$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa File: 5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa (raw, json) Hash identifier: //HwDrbY1ueSjpTmtXTjEQwjoDYsWNQjFribo0XyE0U= Subject key identifier: 83:B6:13:57:2F:3F:BA:12:5C:B7:92:76:D3:18:09:91:30:64:D0:BA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB64E8B9F3DF6EC1EEE62C60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa Signing time: Wed 20 Aug 2025 13:19:03 +0000 ROA not before: Wed 20 Aug 2025 13:19:03 +0000 ROA not after: Tue 18 Nov 2025 14:19:03 +0000 asID: 31898 IP address blocks: 140.204.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:64:e8:b9:f3:df:6e:c1:ee:e6:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:03 2025 GMT Not After : Nov 18 14:19:03 2025 GMT Subject: CN=ebdf3911-f87b-4fed-97a7-a94f7aab1582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:54:62:b0:ec:45:12:af:ac:91:09:38:51: 30:59:5c:bc:39:37:84:d0:2d:d2:34:52:96:21:0c: d6:a3:20:8c:cc:32:ef:3d:c4:5a:ee:87:0b:6e:77: 3a:10:77:e9:af:25:1c:fe:07:e9:42:a3:09:48:be: a8:17:4b:eb:e0:9d:76:ef:a6:19:93:80:45:8f:49: 73:f4:eb:44:80:01:0c:08:6d:a1:cf:fc:b7:bb:bb: 38:8a:c6:7c:e6:ab:1f:68:56:4d:71:f7:6e:55:c6: e2:9f:13:02:93:ba:c4:3a:08:df:d0:4b:d7:27:6e: d2:ed:3a:18:0b:78:2f:c8:a9:12:b8:e7:e3:a1:ea: 3c:1c:ff:62:d9:58:1a:51:ea:24:95:db:29:3f:90: 7d:2d:3e:8b:e5:e3:71:6a:c3:82:55:7d:1b:db:5b: 9a:cd:96:42:91:aa:9c:75:8f:44:36:81:96:0d:11: 7b:b9:9c:d4:61:86:be:b2:1a:d4:80:81:36:3f:56: f6:68:89:d0:07:87:cb:59:7b:61:44:43:76:6c:cc: 1e:23:30:7b:ad:f3:c7:4f:b8:4b:a7:c5:a3:bb:5f: f3:22:01:ba:07:83:f0:0f:63:9c:30:23:47:2b:06: 03:9b:3b:b9:4b:df:8e:88:b3:0c:5b:06:5d:44:e6: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:13:57:2F:3F:BA:12:5C:B7:92:76:D3:18:09:91:30:64:D0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5cb6ba75-d7dc-3d8c-be07-c0c84a4336fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:77:24:51:ca:65:97:2c:db:fa:d4:78:62:e7:67:e5:12:bd: 4d:36:14:40:6e:88:7c:56:f0:18:c7:36:34:54:37:69:f4:b1: ea:ae:63:b1:ca:bd:db:0c:06:be:e5:4d:16:c0:97:ba:e6:61: c2:32:f5:2c:19:3e:dc:17:68:8a:23:01:86:2a:ee:b6:6a:17: 58:09:ca:27:a6:01:b1:77:56:b1:2a:a9:75:b9:15:ef:c2:8e: bd:fc:49:94:3c:cc:e3:50:61:68:ea:12:55:7b:ab:a8:8f:2c: 0e:ee:8f:81:00:81:cb:86:67:68:c2:11:39:b6:be:eb:80:e4: a9:d9:cb:15:7c:9c:bc:c0:64:fa:9f:66:ff:0b:66:41:2d:93: 9e:c7:5e:60:60:ab:be:aa:e5:f1:c1:53:75:f8:95:b9:82:8b: 18:c9:e0:e8:46:40:3b:28:75:f3:6d:12:65:33:9f:06:74:b1: c0:c7:8c:e7:d6:e1:51:08:ec:e0:e6:82:25:0d:50:58:ad:89: e8:3c:f3:b4:45:89:4d:4c:a1:ab:fb:a0:da:35:69:de:94:b1: b6:98:cd:97:f7:b5:73:9f:93:59:1f:cb:6e:c9:b6:aa:5c:2b: b3:41:39:4d:62:f1:78:47:c0:2f:6b:4a:2b:86:03:53:3b:3e: 6b:88:c6:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZOi5899uwe7mLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTkwM1oXDTI1MTExODE0MTkwM1owLzEtMCsGA1UEAxMk ZWJkZjM5MTEtZjg3Yi00ZmVkLTk3YTctYTk0ZjdhYWIxNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtVUYrDsRRKvrJEJOFEwWVy8OTeE0C3SNFKW IQzWoyCMzDLvPcRa7ocLbnc6EHfpryUc/gfpQqMJSL6oF0vr4J1276YZk4BFj0lz 9OtEgAEMCG2hz/y3u7s4isZ85qsfaFZNcfduVcbinxMCk7rEOgjf0EvXJ27S7ToY C3gvyKkSuOfjoeo8HP9i2VgaUeokldspP5B9LT6L5eNxasOCVX0b21uazZZCkaqc dY9ENoGWDRF7uZzUYYa+shrUgIE2P1b2aInQB4fLWXthREN2bMweIzB7rfPHT7hL p8Wju1/zIgG6B4PwD2OcMCNHKwYDmzu5S9+OiLMMWwZdRObjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO2E1cvP7oSXLeSdtMYCZEwZNC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWNiNmJhNzUtZDdkYy0z ZDhjLWJlMDctYzBjODRhNDMzNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt3JFHKZZcs2/rUeGLnZ+USvU02FEBuiHxW8BjHNjRUN2n0sequY7HK vdsMBr7lTRbAl7rmYcIy9SwZPtwXaIojAYYq7rZqF1gJyiemAbF3VrEqqXW5Fe/C jr38SZQ8zONQYWjqElV7q6iPLA7uj4EAgcuGZ2jCETm2vuuA5KnZyxV8nLzAZPqf Zv8LZkEtk57HXmBgq76q5fHBU3X4lbmCixjJ4OhGQDsodfNtEmUznwZ0scDHjOfW 4VEI7ODmgiUNUFitieg887RFiU1Moav7oNo1ad6UsbaYzZf3tXOfk1kfy27Jtqpc K7NBOU1i8XhHwC9rSiuGA1M7PmuIxpU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:17 2025 by rpki-client