$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c1c4200-70ad-3028-9cd5-d09bb6d328ec.roa File: 8c1c4200-70ad-3028-9cd5-d09bb6d328ec.roa (raw, json) Hash identifier: T9VfjFNPpqo1KJv6gwALq7+S6sLXoOcadND45Z+b14A= Subject key identifier: 41:2D:FA:DB:EE:8D:BB:EB:3F:88:85:75:19:78:3E:0B:73:89:FB:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFC9E98639060981EA48680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c1c4200-70ad-3028-9cd5-d09bb6d328ec.roa Signing time: Thu 21 Aug 2025 11:36:20 +0000 ROA not before: Thu 21 Aug 2025 11:36:20 +0000 ROA not after: Wed 19 Nov 2025 12:36:20 +0000 asID: 31898 IP address blocks: 140.204.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:9e:98:63:90:60:98:1e:a4:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:20 2025 GMT Not After : Nov 19 12:36:20 2025 GMT Subject: CN=63d5af6c-c3fd-4126-92f2-f6981fffcec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:7d:8b:69:87:63:be:29:f1:c6:82:eb:ec: 43:89:b5:2c:c8:b1:a6:f7:e7:2e:b8:e9:c3:6b:06: e7:61:fb:52:c0:88:62:b4:9a:06:09:4c:fb:ec:3b: fa:1a:55:0d:5d:a8:92:79:a5:35:e8:28:6f:29:b9: f9:b4:4d:5e:ee:70:72:ff:21:41:73:f7:39:08:f7: 19:68:aa:12:0a:c3:6d:a1:6e:18:45:e5:1b:cd:00: e9:c4:fa:05:ca:ee:7c:b1:b7:91:41:70:d5:55:af: f9:f6:82:db:d5:87:61:aa:45:97:5c:68:63:72:8b: ca:90:2f:01:02:22:b0:78:d7:c2:1f:c1:98:ea:98: da:88:2b:0a:33:cb:06:c5:7d:56:fa:fc:72:7c:46: 36:c8:50:67:20:69:3d:fd:2e:37:36:33:21:15:b2: 7b:96:71:be:45:7d:a2:cb:72:27:79:28:ed:42:b3: 59:d3:02:76:b2:82:40:0d:a5:ca:48:7d:ee:6f:de: c9:73:45:01:a7:ef:58:0f:e8:03:85:59:ae:12:ba: 7d:d2:4b:15:16:74:f2:bc:c7:18:01:e0:e5:d8:b0: 3d:89:e7:78:63:cb:e2:4b:1e:c8:2f:16:71:c6:d3: a0:3f:89:10:94:01:b9:ba:2a:34:e0:a4:bf:51:eb: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:FA:DB:EE:8D:BB:EB:3F:88:85:75:19:78:3E:0B:73:89:FB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c1c4200-70ad-3028-9cd5-d09bb6d328ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4c:af:e4:0a:f8:2c:67:b8:93:a3:34:ff:e6:17:ad:ed:85: 94:66:b6:9b:b4:9a:dc:3e:2a:1c:6a:fa:43:c1:e9:76:f5:3d: 45:ce:dc:f4:29:c0:0e:00:f1:8b:15:d7:54:4f:49:ed:b0:f0: 07:2a:f9:da:a7:c2:5c:41:2e:6e:2d:13:1d:d1:f1:a2:21:7c: 87:9a:f0:a8:c2:69:40:45:db:17:2e:af:6e:ec:77:04:af:3d: a9:ef:dd:5e:cf:de:01:be:3f:7d:99:a2:ef:75:08:a7:6f:c2: b2:18:2b:06:2f:1b:c4:97:c2:1d:5e:09:bb:3c:db:3f:df:72: 59:9a:50:3c:6d:f3:52:b0:7a:b1:17:bc:86:08:ab:6f:fc:9d: d1:cf:a3:34:ee:4f:ff:ba:eb:a3:6b:d4:ed:69:56:0a:f8:64: ef:83:1a:3d:37:67:33:69:4e:58:6d:ff:a2:21:c4:27:da:c1: c3:f7:f6:7b:b1:7b:31:9c:da:b7:11:3f:cd:5c:ba:42:05:4a: 0a:e8:22:ee:18:ef:41:0e:ba:9f:7b:bd:0b:e1:b7:e3:95:63: c3:38:a7:f0:c8:54:a2:12:c8:dc:b1:4d:7b:29:78:ae:8c:50: b9:23:3c:da:83:c7:b2:3a:db:b4:c2:84:a6:53:85:db:54:ad: 7b:ca:b4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt/J6YY5BgmB6khoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzYyMFoXDTI1MTExOTEyMzYyMFowLzEtMCsGA1UEAxMk NjNkNWFmNmMtYzNmZC00MTI2LTkyZjItZjY5ODFmZmZjZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAV9i2mHY74p8caC6+xDibUsyLGm9+cuuOnD awbnYftSwIhitJoGCUz77Dv6GlUNXaiSeaU16ChvKbn5tE1e7nBy/yFBc/c5CPcZ aKoSCsNtoW4YReUbzQDpxPoFyu58sbeRQXDVVa/59oLb1YdhqkWXXGhjcovKkC8B AiKweNfCH8GY6pjaiCsKM8sGxX1W+vxyfEY2yFBnIGk9/S43NjMhFbJ7lnG+RX2i y3IneSjtQrNZ0wJ2soJADaXKSH3ub97Jc0UBp+9YD+gDhVmuErp90ksVFnTyvMcY AeDl2LA9ied4Y8viSx7ILxZxxtOgP4kQlAG5uio04KS/UeuE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEt+tvujbvrP4iFdRl4PgtzifvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGMxYzQyMDAtNzBhZC0z MDI4LTljZDUtZDA5YmI2ZDMyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBMr+QK+CxnuJOjNP/mF63thZRmtpu0mtw+Khxq+kPB6Xb1PUXO3PQp wA4A8YsV11RPSe2w8Acq+dqnwlxBLm4tEx3R8aIhfIea8KjCaUBF2xcur27sdwSv Panv3V7P3gG+P32Zou91CKdvwrIYKwYvG8SXwh1eCbs82z/fclmaUDxt81KwerEX vIYIq2/8ndHPozTuT/+666Nr1O1pVgr4ZO+DGj03ZzNpTlht/6IhxCfawcP39nux ezGc2rcRP81cukIFSgroIu4Y70EOup97vQvht+OVY8M4p/DIVKISyNyxTXspeK6M ULkjPNqDx7I627TChKZThdtUrXvKtKU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:54 2025 by rpki-client