$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa File: 2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa (raw, json) Hash identifier: mS/lovHWv8fshorKSvStSBVblRJaOSRhwMtqH+hzceM= Subject key identifier: D8:54:5F:E9:A5:2C:76:94:9D:C8:B3:1B:6D:34:E0:80:06:C1:57:AD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A693FF29D4B588F54D280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa Signing time: Thu 21 Aug 2025 13:08:36 +0000 ROA not before: Thu 21 Aug 2025 13:08:36 +0000 ROA not after: Wed 19 Nov 2025 14:08:36 +0000 asID: 31898 IP address blocks: 140.204.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:69:3f:f2:9d:4b:58:8f:54:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:36 2025 GMT Not After : Nov 19 14:08:36 2025 GMT Subject: CN=992680b9-bc2b-4338-9043-cd3abe7ddf5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:4a:5b:2a:8d:c8:6a:2f:32:fa:fa:b7:54: e2:9a:d1:9e:37:69:77:49:2a:4e:5e:ab:57:a2:18: 0d:58:d5:54:38:45:97:4a:16:16:35:13:36:07:c8: c3:da:23:33:2f:f9:95:bd:33:9c:1c:fe:43:31:64: 2d:9c:0f:67:f6:3e:5d:0f:ee:18:77:66:28:50:cc: 8c:69:94:28:e0:04:b8:58:40:ec:22:0c:cf:c6:56: a4:c3:ad:d4:ad:63:f8:d5:88:d8:30:49:b1:b7:86: 59:e4:38:2e:ed:31:61:5d:6e:fd:06:db:87:79:81: 07:8a:23:55:d5:f6:28:c3:44:6b:4d:60:0f:66:2e: a7:8c:e4:61:9f:bd:70:9b:9d:ad:e1:06:1a:7f:47: dc:d1:46:d4:cb:9c:9e:d0:95:c0:4f:0f:6e:af:f3: 44:8f:64:61:62:b7:0e:79:00:4c:19:f5:ec:68:38: 10:11:df:99:f9:8c:b3:14:17:e8:76:9c:4b:59:ab: ca:ba:dc:01:65:b8:f4:1d:d0:de:ae:3b:0a:9f:8f: eb:3b:1a:dd:84:72:a8:da:80:c4:ea:32:74:34:3c: af:7a:c2:8e:92:2d:20:6b:70:33:e2:26:4f:3a:42: 13:b9:eb:3b:0c:6d:74:23:c7:70:99:d8:91:49:5a: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:54:5F:E9:A5:2C:76:94:9D:C8:B3:1B:6D:34:E0:80:06:C1:57:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:cb:a5:2e:57:2c:50:11:1c:ab:22:28:78:2d:ff:de:6e:bf: 64:27:cc:67:fb:cc:3a:ad:bb:53:bd:dc:72:60:f2:69:2c:b0: 53:51:f6:ce:51:bc:56:a6:d9:15:c7:b2:8c:4a:8a:05:18:61: 9a:a1:4f:26:e2:17:58:95:b5:be:6e:5e:dd:d0:6c:fe:49:45: 30:bb:fe:a8:69:3f:94:21:e6:bb:02:d1:c7:ea:a1:5c:fd:e9: a6:5c:f1:40:f1:9f:d7:e6:b7:44:10:c2:d9:26:59:cd:18:4d: 33:22:b6:fd:dd:fd:6a:6c:96:25:44:da:42:1c:f1:08:e6:42: d3:7e:89:11:06:02:dc:85:6e:5c:1c:8f:91:9f:56:7d:f5:da: 2f:70:33:1e:f8:ef:07:23:c4:e0:af:4f:93:b1:c2:5e:11:cf: e8:58:92:f2:67:15:e9:ac:55:a6:09:a8:d9:0a:68:a1:98:d0: c9:ea:1e:e2:07:2b:ab:fc:00:38:dd:6d:ea:13:db:1a:19:d7: c1:6c:e3:fe:53:02:d8:81:e8:a5:e4:3f:12:65:83:0b:db:ef: 39:d3:d2:4b:8a:4f:28:98:79:97:5d:75:85:e1:7c:1a:2c:8f: 6f:df:ac:fb:35:f9:dd:40:22:e1:57:ba:e8:e9:66:a7:d7:ef: 92:eb:4d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmk/8p1LWI9U0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzNloXDTI1MTExOTE0MDgzNlowLzEtMCsGA1UEAxMk OTkyNjgwYjktYmMyYi00MzM4LTkwNDMtY2QzYWJlN2RkZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZKWyqNyGovMvr6t1TimtGeN2l3SSpOXqtX ohgNWNVUOEWXShYWNRM2B8jD2iMzL/mVvTOcHP5DMWQtnA9n9j5dD+4Yd2YoUMyM aZQo4AS4WEDsIgzPxlakw63UrWP41YjYMEmxt4ZZ5Dgu7TFhXW79BtuHeYEHiiNV 1fYow0RrTWAPZi6njORhn71wm52t4QYaf0fc0UbUy5ye0JXATw9ur/NEj2RhYrcO eQBMGfXsaDgQEd+Z+YyzFBfodpxLWavKutwBZbj0HdDerjsKn4/rOxrdhHKo2oDE 6jJ0NDyvesKOki0ga3Az4iZPOkITues7DG10I8dwmdiRSVpnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhUX+mlLHaUncizG2004IAGwVetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM5NGY5NjItN2E3Yi0z YWRhLWE4ZjUtODJiNGY4OTBiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbLpS5XLFARHKsiKHgt/95uv2QnzGf7zDqtu1O93HJg8mkssFNR9s5R vFam2RXHsoxKigUYYZqhTybiF1iVtb5uXt3QbP5JRTC7/qhpP5Qh5rsC0cfqoVz9 6aZc8UDxn9fmt0QQwtkmWc0YTTMitv3d/WpsliVE2kIc8QjmQtN+iREGAtyFblwc j5GfVn312i9wMx747wcjxOCvT5Oxwl4Rz+hYkvJnFemsVaYJqNkKaKGY0MnqHuIH K6v8ADjdbeoT2xoZ18Fs4/5TAtiB6KXkPxJlgwvb7znT0kuKTyiYeZdddYXhfBos j2/frPs1+d1AIuFXuujpZqfX75LrTeg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:43:51 2025 by rpki-client