$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf5efca-ed41-32a3-9a6a-ee82a2190d93.roa File: dcf5efca-ed41-32a3-9a6a-ee82a2190d93.roa (raw, json) Hash identifier: IGfUGhPDAPgUCvJPBumdqmNQbMQlpdBgRKz+15HjM8o= Subject key identifier: F4:6B:E3:D9:B2:0C:EC:91:14:2F:42:1A:3E:5F:9F:69:D1:3B:C0:8A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC003996836E8506CC56E1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf5efca-ed41-32a3-9a6a-ee82a2190d93.roa Signing time: Wed 20 Aug 2025 18:31:59 +0000 ROA not before: Wed 20 Aug 2025 18:31:59 +0000 ROA not after: Tue 18 Nov 2025 19:31:59 +0000 asID: 31898 IP address blocks: 140.204.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:39:96:83:6e:85:06:cc:56:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:31:59 2025 GMT Not After : Nov 18 19:31:59 2025 GMT Subject: CN=91c37c27-4d35-44d1-ad86-eb248c21fed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:86:25:0a:fe:39:19:b9:a1:4c:4a:8f:a9: 44:a3:36:46:3d:be:0e:c5:03:54:0a:7c:86:ba:6b: 08:93:b7:6b:0d:e9:24:40:cc:b0:a9:11:7c:9b:19: c5:1e:df:53:2b:0b:07:d0:ea:ff:2c:3d:cf:3c:cf: 35:50:85:18:26:8f:f0:75:15:0c:6b:69:51:b9:2a: 3b:98:86:82:b4:d3:ec:2f:f7:8b:83:e0:25:0b:61: 96:09:e4:d9:85:f3:f1:95:7c:09:a7:21:d3:a1:7c: 0e:71:48:23:7a:e6:98:49:4d:a1:54:24:c2:a6:cf: 30:ad:db:6c:78:f4:8c:52:85:4c:f3:04:5d:db:ec: 40:46:41:96:b7:ef:b2:28:e9:6b:ad:cd:66:26:9f: 3d:ee:e6:70:fd:98:a0:89:3a:a4:76:03:f5:b2:73: 92:40:13:4b:0b:2e:a3:5f:40:86:4d:7c:34:0c:45: a0:43:93:03:dd:fb:da:d8:85:8e:4b:52:ae:6f:c5: 54:6f:7c:55:7b:1f:c9:be:55:b4:27:dc:b3:9c:2d: 20:42:b0:38:74:fa:78:f2:7f:f7:2d:b2:6d:53:31: 57:fc:1a:59:b8:81:b5:ec:38:82:f0:6b:cd:f0:7a: 84:04:e9:88:05:da:97:2c:44:05:79:b8:b0:4e:2f: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6B:E3:D9:B2:0C:EC:91:14:2F:42:1A:3E:5F:9F:69:D1:3B:C0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcf5efca-ed41-32a3-9a6a-ee82a2190d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:29:ec:21:39:9d:9f:26:c6:20:d5:66:1c:76:88:30:1d:75: 7b:d2:1c:5f:3a:b4:fa:e5:a3:84:d3:05:c4:70:09:a5:7f:ab: 6f:c3:c7:cb:b0:85:46:28:8b:63:6a:34:ce:82:06:5c:30:ea: 5e:55:61:c7:7c:86:dc:68:55:0e:96:e1:31:cd:68:87:a1:e6: b8:82:73:7e:f4:0f:88:95:3d:6c:ac:a5:b5:3f:9d:9a:cc:55: 49:f2:b1:65:26:c7:60:27:ec:98:37:d4:d2:41:92:56:de:87: 1e:5a:b3:5b:f6:21:15:d2:9f:c3:68:5b:b7:56:12:f2:ee:ad: a5:1c:56:c1:7f:68:75:94:39:d7:26:d1:fe:59:a9:84:16:13: 1d:40:15:4b:6c:eb:09:08:8a:32:8e:51:9f:83:73:86:20:c5: 47:77:59:14:54:88:42:94:b9:da:dd:1c:f0:7f:85:bd:4f:2f: 4b:26:7d:0e:bb:8e:ba:f0:8d:12:99:b8:6d:b4:1e:70:af:c6: 75:4f:39:be:a3:e7:a0:f5:ba:63:79:ba:86:95:5d:cc:15:e3: 3a:8f:ba:f6:74:2d:6f:bf:6f:e1:8a:28:22:0e:7c:cc:e9:d0: ab:8f:45:63:41:1c:6b:7f:c2:86:e2:da:b5:e0:e2:90:af:e1: 1b:33:a6:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsADmWg26FBsxW4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MzE1OVoXDTI1MTExODE5MzE1OVowLzEtMCsGA1UEAxMk OTFjMzdjMjctNGQzNS00NGQxLWFkODYtZWIyNDhjMjFmZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpmGJQr+ORm5oUxKj6lEozZGPb4OxQNUCnyG umsIk7drDekkQMywqRF8mxnFHt9TKwsH0Or/LD3PPM81UIUYJo/wdRUMa2lRuSo7 mIaCtNPsL/eLg+AlC2GWCeTZhfPxlXwJpyHToXwOcUgjeuaYSU2hVCTCps8wrdts ePSMUoVM8wRd2+xARkGWt++yKOlrrc1mJp897uZw/ZigiTqkdgP1snOSQBNLCy6j X0CGTXw0DEWgQ5MD3fva2IWOS1Kub8VUb3xVex/JvlW0J9yznC0gQrA4dPp48n/3 LbJtUzFX/BpZuIG17DiC8GvN8HqEBOmIBdqXLEQFebiwTi/pzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRr49myDOyRFC9CGj5fn2nRO8CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGNmNWVmY2EtZWQ0MS0z MmEzLTlhNmEtZWU4MmEyMTkwZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFop7CE5nZ8mxiDVZhx2iDAddXvSHF86tPrlo4TTBcRwCaV/q2/Dx8uw hUYoi2NqNM6CBlww6l5VYcd8htxoVQ6W4THNaIeh5riCc370D4iVPWyspbU/nZrM VUnysWUmx2An7Jg31NJBklbehx5as1v2IRXSn8NoW7dWEvLuraUcVsF/aHWUOdcm 0f5ZqYQWEx1AFUts6wkIijKOUZ+Dc4YgxUd3WRRUiEKUudrdHPB/hb1PL0smfQ67 jrrwjRKZuG20HnCvxnVPOb6j56D1umN5uoaVXcwV4zqPuvZ0LW+/b+GKKCIOfMzp 0KuPRWNBHGt/wobi2rXg4pCv4Rszpr0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:24 2025 by rpki-client