$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b0e19e5-d8ed-37fa-92f6-d73986a9a90b.roa File: 0b0e19e5-d8ed-37fa-92f6-d73986a9a90b.roa (raw, json) Hash identifier: vtigWcNcHtojWn98joQLHAPHR9RLy3A7yLDfIpO+hBA= Subject key identifier: B7:F9:9E:6B:04:3C:53:B1:9E:9F:86:D1:3E:61:AB:6D:2E:46:DF:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC00340FA83FE8F21BD7CA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b0e19e5-d8ed-37fa-92f6-d73986a9a90b.roa Signing time: Wed 20 Aug 2025 18:31:57 +0000 ROA not before: Wed 20 Aug 2025 18:31:57 +0000 ROA not after: Tue 18 Nov 2025 19:31:57 +0000 asID: 31898 IP address blocks: 140.204.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:34:0f:a8:3f:e8:f2:1b:d7:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:31:57 2025 GMT Not After : Nov 18 19:31:57 2025 GMT Subject: CN=a5c840ea-a505-4464-add6-e979b455c4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:0d:53:62:02:dd:6d:63:9b:a8:65:6f:27: a4:5c:43:74:cc:ff:14:07:bd:ca:f5:61:69:64:6c: 63:6a:f6:d0:19:a0:48:a2:91:a0:34:f9:fa:34:c7: a9:82:3b:b0:59:5b:41:e2:5d:cc:1f:31:44:a9:bb: ec:d1:fe:8d:bc:87:84:c2:01:a3:f1:17:b4:d6:53: d1:6e:95:ca:59:8c:bc:7e:8e:9f:6a:de:ad:ef:be: e4:ad:68:31:13:74:52:d3:a9:41:c1:c0:06:cd:ad: 06:2e:0c:f5:6a:e1:25:9f:63:43:0c:1e:97:e7:f2: 98:79:14:6b:e1:00:11:7a:86:4e:86:7e:b2:be:2c: 27:36:4c:ef:47:b0:5e:91:ae:fe:2b:38:3e:77:17: f0:04:9f:69:6f:04:7a:5d:20:a3:21:1e:d9:d5:f3: 01:53:a4:2a:48:df:2b:ac:5b:f3:dc:6d:94:7d:b8: 37:cd:0b:2c:22:86:a0:c2:f1:0f:45:5a:79:05:65: f9:d2:2d:df:e7:86:36:f8:26:cd:28:e7:ff:44:23: bd:d7:8b:b0:31:c1:cd:33:f7:4e:ab:e2:23:5f:79: 85:ba:da:52:e1:51:4e:7c:6c:a7:96:46:93:28:16: 84:85:e8:b5:3d:bd:30:6a:e8:7b:d2:ad:d5:57:cf: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:9E:6B:04:3C:53:B1:9E:9F:86:D1:3E:61:AB:6D:2E:46:DF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b0e19e5-d8ed-37fa-92f6-d73986a9a90b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4c:fa:be:34:8e:83:ef:fc:c3:6c:0b:43:fa:00:85:09:7c: 46:90:25:ca:91:b1:13:49:dd:90:ea:eb:5e:06:96:39:5a:44: fe:2b:08:e6:ae:11:15:14:5f:dd:27:31:90:b9:c0:53:5b:e1: 09:d5:1f:ee:0d:37:29:7a:d2:c6:66:d4:4b:a6:6e:1f:96:e7: 5e:74:0a:92:53:de:af:5b:37:9f:a6:d6:6b:44:ab:22:27:14: 7d:8f:a3:c4:09:d7:0a:5e:a2:39:79:ea:9e:71:7a:79:23:a0: b0:c3:7b:06:6f:0e:66:71:e8:04:06:32:6a:0c:64:19:f1:bd: ff:a0:ef:8f:90:d5:4d:73:40:ad:33:7b:9c:56:81:39:2a:99: d6:dd:19:47:6f:18:c3:66:1d:f4:1e:a2:f7:ef:9b:2c:91:ea: 22:07:18:b8:65:da:4f:56:64:62:f2:61:92:27:43:c6:2d:0b: 03:25:47:36:3a:e5:03:4c:fd:e5:39:b7:0c:75:9c:5a:bf:51: 1f:75:00:ea:d1:6e:ee:66:0c:af:e9:c1:22:96:63:4f:16:80: b9:fc:4e:8f:9c:43:f6:c9:bf:7a:95:51:69:f0:a8:06:d8:21: 4b:4d:ec:77:6f:b3:30:d9:7e:b8:02:e9:89:21:43:09:b7:e7: 9a:44:70:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsADQPqD/o8hvXyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MzE1N1oXDTI1MTExODE5MzE1N1owLzEtMCsGA1UEAxMk YTVjODQwZWEtYTUwNS00NDY0LWFkZDYtZTk3OWI0NTVjNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkcNU2IC3W1jm6hlbyekXEN0zP8UB73K9WFp ZGxjavbQGaBIopGgNPn6NMepgjuwWVtB4l3MHzFEqbvs0f6NvIeEwgGj8Re01lPR bpXKWYy8fo6fat6t777krWgxE3RS06lBwcAGza0GLgz1auEln2NDDB6X5/KYeRRr 4QAReoZOhn6yviwnNkzvR7Beka7+Kzg+dxfwBJ9pbwR6XSCjIR7Z1fMBU6QqSN8r rFvz3G2Ufbg3zQssIoagwvEPRVp5BWX50i3f54Y2+CbNKOf/RCO914uwMcHNM/dO q+IjX3mFutpS4VFOfGynlkaTKBaEhei1Pb0wauh70q3VV8/NpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf5nmsEPFOxnp+G0T5hq20uRt/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGIwZTE5ZTUtZDhlZC0z N2ZhLTkyZjYtZDczOTg2YTlhOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlM+r40joPv/MNsC0P6AIUJfEaQJcqRsRNJ3ZDq614GljlaRP4rCOau ERUUX90nMZC5wFNb4QnVH+4NNyl60sZm1Eumbh+W5150CpJT3q9bN5+m1mtEqyIn FH2Po8QJ1wpeojl56p5xenkjoLDDewZvDmZx6AQGMmoMZBnxvf+g74+Q1U1zQK0z e5xWgTkqmdbdGUdvGMNmHfQeovfvmyyR6iIHGLhl2k9WZGLyYZInQ8YtCwMlRzY6 5QNM/eU5twx1nFq/UR91AOrRbu5mDK/pwSKWY08WgLn8To+cQ/bJv3qVUWnwqAbY IUtN7HdvszDZfrgC6YkhQwm355pEcNs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:07 2025 by rpki-client