$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2526ae5e-bfd7-38f7-9b05-adf5279a776d.roa File: 2526ae5e-bfd7-38f7-9b05-adf5279a776d.roa (raw, json) Hash identifier: gB8F6uVbVw5JcDkEROvcwTn3dHWDZ0/kdBZ8+2PF4w0= Subject key identifier: F4:05:80:D7:19:E7:CA:48:E1:61:7E:0D:59:13:F0:A6:7D:58:6C:DB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB441100DCA20152238E1900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2526ae5e-bfd7-38f7-9b05-adf5279a776d.roa Signing time: Wed 20 Aug 2025 12:12:52 +0000 ROA not before: Wed 20 Aug 2025 12:12:52 +0000 ROA not after: Tue 18 Nov 2025 13:12:52 +0000 asID: 31898 IP address blocks: 140.204.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:11:00:dc:a2:01:52:23:8e:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:52 2025 GMT Not After : Nov 18 13:12:52 2025 GMT Subject: CN=db99f6b1-1e82-448d-90c0-baa73ecc9475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a8:20:94:c2:25:5a:00:87:48:e6:39:82:18: 03:80:f9:b5:88:e6:e4:3c:23:4d:f4:58:7a:dc:83: d3:d2:c3:bb:34:6f:1a:dc:3a:07:cc:81:fc:65:40: 7d:eb:3e:89:a5:0d:6c:e1:63:b5:e6:55:3f:10:68: 6b:fd:f5:2e:01:fc:47:42:11:a8:2c:f4:9a:c9:77: 3b:cd:de:e6:73:90:f3:b1:de:20:1a:62:15:f8:a9: 39:60:26:e2:d8:3b:ef:cf:6b:78:d6:4b:b3:18:11: 64:3e:c2:bd:60:04:95:b8:6b:e2:67:c1:52:f9:f1: 71:34:a4:69:74:de:c1:d7:8f:af:ea:46:a0:55:92: 5f:28:9c:42:58:de:c4:14:d2:86:26:b8:11:93:31: fc:5e:ed:03:66:b2:91:79:7f:a6:15:59:a0:01:82: f6:a3:14:eb:e4:b3:2e:86:03:54:f2:7a:5d:28:26: 51:d9:80:26:dc:35:ee:83:15:b4:74:3d:37:e2:13: 6b:83:3c:72:5c:8f:a8:87:30:14:0f:24:2a:b8:1b: 44:7d:82:56:40:e8:88:2b:1e:58:c1:5c:07:78:4d: 59:61:d2:56:b1:18:b0:66:4a:7e:a1:87:c7:79:b0: 88:74:c8:de:c0:00:02:50:48:a5:76:2c:d2:d0:76: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:05:80:D7:19:E7:CA:48:E1:61:7E:0D:59:13:F0:A6:7D:58:6C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2526ae5e-bfd7-38f7-9b05-adf5279a776d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1f:95:11:72:6f:19:57:30:a1:5c:2b:26:48:68:de:43:05: ff:a0:10:68:d4:6b:e9:59:f9:6f:82:22:55:0f:d3:90:19:c8: 5e:d2:35:1e:93:56:5e:00:28:f3:80:0a:ec:91:08:9c:68:8a: 57:bc:b6:9f:e6:9c:b6:ce:c5:fe:65:37:2f:33:35:62:cb:b5: 1c:4e:4e:4f:44:57:c9:d7:c9:b4:27:33:29:af:d6:81:44:dc: b6:ac:8a:31:ea:1c:d0:bc:3b:fc:a5:fc:79:23:98:23:4a:dd: f2:a1:d4:35:3a:34:b5:12:94:44:ff:ca:00:95:93:f9:c8:a3: 08:46:7c:a8:c1:55:09:46:1c:92:0e:d6:1f:11:ca:03:cb:c2: a6:a5:8c:e9:cf:76:26:10:d1:66:4a:69:97:a0:cc:45:20:16: 99:53:d8:b1:f6:2b:81:af:59:53:f5:0c:ec:d1:08:24:fc:ed: 9d:6a:d2:2f:b3:fb:c4:8e:b6:b0:65:52:0f:65:cd:a7:b7:a1: 27:2f:70:cd:be:f3:4f:8f:ea:2c:d1:fd:bf:d7:75:3b:79:91: 5c:38:65:f8:c8:a6:5e:aa:67:ab:df:f4:56:cc:25:21:b3:0b: e7:40:34:c8:5f:a3:ec:22:b7:2b:98:5e:e3:54:90:cb:e4:34: d6:19:b8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRBEA3KIBUiOOGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1MloXDTI1MTExODEzMTI1MlowLzEtMCsGA1UEAxMk ZGI5OWY2YjEtMWU4Mi00NDhkLTkwYzAtYmFhNzNlY2M5NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhagglMIlWgCHSOY5ghgDgPm1iObkPCNN9Fh6 3IPT0sO7NG8a3DoHzIH8ZUB96z6JpQ1s4WO15lU/EGhr/fUuAfxHQhGoLPSayXc7 zd7mc5Dzsd4gGmIV+Kk5YCbi2Dvvz2t41kuzGBFkPsK9YASVuGviZ8FS+fFxNKRp dN7B14+v6kagVZJfKJxCWN7EFNKGJrgRkzH8Xu0DZrKReX+mFVmgAYL2oxTr5LMu hgNU8npdKCZR2YAm3DXugxW0dD034hNrgzxyXI+ohzAUDyQquBtEfYJWQOiIKx5Y wVwHeE1ZYdJWsRiwZkp+oYfHebCIdMjewAACUEildizS0Ha5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQFgNcZ58pI4WF+DVkT8KZ9WGzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjUyNmFlNWUtYmZkNy0z OGY3LTliMDUtYWRmNTI3OWE3NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUflRFybxlXMKFcKyZIaN5DBf+gEGjUa+lZ+W+CIlUP05AZyF7SNR6T Vl4AKPOACuyRCJxoile8tp/mnLbOxf5lNy8zNWLLtRxOTk9EV8nXybQnMymv1oFE 3LasijHqHNC8O/yl/HkjmCNK3fKh1DU6NLUSlET/ygCVk/nIowhGfKjBVQlGHJIO 1h8RygPLwqaljOnPdiYQ0WZKaZegzEUgFplT2LH2K4GvWVP1DOzRCCT87Z1q0i+z +8SOtrBlUg9lzae3oScvcM2+80+P6izR/b/XdTt5kVw4ZfjIpl6qZ6vf9FbMJSGz C+dANMhfo+wityuYXuNUkMvkNNYZuOU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:36 2025 by rpki-client