$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa File: 145fa784-4610-3457-b02b-979db30fed38.roa (raw, json) Hash identifier: A+qmGAWoFNKL6pyaA/gFZq2aGOQDIAVphG4M5vDaxQw= Subject key identifier: 57:A4:C3:CF:DB:DA:79:EB:3C:A1:2C:D8:8A:30:1B:18:5E:66:74:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF14E65E652F520C825488C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa Signing time: Thu 21 Aug 2025 21:01:04 +0000 ROA not before: Thu 21 Aug 2025 21:01:04 +0000 ROA not after: Wed 19 Nov 2025 22:01:04 +0000 asID: 31898 IP address blocks: 140.204.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:14:e6:5e:65:2f:52:0c:82:54:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 21:01:04 2025 GMT Not After : Nov 19 22:01:04 2025 GMT Subject: CN=10fe2c6f-966a-4454-9790-a7626d7daa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:77:32:13:be:bd:02:e0:2d:fd:53:a7:67: 07:0b:f0:f6:1d:1d:c3:9a:76:c8:77:89:59:92:52: 21:47:f4:93:ce:68:05:44:b4:28:f4:14:77:68:d1: 9d:b9:9c:51:56:12:b7:01:5b:fa:b7:3d:96:bf:2f: 0a:6f:0a:55:ca:21:a6:ab:59:10:6c:e4:90:cf:69: 1f:07:d5:00:8d:2d:0d:20:3a:83:81:b6:29:bb:9c: a3:85:80:69:69:03:de:b0:28:9e:57:74:0e:53:20: ef:ad:66:2b:ac:f8:c9:90:d0:e4:4f:f0:46:0a:cd: ed:83:30:46:43:d7:68:76:03:c3:8f:44:ec:3e:2a: 22:d2:31:53:66:ef:ea:62:98:87:db:34:63:cb:61: ca:2e:d6:93:65:ad:fc:89:91:8f:fa:f1:28:ef:7d: c7:d9:2a:81:6f:d8:1a:04:bc:b0:de:ae:cf:2f:af: 02:07:a9:c0:5a:eb:0b:b4:58:f6:39:92:e4:6f:46: 3e:18:c9:f1:7f:8c:47:c5:d6:8d:a0:f3:d9:ef:f8: 1e:80:ff:5a:28:41:37:7c:28:5f:04:c8:64:71:9b: 36:9a:4f:07:30:f3:6b:32:de:2d:eb:30:5a:26:60: ba:4e:48:d9:eb:33:46:7f:8d:13:ba:cc:de:07:7e: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:C3:CF:DB:DA:79:EB:3C:A1:2C:D8:8A:30:1B:18:5E:66:74:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:eb:68:fd:7f:37:26:7e:9c:05:3e:5d:86:c6:e3:e3:45:09: dc:48:09:37:6a:f5:5f:56:6a:b5:3c:5a:a9:35:d2:a0:c0:11: 83:74:2f:e5:cd:0d:f2:a6:6c:73:28:7b:57:69:27:6e:09:39: 1b:2a:a5:7f:3a:61:f8:90:cd:68:c5:6d:31:0e:c5:2e:26:f6: f2:2a:7f:80:c6:1e:84:b9:d8:41:77:3a:bf:01:9d:5f:b0:bc: fb:9e:49:ed:d6:8c:32:56:a4:66:9a:b6:33:d8:e3:4e:6f:a7: 4c:20:48:ee:63:e3:4a:ae:02:2c:27:55:5a:47:90:86:38:59: bf:d3:c3:ff:d9:60:98:62:5f:3e:8e:52:81:26:b8:66:bc:1c: 15:a4:e8:80:ef:c0:33:1b:b2:d9:6a:84:5e:52:2d:0f:2c:42: 84:52:be:1f:64:5c:c9:b9:3c:af:ed:3d:4b:c5:c3:80:d4:5c: 2f:60:cd:b2:ae:3c:55:aa:d5:51:d9:06:95:63:45:0f:81:61: 22:d8:b6:0d:95:e7:80:09:eb:12:c0:db:3a:dc:69:c3:19:9f: 99:c7:7c:05:08:2a:e8:da:56:13:9c:fd:92:ef:65:15:dc:8a: f4:49:50:fe:95:0c:9a:78:86:52:94:cd:c3:6d:7f:97:0f:89: 44:62:51:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvFOZeZS9SDIJUiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIxMDEwNFoXDTI1MTExOTIyMDEwNFowLzEtMCsGA1UEAxMk MTBmZTJjNmYtOTY2YS00NDU0LTk3OTAtYTc2MjZkN2RhYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucx3MhO+vQLgLf1Tp2cHC/D2HR3DmnbId4lZ klIhR/STzmgFRLQo9BR3aNGduZxRVhK3AVv6tz2Wvy8KbwpVyiGmq1kQbOSQz2kf B9UAjS0NIDqDgbYpu5yjhYBpaQPesCieV3QOUyDvrWYrrPjJkNDkT/BGCs3tgzBG Q9dodgPDj0TsPioi0jFTZu/qYpiH2zRjy2HKLtaTZa38iZGP+vEo733H2SqBb9ga BLyw3q7PL68CB6nAWusLtFj2OZLkb0Y+GMnxf4xHxdaNoPPZ7/gegP9aKEE3fChf BMhkcZs2mk8HMPNrMt4t6zBaJmC6TkjZ6zNGf40TuszeB37JfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFekw8/b2nnrPKEs2IowGxheZnR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQ1ZmE3ODQtNDYxMC0z NDU3LWIwMmItOTc5ZGIzMGZlZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvraP1/NyZ+nAU+XYbG4+NFCdxICTdq9V9WarU8Wqk10qDAEYN0L+XN DfKmbHMoe1dpJ24JORsqpX86YfiQzWjFbTEOxS4m9vIqf4DGHoS52EF3Or8BnV+w vPueSe3WjDJWpGaatjPY405vp0wgSO5j40quAiwnVVpHkIY4Wb/Tw//ZYJhiXz6O UoEmuGa8HBWk6IDvwDMbstlqhF5SLQ8sQoRSvh9kXMm5PK/tPUvFw4DUXC9gzbKu PFWq1VHZBpVjRQ+BYSLYtg2V54AJ6xLA2zrcacMZn5nHfAUIKujaVhOc/ZLvZRXc ivRJUP6VDJp4hlKUzcNtf5cPiURiUTs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:54 2025 by rpki-client