$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa File: 1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa (raw, json) Hash identifier: h8nHMSoJN8aQvPpD9LPdwVMkwD/tSpFEmGkQ1owEV20= Subject key identifier: 29:7E:BF:97:65:CA:32:91:2D:4A:8F:16:39:4F:B0:55:0B:49:04:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A67E2D2034CE7BB020480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa Signing time: Thu 21 Aug 2025 13:08:36 +0000 ROA not before: Thu 21 Aug 2025 13:08:36 +0000 ROA not after: Wed 19 Nov 2025 14:08:36 +0000 asID: 31898 IP address blocks: 140.204.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:67:e2:d2:03:4c:e7:bb:02:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:36 2025 GMT Not After : Nov 19 14:08:36 2025 GMT Subject: CN=51d60779-ab02-4193-b94d-8f48234a1fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:52:6c:2a:ad:ad:82:72:1f:93:32:04:14: fb:1a:c0:f8:90:80:76:33:94:27:96:12:9b:2b:e0: 08:eb:0c:17:48:82:2b:89:13:7b:0e:ae:3a:7d:a7: b2:78:e6:7c:03:1c:31:f4:3d:d5:ca:46:2e:83:b7: 16:85:4d:a1:f7:61:7e:e6:f7:ee:cd:a7:80:6c:8b: 2b:5e:85:da:f3:45:a3:77:6b:be:f6:c7:34:65:4c: 6c:60:3a:bb:ae:1d:5e:00:59:fd:08:74:98:92:75: 61:4b:af:24:30:0c:bf:0e:71:d8:42:95:53:e4:bb: a2:76:ef:e2:0d:bc:74:a0:3b:37:e9:01:14:f0:26: 66:1a:50:ab:b9:8b:16:a3:07:f9:0d:07:cc:78:f2: 01:65:c7:d8:38:12:29:0b:ee:17:12:21:2a:92:65: 6c:55:c8:02:55:ef:a7:80:06:f2:e1:c7:d2:64:8a: d6:95:06:a0:d0:5c:68:e2:a6:c1:dd:52:2b:34:79: 64:11:cf:2d:18:c3:a8:af:57:a2:74:af:0b:65:c3: 99:92:fe:8b:18:1a:44:fe:6f:ef:19:72:51:68:65: 70:dd:d6:08:cd:ff:98:af:9e:b5:37:3c:06:28:b1: 70:bf:0a:cb:df:08:d7:23:0b:93:f2:45:d9:e7:8f: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:BF:97:65:CA:32:91:2D:4A:8F:16:39:4F:B0:55:0B:49:04:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:71:ef:37:d3:97:a7:21:61:4b:2c:d7:30:80:99:04:3f:94: fa:74:6c:d5:29:a1:65:3f:f2:b2:e3:fd:30:ac:e7:46:2a:ca: 35:e1:43:3c:75:e3:00:9a:e1:79:d3:13:e6:7c:47:09:12:d6: dc:61:8f:a3:d8:5d:4d:34:84:ea:d4:c4:01:c1:c9:be:02:f4: 23:8e:f7:22:62:d4:5b:a4:4c:60:a3:bc:d3:0d:27:a8:72:9f: 08:9d:a1:a7:6f:52:bd:62:f5:49:b0:90:c0:30:52:70:3b:ed: f7:d5:3d:96:80:67:48:ff:eb:1a:cc:b7:06:5b:f9:67:be:ec: 9e:71:eb:19:66:d7:7f:22:e5:2d:9a:9a:18:0d:41:8f:10:34: 0c:0c:0a:ba:ba:95:df:b4:58:53:ee:45:b4:31:2a:81:51:e9: 5e:65:f8:b8:11:0d:74:77:9a:5e:bd:ad:ab:12:ed:e8:23:d3: 39:73:e8:2b:9d:7c:f0:55:06:92:6a:c4:35:4f:de:72:a3:45: 70:e1:f7:70:d1:43:a3:af:7d:cf:1e:5f:9e:19:6f:74:71:2a: 65:df:5b:fb:c4:21:20:a9:c9:76:4a:02:61:ec:85:09:0e:3f: 6b:79:0f:66:b8:db:50:9e:7f:34:39:04:ae:17:ac:07:0a:6c: 29:37:83:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmfi0gNM57sCBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzNloXDTI1MTExOTE0MDgzNlowLzEtMCsGA1UEAxMk NTFkNjA3NzktYWIwMi00MTkzLWI5NGQtOGY0ODIzNGExZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyxSbCqtrYJyH5MyBBT7GsD4kIB2M5QnlhKb K+AI6wwXSIIriRN7Dq46faeyeOZ8Axwx9D3VykYug7cWhU2h92F+5vfuzaeAbIsr XoXa80Wjd2u+9sc0ZUxsYDq7rh1eAFn9CHSYknVhS68kMAy/DnHYQpVT5Luidu/i Dbx0oDs36QEU8CZmGlCruYsWowf5DQfMePIBZcfYOBIpC+4XEiEqkmVsVcgCVe+n gAby4cfSZIrWlQag0Fxo4qbB3VIrNHlkEc8tGMOor1eidK8LZcOZkv6LGBpE/m/v GXJRaGVw3dYIzf+Yr561NzwGKLFwvwrL3wjXIwuT8kXZ54/srQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl+v5dlyjKRLUqPFjlPsFULSQQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI1MmQ4NmUtY2M3Mi0z NGViLTg5OGUtZjBjYTJhNDU3ZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1x7zfTl6chYUss1zCAmQQ/lPp0bNUpoWU/8rLj/TCs50YqyjXhQzx1 4wCa4XnTE+Z8RwkS1txhj6PYXU00hOrUxAHByb4C9COO9yJi1FukTGCjvNMNJ6hy nwidoadvUr1i9UmwkMAwUnA77ffVPZaAZ0j/6xrMtwZb+We+7J5x6xlm138i5S2a mhgNQY8QNAwMCrq6ld+0WFPuRbQxKoFR6V5l+LgRDXR3ml69rasS7egj0zlz6Cud fPBVBpJqxDVP3nKjRXDh93DRQ6Ovfc8eX54Zb3RxKmXfW/vEISCpyXZKAmHshQkO P2t5D2a421CefzQ5BK4XrAcKbCk3g7o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:54 2025 by rpki-client