$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa File: 07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa (raw, json) Hash identifier: nNGDOPuxHjtSzKtxtFgvOhMpzOmTpNxIacX2V5Emogk= Subject key identifier: E0:6E:54:D3:37:84:05:0F:26:B9:3E:A2:67:23:D9:C5:05:11:D2:A4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA5B4E7A7D848843923540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa Signing time: Thu 21 Aug 2025 10:27:18 +0000 ROA not before: Thu 21 Aug 2025 10:27:18 +0000 ROA not after: Wed 19 Nov 2025 11:27:18 +0000 asID: 31898 IP address blocks: 140.204.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:5b:4e:7a:7d:84:88:43:92:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:18 2025 GMT Not After : Nov 19 11:27:18 2025 GMT Subject: CN=db604479-b1d5-4ed5-9927-6b55d43b6d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:17:bc:92:dd:a7:7b:50:86:6e:07:de:a0: f7:84:34:6b:87:c0:3c:83:01:ca:c2:d7:ad:88:f5: db:8f:b8:c4:36:a9:90:0c:90:af:d3:1b:bd:a6:5d: 59:b2:c0:c2:4f:79:e5:09:d7:0e:1c:b7:79:cb:9c: 68:2c:9f:b5:f9:25:2f:a7:b7:a7:b5:e2:2f:40:3e: 52:67:c7:3c:6e:ed:78:4e:5b:8d:a7:fc:b7:bb:76: 37:68:a4:8a:10:95:aa:51:29:d1:47:3e:82:6c:06: 88:44:0f:38:ed:c6:4a:52:17:00:b5:7e:44:f1:f6: 85:38:9d:93:1b:41:ce:84:d0:06:9a:36:80:fa:11: 25:95:c7:41:0c:c3:a4:62:28:15:61:bf:1a:ca:b2: 91:06:d3:e7:43:6a:07:25:dd:bc:bb:df:98:ae:91: 48:f4:e9:97:95:92:2f:ee:de:eb:f5:a9:9c:40:5d: d6:5f:c2:a8:6f:f3:d6:26:f9:5e:f8:61:bd:f8:65: c9:8b:1a:db:30:3e:5b:d1:47:03:37:ad:5f:02:a2: 6f:bb:5d:ec:97:a7:eb:69:a0:2a:4c:45:07:a0:d0: 45:17:bd:1a:d6:f1:df:51:f9:36:9d:7b:57:bb:fb: 9d:c2:34:47:06:f7:9b:77:e5:f0:9c:7b:33:49:1d: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6E:54:D3:37:84:05:0F:26:B9:3E:A2:67:23:D9:C5:05:11:D2:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3c:2d:c6:ab:ae:b8:8e:0d:2a:5d:d9:8d:a6:03:eb:58:24: d9:87:fb:b0:ed:8c:e1:7e:9c:38:8b:fb:3c:4e:8c:f5:56:e2: a7:6c:bc:67:63:51:b8:51:2c:0f:41:10:3c:aa:e2:0c:a9:96: 3b:08:34:7a:40:db:48:a4:b7:b3:20:10:fc:0b:d7:e9:b2:4c: f1:c1:d4:31:a7:1b:74:95:06:41:e4:f3:70:d0:39:03:93:31: 21:e9:a2:29:d4:27:8c:d2:e0:88:04:52:a0:39:4c:cb:14:49: ce:03:2c:5d:55:b7:35:c1:a4:74:27:29:1e:f2:fc:0b:e0:ad: da:ac:8a:b9:da:d1:b4:9b:b5:6d:2f:3d:07:28:f9:76:3b:cc: 39:41:71:77:b9:76:0a:e9:e8:e7:03:6e:98:3a:c1:44:33:4c: 1b:85:04:38:0e:be:d7:a1:8a:43:11:06:52:1b:d3:bf:93:11: f4:50:51:3f:34:34:52:38:24:d6:63:7c:3f:6e:aa:ad:96:66: e3:94:69:a4:e2:71:9e:94:09:ba:27:0f:d7:a7:26:50:39:d2: 78:a9:90:ed:ad:37:b6:d0:7f:33:06:b4:a8:d0:d4:73:65:45: ee:72:af:ad:e2:c9:f7:03:ca:00:12:55:fd:dd:4c:22:41:b3: bc:48:c1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2ltOen2EiEOSNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjcxOFoXDTI1MTExOTExMjcxOFowLzEtMCsGA1UEAxMk ZGI2MDQ0NzktYjFkNS00ZWQ1LTk5MjctNmI1NWQ0M2I2ZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9UXvJLdp3tQhm4H3qD3hDRrh8A8gwHKwtet iPXbj7jENqmQDJCv0xu9pl1ZssDCT3nlCdcOHLd5y5xoLJ+1+SUvp7enteIvQD5S Z8c8bu14TluNp/y3u3Y3aKSKEJWqUSnRRz6CbAaIRA847cZKUhcAtX5E8faFOJ2T G0HOhNAGmjaA+hEllcdBDMOkYigVYb8ayrKRBtPnQ2oHJd28u9+YrpFI9OmXlZIv 7t7r9amcQF3WX8Kob/PWJvle+GG9+GXJixrbMD5b0UcDN61fAqJvu13sl6fraaAq TEUHoNBFF70a1vHfUfk2nXtXu/udwjRHBvebd+XwnHszSR20GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBuVNM3hAUPJrk+omcj2cUFEdKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDdlMzBkYjgtZDliMS0z MmE0LTgzYWMtYjE5NDU2NWIzYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw8LcarrriODSpd2Y2mA+tYJNmH+7DtjOF+nDiL+zxOjPVW4qdsvGdj UbhRLA9BEDyq4gypljsINHpA20ikt7MgEPwL1+myTPHB1DGnG3SVBkHk83DQOQOT MSHpoinUJ4zS4IgEUqA5TMsUSc4DLF1VtzXBpHQnKR7y/Avgrdqsirna0bSbtW0v PQco+XY7zDlBcXe5dgrp6OcDbpg6wUQzTBuFBDgOvtehikMRBlIb07+TEfRQUT80 NFI4JNZjfD9uqq2WZuOUaaTicZ6UCbonD9enJlA50nipkO2tN7bQfzMGtKjQ1HNl Re5yr63iyfcDygASVf3dTCJBs7xIwV8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:29 2025 by rpki-client