$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ff6c23f-c61e-37dd-b073-d7681300f422.roa File: 4ff6c23f-c61e-37dd-b073-d7681300f422.roa (raw, json) Hash identifier: f2FBRUsL6s+HGgGevMJLb/j7gisoTLn65p/y3E9w5+I= Subject key identifier: 36:74:5C:50:F3:8E:BF:9D:85:DC:7F:09:58:F9:D6:A2:4F:7B:59:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEA03A99126E0F6BCA8B4400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ff6c23f-c61e-37dd-b073-d7681300f422.roa Signing time: Thu 21 Aug 2025 17:05:59 +0000 ROA not before: Thu 21 Aug 2025 17:05:59 +0000 ROA not after: Wed 19 Nov 2025 18:05:59 +0000 asID: 31898 IP address blocks: 140.204.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a0:3a:99:12:6e:0f:6b:ca:8b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:05:59 2025 GMT Not After : Nov 19 18:05:59 2025 GMT Subject: CN=47caa677-ebbe-4d8a-8185-991ad7ac527e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:e4:49:02:04:ee:6e:c5:3b:6c:70:34:8c: 64:06:6b:3f:54:8b:18:22:c9:09:0b:e7:c9:1a:02: c9:69:65:5c:c9:08:57:ae:77:fa:5f:73:4e:da:12: bd:bd:80:10:3b:20:d8:3f:f0:77:7c:7e:dc:a6:12: 62:8c:bf:db:0c:92:71:63:b9:ba:dc:3b:65:73:c5: 4a:91:b7:b0:6c:3a:01:0d:00:f8:e7:ae:12:09:3e: 23:f5:cc:68:54:a5:d0:b4:57:97:53:85:bc:04:a9: 47:81:22:e7:a6:f8:aa:3f:51:4d:94:6f:14:0a:95: 75:17:51:9d:66:d0:04:bd:68:46:90:4f:88:a3:fe: d1:14:a9:14:76:b3:28:3a:0d:cc:a2:06:0b:d3:e4: 13:1f:16:74:45:ee:61:91:61:12:1f:e2:4f:5b:11: fe:1a:61:af:41:8f:e6:15:08:46:ff:70:08:ea:3d: 9e:f6:6a:71:30:c3:a1:ab:88:54:7c:33:8e:70:7c: 81:05:73:61:1a:22:96:5f:75:ba:5a:5b:0f:5e:a4: 3f:d5:84:0b:55:0e:c9:3f:bb:ec:d4:4d:7e:dc:90: 01:c6:39:ba:f9:20:95:34:f3:8b:b2:e7:a3:46:2f: b5:5a:ac:53:5a:be:77:3b:5c:37:fa:4e:9b:2c:47: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:5C:50:F3:8E:BF:9D:85:DC:7F:09:58:F9:D6:A2:4F:7B:59:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ff6c23f-c61e-37dd-b073-d7681300f422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cc:4d:46:fd:a7:83:37:17:30:b3:1e:be:da:5a:24:20:84: 9f:d6:a0:b0:f1:0f:58:e6:94:e4:5e:7e:14:dd:e5:ec:22:59: 4d:07:79:4e:61:e2:18:76:1f:e4:35:76:65:2b:03:db:67:23: 42:3b:df:5b:0e:a8:8b:db:54:44:14:e8:b8:b3:f8:99:74:1a: 6a:58:52:fc:2b:3f:79:d4:65:33:1c:af:39:bf:df:3a:4a:a1: 08:18:4e:f7:1e:cd:ed:49:70:8e:40:cf:0d:6d:fa:a2:63:32: 91:3d:cc:bb:df:00:89:3c:55:3d:e6:f4:e9:8e:e9:11:c1:5c: 0c:0c:4c:80:69:cd:f1:46:f1:ae:cf:cd:17:bf:ee:ba:7e:29: d6:32:b5:72:46:b4:99:23:e7:8d:1f:41:9b:fd:a5:c0:6e:19: b0:77:2b:ed:f1:0c:1c:f4:3e:f6:0a:30:04:26:c3:cc:3e:df: b3:84:ba:6d:49:3e:2b:64:2b:6c:d3:68:35:04:67:59:79:42: 21:ff:70:6b:31:6c:10:4c:82:a7:d9:89:7d:ac:ae:8e:bc:55: 0e:10:87:06:3c:4b:06:30:5e:f1:04:5d:22:d2:f6:4f:10:d4: 7c:a6:66:f9:6d:02:ff:21:d5:16:d4:44:43:36:bc:d8:20:9e: ed:63:0c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoDqZEm4Pa8qLRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MDU1OVoXDTI1MTExOTE4MDU1OVowLzEtMCsGA1UEAxMk NDdjYWE2NzctZWJiZS00ZDhhLTgxODUtOTkxYWQ3YWM1MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0/kSQIE7m7FO2xwNIxkBms/VIsYIskJC+fJ GgLJaWVcyQhXrnf6X3NO2hK9vYAQOyDYP/B3fH7cphJijL/bDJJxY7m63Dtlc8VK kbewbDoBDQD4564SCT4j9cxoVKXQtFeXU4W8BKlHgSLnpviqP1FNlG8UCpV1F1Gd ZtAEvWhGkE+Io/7RFKkUdrMoOg3MogYL0+QTHxZ0Re5hkWESH+JPWxH+GmGvQY/m FQhG/3AI6j2e9mpxMMOhq4hUfDOOcHyBBXNhGiKWX3W6WlsPXqQ/1YQLVQ7JP7vs 1E1+3JABxjm6+SCVNPOLsuejRi+1WqxTWr53O1w3+k6bLEdzAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ0XFDzjr+dhdx/CVj51qJPe1kAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZmNmMyM2YtYzYxZS0z N2RkLWIwNzMtZDc2ODEzMDBmNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHMTUb9p4M3FzCzHr7aWiQghJ/WoLDxD1jmlORefhTd5ewiWU0HeU5h 4hh2H+Q1dmUrA9tnI0I731sOqIvbVEQU6Liz+Jl0GmpYUvwrP3nUZTMcrzm/3zpK oQgYTvceze1JcI5Azw1t+qJjMpE9zLvfAIk8VT3m9OmO6RHBXAwMTIBpzfFG8a7P zRe/7rp+KdYytXJGtJkj540fQZv9pcBuGbB3K+3xDBz0PvYKMAQmw8w+37OEum1J PitkK2zTaDUEZ1l5QiH/cGsxbBBMgqfZiX2sro68VQ4QhwY8SwYwXvEEXSLS9k8Q 1HymZvltAv8h1RbUREM2vNggnu1jDIk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:16 2025 by rpki-client