$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa File: 9754b91e-3caf-3d36-844f-8030bbbd445b.roa (raw, json) Hash identifier: pkKmvxAP9t1g+8CWq81LqTAAP9GGE5uBzIRJdvDiUAc= Subject key identifier: 9B:05:7D:50:C7:78:61:F8:1E:7D:5E:B5:A6:A5:87:05:7C:DF:8B:59 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C84B68660642B37F5AD80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa Signing time: Wed 20 Aug 2025 21:05:42 +0000 ROA not before: Wed 20 Aug 2025 21:05:42 +0000 ROA not after: Tue 18 Nov 2025 22:05:42 +0000 asID: 31898 IP address blocks: 140.204.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:84:b6:86:60:64:2b:37:f5:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:42 2025 GMT Not After : Nov 18 22:05:42 2025 GMT Subject: CN=e430eeb0-ab4f-4210-8edb-e1768c2c59d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:e0:48:9b:86:7f:48:63:cf:da:05:bb:e2: fc:a0:0c:c1:6a:ae:1d:7a:d4:05:a5:44:3b:48:14: 30:de:d3:1f:7f:e7:84:3e:2f:21:7d:e9:c3:51:a7: 24:30:35:8a:ce:47:74:32:31:e2:dd:28:95:11:28: 26:0c:55:cf:7e:c1:e2:9a:b3:dc:60:ad:24:e9:f2: 3c:2b:6b:9d:11:2b:4f:f2:0c:60:ad:a1:fe:f6:87: 9b:3c:82:13:0f:91:4c:53:75:08:dd:8e:6d:bc:ad: b4:17:4b:d0:54:e8:88:39:1e:0e:42:6d:55:8c:25: 97:5c:d8:98:b3:4e:57:61:60:11:26:14:91:83:61: 67:a9:8a:54:24:ee:1d:47:8e:29:86:64:88:63:8a: 91:7d:a2:1e:ec:2c:35:f4:fa:7b:70:6b:be:a6:fd: ff:98:fb:f4:20:3b:57:5a:0a:0b:ba:1b:13:5d:01: 21:cc:eb:b8:09:01:9e:4e:00:8f:bd:09:e1:df:ab: 64:fb:d9:ac:a3:bb:fb:72:84:da:9e:eb:ec:a6:0d: c0:c5:c6:18:c1:6b:13:e0:38:03:cc:6e:2f:8c:bd: 33:0e:83:40:11:c5:da:12:26:b9:e6:c9:db:d9:8a: 92:63:e6:dc:12:14:0f:1c:f0:3c:49:98:51:01:d0: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:7D:50:C7:78:61:F8:1E:7D:5E:B5:A6:A5:87:05:7C:DF:8B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:04:02:42:3b:05:2b:4e:68:db:3e:a5:3e:b2:f2:1f:3e:bb: 15:b0:ec:4d:1a:eb:6d:73:ab:da:01:6d:3b:b7:35:09:00:ef: eb:71:35:07:5f:e0:2a:da:43:12:df:2f:01:a2:51:af:b2:20: bc:89:b7:89:8c:67:b8:41:f3:60:44:8b:21:7c:22:72:84:b7: c3:85:11:9a:cf:6d:a2:72:dd:5a:50:90:a8:cb:e2:fd:91:b4: c5:38:b3:2a:ab:f4:02:d3:bb:42:c5:80:58:fa:e9:e3:bd:93: 68:5a:2e:04:72:b4:79:ef:66:75:cc:d4:07:96:90:4f:d0:d7: 03:64:5b:d5:45:73:23:69:08:46:3c:6f:46:61:a7:30:59:a3: b0:a0:f0:9a:9d:c5:f8:c1:45:e4:9c:c9:b6:2a:44:14:32:66: c8:2c:d4:b5:db:38:0b:c8:66:04:d6:ce:46:9a:1d:a6:9a:a1: 93:7d:e0:7d:4e:42:2a:5e:23:9e:7b:2c:48:f8:30:fe:29:97: e9:ff:3b:9e:cb:34:d5:2e:1d:c9:3d:54:eb:1b:91:b3:27:30: e9:ec:9f:97:2a:06:4f:56:59:71:75:12:a5:02:1b:69:03:f4: dc:12:f0:2e:93:ff:bf:a1:c0:e5:71:d9:59:86:ac:82:60:a8: b8:a7:75:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTIS2hmBkKzf1rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU0MloXDTI1MTExODIyMDU0MlowLzEtMCsGA1UEAxMk ZTQzMGVlYjAtYWI0Zi00MjEwLThlZGItZTE3NjhjMmM1OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3gSJuGf0hjz9oFu+L8oAzBaq4detQFpUQ7 SBQw3tMff+eEPi8hfenDUackMDWKzkd0MjHi3SiVESgmDFXPfsHimrPcYK0k6fI8 K2udEStP8gxgraH+9oebPIITD5FMU3UI3Y5tvK20F0vQVOiIOR4OQm1VjCWXXNiY s05XYWARJhSRg2FnqYpUJO4dR44phmSIY4qRfaIe7Cw19Pp7cGu+pv3/mPv0IDtX WgoLuhsTXQEhzOu4CQGeTgCPvQnh36tk+9mso7v7coTanuvspg3AxcYYwWsT4DgD zG4vjL0zDoNAEcXaEia55snb2YqSY+bcEhQPHPA8SZhRAdBM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsFfVDHeGH4Hn1etaalhwV834tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc1NGI5MWUtM2NhZi0z ZDM2LTg0NGYtODAzMGJiYmQ0NDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkEAkI7BStOaNs+pT6y8h8+uxWw7E0a621zq9oBbTu3NQkA7+txNQdf 4CraQxLfLwGiUa+yILyJt4mMZ7hB82BEiyF8InKEt8OFEZrPbaJy3VpQkKjL4v2R tMU4syqr9ALTu0LFgFj66eO9k2haLgRytHnvZnXM1AeWkE/Q1wNkW9VFcyNpCEY8 b0ZhpzBZo7Cg8JqdxfjBReScybYqRBQyZsgs1LXbOAvIZgTWzkaaHaaaoZN94H1O QipeI557LEj4MP4pl+n/O57LNNUuHck9VOsbkbMnMOnsn5cqBk9WWXF1EqUCG2kD 9NwS8C6T/7+hwOVx2VmGrIJgqLindbE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:45 2025 by rpki-client