$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1cc4a5a1-0101-3d2b-a816-ecee1e31e56a.roa File: 1cc4a5a1-0101-3d2b-a816-ecee1e31e56a.roa (raw, json) Hash identifier: Dg3Dznay/dfC+2q465fsnGWyq7AB/gTRRk6qnIbc+oE= Subject key identifier: 45:30:5C:5C:F1:D9:4D:1A:4A:18:9C:6C:E3:96:53:C8:05:BC:DA:05 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C8A2E3ADF5FCF9F5D98C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1cc4a5a1-0101-3d2b-a816-ecee1e31e56a.roa Signing time: Wed 20 Aug 2025 21:05:45 +0000 ROA not before: Wed 20 Aug 2025 21:05:45 +0000 ROA not after: Tue 18 Nov 2025 22:05:45 +0000 asID: 31898 IP address blocks: 140.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:8a:2e:3a:df:5f:cf:9f:5d:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:45 2025 GMT Not After : Nov 18 22:05:45 2025 GMT Subject: CN=2dc39d14-14d1-4ac8-ab0d-32c5836f932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:d4:89:72:89:a2:b6:33:86:62:62:3e:d0: 1c:89:9e:a4:a7:e5:bf:70:69:29:e4:74:7a:bb:78: a2:75:9b:cb:d2:d2:12:5c:be:f6:33:7c:35:4f:59: 26:14:1c:24:a6:be:6a:92:cd:5f:62:bd:41:33:64: 99:48:53:34:e5:cf:b4:28:e5:d1:55:10:4d:94:4e: 79:0e:b2:8d:52:71:99:1f:84:d6:49:7c:10:89:57: d8:73:43:f8:2e:fb:45:20:fb:65:b2:73:bc:78:7b: 3e:da:86:33:1b:11:e4:2c:d7:f7:7f:76:e2:90:74: 94:9a:5e:1d:fc:73:fa:b6:68:d6:5d:70:3c:53:9a: 17:02:fa:a2:30:0f:c8:e2:35:e9:83:0b:c0:96:94: 22:46:a2:1f:ba:d2:61:91:df:39:ce:ef:4c:55:d6: e7:80:11:73:aa:c0:3f:e3:66:fe:f8:f5:8b:85:e6: 76:b8:3f:07:86:4b:cf:42:4c:df:86:eb:b8:a8:01: 36:1d:94:09:1c:67:6b:d1:7f:0a:01:62:2e:21:94: 8f:39:4d:5d:d3:3b:9b:f2:48:3e:ba:72:56:5e:36: 89:24:ff:97:4b:f9:da:81:33:2b:b2:75:17:a1:09: 37:ed:b5:f8:e6:c2:2b:a3:d2:18:d8:0b:04:49:7a: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:30:5C:5C:F1:D9:4D:1A:4A:18:9C:6C:E3:96:53:C8:05:BC:DA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1cc4a5a1-0101-3d2b-a816-ecee1e31e56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6d:b2:dd:f7:3d:4a:dc:ca:e3:b9:83:c7:78:2d:a9:6d:69: f6:20:40:6a:c8:12:a1:67:f0:b4:18:f9:98:52:2f:e8:47:c2: ab:bc:02:6f:c3:24:26:b2:5b:95:88:7f:e1:2e:fb:a5:d6:6e: bc:0d:d6:87:ed:59:1a:fd:06:cd:5a:d3:7b:4a:6d:e3:9a:5a: 11:56:5f:28:2a:13:bb:9a:f2:2f:c8:42:39:74:a3:9d:ff:da: 8c:ba:e7:36:e8:e0:e8:d6:fe:55:4c:59:5b:8f:6a:91:cf:f3: 25:e6:5c:f3:42:6a:5e:10:d5:ab:93:a0:f0:46:e3:ac:bb:a9: 59:fc:88:06:dc:3b:1b:9b:06:3a:5e:95:79:c5:7c:d0:18:2a: f5:dc:f7:2a:76:37:9c:4a:76:7e:20:1d:62:22:96:2f:0a:5b: 9f:b7:7a:4c:a9:b6:9e:96:34:f0:cb:71:cb:c4:95:c8:b9:13: 75:55:e4:d4:98:4f:46:1e:1a:10:34:36:8c:15:f5:8b:66:10: 14:41:39:24:90:2f:38:20:8a:3f:ed:bd:b6:8e:0b:f5:82:1d: f6:7a:a9:80:63:b3:ae:49:29:18:07:7a:e2:a2:23:48:82:c6: aa:55:f6:20:fc:40:bd:c9:42:f6:94:53:fe:27:bd:84:c3:c0: 98:23:0f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTIouOt9fz59dmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU0NVoXDTI1MTExODIyMDU0NVowLzEtMCsGA1UEAxMk MmRjMzlkMTQtMTRkMS00YWM4LWFiMGQtMzJjNTgzNmY5MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz7UiXKJorYzhmJiPtAciZ6kp+W/cGkp5HR6 u3iidZvL0tISXL72M3w1T1kmFBwkpr5qks1fYr1BM2SZSFM05c+0KOXRVRBNlE55 DrKNUnGZH4TWSXwQiVfYc0P4LvtFIPtlsnO8eHs+2oYzGxHkLNf3f3bikHSUml4d /HP6tmjWXXA8U5oXAvqiMA/I4jXpgwvAlpQiRqIfutJhkd85zu9MVdbngBFzqsA/ 42b++PWLheZ2uD8HhkvPQkzfhuu4qAE2HZQJHGdr0X8KAWIuIZSPOU1d0zub8kg+ unJWXjaJJP+XS/nagTMrsnUXoQk37bX45sIro9IY2AsESXogjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUwXFzx2U0aShicbOOWU8gFvNoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWNjNGE1YTEtMDEwMS0z ZDJiLWE4MTYtZWNlZTFlMzFlNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjPVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBtst33PUrcyuO5g8d4LaltafYgQGrIEqFn8LQY+ZhSL+hHwqu8Am/D JCayW5WIf+Eu+6XWbrwN1oftWRr9Bs1a03tKbeOaWhFWXygqE7ua8i/IQjl0o53/ 2oy65zbo4OjW/lVMWVuPapHP8yXmXPNCal4Q1auToPBG46y7qVn8iAbcOxubBjpe lXnFfNAYKvXc9yp2N5xKdn4gHWIili8KW5+3ekyptp6WNPDLccvElci5E3VV5NSY T0YeGhA0NowV9YtmEBRBOSSQLzggij/tvbaOC/WCHfZ6qYBjs65JKRgHeuKiI0iC xqpV9iD8QL3JQvaUU/4nvYTDwJgjD+k= -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:17 2025 by rpki-client