$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd14dda9-e5a2-352a-afba-3c686a6df6ec.roa File: bd14dda9-e5a2-352a-afba-3c686a6df6ec.roa (raw, json) Hash identifier: yYSS6ohSQLFyF4XN4RQ3nMms2wD4c4wTRy6RP5bIJ3Q= Subject key identifier: 9A:B7:7F:01:02:88:37:A9:38:13:45:2D:0D:F9:E5:E6:17:2C:55:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA6D1C805AA5F4C5294580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd14dda9-e5a2-352a-afba-3c686a6df6ec.roa Signing time: Thu 21 Aug 2025 10:27:27 +0000 ROA not before: Thu 21 Aug 2025 10:27:27 +0000 ROA not after: Wed 19 Nov 2025 11:27:27 +0000 asID: 31898 IP address blocks: 140.238.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:6d:1c:80:5a:a5:f4:c5:29:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:27 2025 GMT Not After : Nov 19 11:27:27 2025 GMT Subject: CN=1705c48e-c05b-498e-b746-f823e61a1027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:cf:45:8a:cf:40:70:0c:2b:f2:68:38:3c: 78:00:77:f7:94:0a:7b:43:e8:e3:98:ad:51:ac:bc: c3:3d:d6:67:2f:cc:67:40:cf:32:dd:5e:d8:ef:f4: db:77:66:e4:bc:86:20:b6:53:76:dd:23:b9:86:76: b5:19:85:4b:f7:27:92:62:4e:3c:8e:56:c2:ae:d5: f7:dd:cc:20:fe:e2:7b:fd:52:35:ce:3e:a1:b1:ee: 5b:d9:e1:da:c2:6c:de:ad:ba:5c:af:ec:a3:06:f8: 66:36:3f:23:20:46:e8:cb:af:0a:ba:58:3f:dc:81: c1:24:f7:f9:2d:69:65:12:ca:e9:11:da:3f:99:e7: 4b:b2:a8:04:16:08:88:f2:a0:47:17:f4:fe:52:8e: 0f:ba:0b:ea:8c:ae:98:df:b0:1c:5a:05:fe:69:1a: ca:5c:db:4b:30:5a:5c:5f:36:59:5d:91:3d:35:aa: 39:5c:e6:f7:a3:2f:36:25:da:f7:d5:71:55:1c:7b: c4:88:5a:d3:20:24:7d:e9:a4:d7:0f:2c:2a:5c:08: 27:ad:37:0e:96:ed:98:76:15:1a:15:e5:e6:90:cc: 44:c9:7a:18:09:0d:a3:67:b4:3e:13:cd:0e:49:07: 3b:eb:ec:4d:d6:af:98:16:ee:03:18:04:35:53:1a: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:7F:01:02:88:37:A9:38:13:45:2D:0D:F9:E5:E6:17:2C:55:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd14dda9-e5a2-352a-afba-3c686a6df6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4d:ff:59:82:d5:a2:fb:8b:29:a4:d8:47:89:d7:2e:db:31: 21:8a:d2:59:b8:7c:c6:fd:cd:17:8c:43:a5:38:57:86:cb:4a: 37:71:8e:b4:47:48:88:f4:20:1c:af:e1:02:8a:a4:a2:47:7c: dc:52:d8:2d:72:b3:d8:24:ba:34:d8:25:7e:94:cb:1f:64:e5: 6e:04:19:7b:5e:a4:b5:09:47:a6:9e:fa:89:14:63:ab:a7:b6: 3c:03:7c:37:14:5a:ba:50:a3:c5:54:8a:1f:2e:0b:8c:fd:d9: 35:90:75:f9:19:be:f6:a7:5c:66:22:2d:65:23:47:db:dd:58: 2f:32:88:bf:18:32:8a:0b:c2:3e:42:34:ae:25:6f:1e:7f:de: 88:30:cf:82:04:c1:e8:ab:a8:df:a2:e4:27:e9:2a:20:9f:c9: 9f:eb:1c:80:57:e6:1c:75:3f:0e:e4:2b:bb:7b:1b:59:e3:15: 60:59:d1:77:39:de:01:7a:a5:9c:02:a8:f9:d3:2f:1f:55:e0: a4:4e:7c:1e:a9:0a:64:a7:1d:64:01:68:a6:bb:dd:21:06:a6: 8e:6c:ab:a5:b1:c3:a4:ea:92:24:3b:59:bb:1f:98:f2:f9:c7: 75:0a:3e:14:4d:bd:fd:e0:33:d5:10:e6:4f:c8:44:d8:3b:a4: 47:9f:f1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2m0cgFql9MUpRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjcyN1oXDTI1MTExOTExMjcyN1owLzEtMCsGA1UEAxMk MTcwNWM0OGUtYzA1Yi00OThlLWI3NDYtZjgyM2U2MWExMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYzPRYrPQHAMK/JoODx4AHf3lAp7Q+jjmK1R rLzDPdZnL8xnQM8y3V7Y7/Tbd2bkvIYgtlN23SO5hna1GYVL9yeSYk48jlbCrtX3 3cwg/uJ7/VI1zj6hse5b2eHawmzerbpcr+yjBvhmNj8jIEboy68Kulg/3IHBJPf5 LWllEsrpEdo/medLsqgEFgiI8qBHF/T+Uo4PugvqjK6Y37AcWgX+aRrKXNtLMFpc XzZZXZE9Nao5XOb3oy82Jdr31XFVHHvEiFrTICR96aTXDywqXAgnrTcOlu2YdhUa FeXmkMxEyXoYCQ2jZ7Q+E80OSQc76+xN1q+YFu4DGAQ1UxoNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq3fwECiDepOBNFLQ355eYXLFWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmQxNGRkYTktZTVhMi0z NTJhLWFmYmEtM2M2ODZhNmRmNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFN/1mC1aL7iymk2EeJ1y7bMSGK0lm4fMb9zReMQ6U4V4bLSjdxjrRH SIj0IByv4QKKpKJHfNxS2C1ys9gkujTYJX6Uyx9k5W4EGXtepLUJR6ae+okUY6un tjwDfDcUWrpQo8VUih8uC4z92TWQdfkZvvanXGYiLWUjR9vdWC8yiL8YMooLwj5C NK4lbx5/3ogwz4IEweirqN+i5CfpKiCfyZ/rHIBX5hx1Pw7kK7t7G1njFWBZ0Xc5 3gF6pZwCqPnTLx9V4KROfB6pCmSnHWQBaKa73SEGpo5sq6Wxw6TqkiQ7WbsfmPL5 x3UKPhRNvf3gM9UQ5k/IRNg7pEef8SE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:26 2025 by rpki-client