$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa File: 3bbc33c2-e895-32ec-b620-bb7a98103477.roa (raw, json) Hash identifier: CTVMz4h/KdVcwLr4dSpgo/9sTTowLPZ8SsYPSKi+7QI= Subject key identifier: DF:DD:67:54:96:FE:80:8F:77:1F:72:0F:7D:5F:D7:F9:2E:1A:E4:BC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB440D4CAEE7BA6AFDE63170 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa Signing time: Wed 20 Aug 2025 12:12:50 +0000 ROA not before: Wed 20 Aug 2025 12:12:50 +0000 ROA not after: Tue 18 Nov 2025 13:12:50 +0000 asID: 31898 IP address blocks: 140.204.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:0d:4c:ae:e7:ba:6a:fd:e6:31:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:50 2025 GMT Not After : Nov 18 13:12:50 2025 GMT Subject: CN=5598e5b8-95ba-4f43-b1bf-a9fc8dcd4589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:b1:7a:27:fa:5d:18:b7:9d:a6:c7:ae:d6: 28:d1:25:9d:56:00:b3:ff:23:92:2c:05:52:a9:a1: 8e:01:11:56:86:d0:c4:de:89:66:57:99:fb:aa:de: bf:96:56:5d:e1:e1:1d:cc:9a:d2:0c:d6:90:16:e8: fb:43:bc:d6:f6:97:f1:74:ae:6c:e1:fb:3e:ac:98: 7e:70:f2:73:e6:7a:a3:06:ac:d8:78:f6:a0:45:05: 06:4a:db:c9:8d:1a:49:2b:19:94:5a:5e:2d:88:61: 54:6b:8c:56:cd:c0:8a:2c:43:ff:8a:24:13:18:f9: de:b4:2b:f3:b4:1b:02:4e:02:25:29:a5:17:98:71: 91:b9:78:86:54:83:0a:67:a0:87:bd:55:30:3d:28: aa:9d:a9:11:d3:39:74:7a:b4:25:ca:eb:29:e3:16: f5:0f:b7:b4:40:3d:6c:e6:25:e9:ab:c4:69:96:4d: e2:61:89:a5:8f:e8:c7:05:3d:b0:05:04:a3:30:69: d3:e8:7c:30:a0:ab:c5:4a:e8:e8:43:7d:6b:7f:01: 02:08:00:c9:d4:aa:b4:f1:ff:49:f7:fd:b8:99:67: a6:fc:22:de:33:c8:fa:87:83:b6:54:f7:94:b0:5c: fc:b0:16:0c:d3:b2:67:27:57:16:e1:f3:5e:11:09: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:67:54:96:FE:80:8F:77:1F:72:0F:7D:5F:D7:F9:2E:1A:E4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c2:de:14:5c:19:c2:32:a3:e7:9f:18:6f:8c:a7:36:ec:e4: 67:89:82:38:c7:4f:10:9f:ec:4d:8f:db:d9:e7:0e:5a:1d:ef: e8:21:5f:8e:aa:5c:05:33:c0:b3:c4:6b:79:94:bc:a7:c2:63: 04:4c:32:49:8c:0c:6d:c0:38:bf:2e:f3:68:93:99:70:0b:7e: 6d:40:19:3e:0a:28:e7:c5:50:87:3e:dc:4d:97:00:b4:93:fa: 6b:6c:f1:93:dc:12:ab:c1:b1:18:44:f4:68:b8:a9:af:e3:59: c3:3e:ec:6d:cc:8f:f8:6a:77:f4:d7:e5:bb:76:4a:62:44:38: 35:84:15:4b:6e:ad:86:fe:03:cc:34:9c:1f:49:fc:ab:1a:2b: 27:3d:97:28:c5:f2:6e:9c:f5:61:5c:15:c9:14:c9:eb:4e:9c: ea:56:00:70:ec:1a:c9:6b:eb:09:48:97:79:a1:55:a1:a6:8a: a8:7a:2b:83:84:66:7a:92:0d:0e:ce:68:32:13:a3:0d:8b:fb: 9f:38:e9:0f:60:f2:7e:42:13:cd:aa:fb:1d:ef:4c:52:9c:88: b9:fe:d1:fa:72:7d:6d:fc:fb:7d:60:fb:7d:27:f7:97:09:5d: bf:d5:c6:38:91:27:0c:f7:f8:00:7f:0a:87:de:a2:23:7f:ea: 10:90:af:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRA1Mrue6av3mMXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1MFoXDTI1MTExODEzMTI1MFowLzEtMCsGA1UEAxMk NTU5OGU1YjgtOTViYS00ZjQzLWIxYmYtYTlmYzhkY2Q0NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT6xeif6XRi3nabHrtYo0SWdVgCz/yOSLAVS qaGOARFWhtDE3olmV5n7qt6/llZd4eEdzJrSDNaQFuj7Q7zW9pfxdK5s4fs+rJh+ cPJz5nqjBqzYePagRQUGStvJjRpJKxmUWl4tiGFUa4xWzcCKLEP/iiQTGPnetCvz tBsCTgIlKaUXmHGRuXiGVIMKZ6CHvVUwPSiqnakR0zl0erQlyusp4xb1D7e0QD1s 5iXpq8Rplk3iYYmlj+jHBT2wBQSjMGnT6HwwoKvFSujoQ31rfwECCADJ1Kq08f9J 9/24mWem/CLeM8j6h4O2VPeUsFz8sBYM07JnJ1cW4fNeEQlPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/dZ1SW/oCPdx9yD31f1/kuGuS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JiYzMzYzItZTg5NS0z MmVjLWI2MjAtYmI3YTk4MTAzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrC3hRcGcIyo+efGG+Mpzbs5GeJgjjHTxCf7E2P29nnDlod7+ghX46q XAUzwLPEa3mUvKfCYwRMMkmMDG3AOL8u82iTmXALfm1AGT4KKOfFUIc+3E2XALST +mts8ZPcEqvBsRhE9Gi4qa/jWcM+7G3Mj/hqd/TX5bt2SmJEODWEFUturYb+A8w0 nB9J/KsaKyc9lyjF8m6c9WFcFckUyetOnOpWAHDsGslr6wlIl3mhVaGmiqh6K4OE ZnqSDQ7OaDITow2L+5846Q9g8n5CE82q+x3vTFKciLn+0fpyfW38+31g+30n95cJ Xb/VxjiRJwz3+AB/CofeoiN/6hCQr9I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:37 2025 by rpki-client