89:d3:c3:21:dc:df:4c:82:f4:34:56:13:2b: 14:0c:e7:48:cf:f0:4e:95:98:81:07:7c:3a:7d:57:a3:00:79: fa:e3:69:29:05:89:b9:41:7f:74:6a:68:e6:94:38:c6:76:54: 7f:f9:07:dd:ac:23:41:a7:c0:3c:4a:1c:4f:d2:30:10:1c:a4: 14:5a:c9:d6:7c:32:c4:3d:db:db:27:32:fb:de:41:03:1b:cb: d8:be:8a:87:a0:cd:07:d9:33:65:30:77:07:77:37:68:e5:91: 82:e8:bc:49:2c:73:88:9c:b6:ce:68:00:ba:81:19:83:0b:ef: 8f:49:4c:aa:a7:df:d7:85:d7:32:6b:ce:f9:15:1d:21:7e:f3: 41:c6:23:af:19:db:63:b4:d7:dd:86:ef:2b:91:17:3b:1b:c4: 7d:97:ec:bb:53:a7:f5:cf:da:d4:87:d6:47:df:15:48:a0:1c: 97:68:6e:2b:a4:c1:9c:0f:2c:bb:a2:d9:6b:54:49:84:87:f6: d7:2e:03:ef:29:be:5b:f9:3a:a5:66:07:4d:7b:31:f1:02:c4: fe:2d:12:e1:be:a5:79:6b:d4:6c:67:a4:15:2b:b5:c4:b0:90: 16:cb:55:04:83:3c:82:44:05:01:95:7c:6b:fa:81:ae:45:2c: 71:9c:7e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QxSxHLouA16K/hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUyNloXDTI1MTEyNDIzNTUyNlowLzEtMCsGA1UEAxMk NWNlYmVlMzktMjU3Yy00ZDUyLThmZTItNWRjMjlhZjdiZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJRWL+McKyEFllEzJIUSxSEm/kI6tEHO+ekf WFUOqScSgRn+orKO3k/UDJv8A90+q6Vnzad2S7SnStUiWgB7m1SVstRulioc94xd 3cp8Ix8F/LoFOMoriMiXtu0WHWF9ybW4RIdqLnsJZ+ezKzFls6iLF3KSyGjsSmtR BnN/Hz9GbMftNTkghIP61J0vjlQpcInRTUi+mfw3mLqFmHVSg7ejRdonvZR7TtJ3 g8RF0eWKmowRFJjdI+jy1z9LySCC9V1qVJfXbMqIL5lBtsmp5JkmS36vvF0gAVJE N5qeVkshs3HgoTJfopXpBArve2xSfL1A9IQXlTYiPaifmjWeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP44gvnb6lRV1vRYtia4oupuaHpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTliOGMyYjItMjRkYy0z ZjMxLTk5ZDUtNjYyZmExYjcyNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk8gdNAidPDIdzfTIL0NFYTKxQM50jP8E6VmIEHfDp9V6MAefrjaSkF iblBf3RqaOaUOMZ2VH/5B92sI0GnwDxKHE/SMBAcpBRaydZ8MsQ929snMvveQQMb y9i+ioegzQfZM2Uwdwd3N2jlkYLovEksc4icts5oALqBGYML749JTKqn39eF1zJr zvkVHSF+80HGI68Z22O0192G7yuRFzsbxH2X7LtTp/XP2tSH1kffFUigHJdobiuk wZwPLLui2WtUSYSH9tcuA+8pvlv5OqVmB017MfECxP4tEuG+pXlr1GxnpBUrtcSw kBbLVQSDPIJEBQGVfGv6ga5FLHGcfh0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:41 2025 by rpki-client