$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa File: df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa (raw, json) Hash identifier: 5rI2PwKnkOxr/3E1Pfv8r10gaspUW7x8hgHgnl9tDPY= Subject key identifier: 37:F8:0B:5C:4F:74:D0:2D:4F:93:22:4C:46:AE:9B:31:A0:81:7F:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA643BFA6CE9647A8E2440 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa Signing time: Thu 21 Aug 2025 10:27:22 +0000 ROA not before: Thu 21 Aug 2025 10:27:22 +0000 ROA not after: Wed 19 Nov 2025 11:27:22 +0000 asID: 31898 IP address blocks: 140.204.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:64:3b:fa:6c:e9:64:7a:8e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:22 2025 GMT Not After : Nov 19 11:27:22 2025 GMT Subject: CN=f6258642-d218-40ae-826c-ce8c2498d0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cd:54:64:e8:8e:7e:f7:97:43:37:db:68:da: 8d:9e:d9:a4:04:40:d1:99:f3:2b:49:37:18:a4:28: b8:8d:48:c1:80:94:55:25:49:80:c4:3c:e4:dd:bd: 7d:d4:fa:c4:b2:37:9c:0a:1f:bd:30:9e:13:f2:31: 7a:67:d2:dc:7c:51:30:72:92:19:98:ca:5a:01:c9: 46:f5:f9:ee:89:bf:81:cf:78:3a:17:00:a1:bf:1f: 31:92:db:f6:0b:00:1e:38:72:88:34:44:78:03:f2: 14:cb:7a:68:ed:79:8e:64:d9:ae:06:1a:da:07:80: 94:c5:d5:dd:be:e3:9d:59:a7:c4:82:a1:37:d0:66: 45:5e:de:12:34:b7:8e:e8:a0:d3:b0:01:5a:a4:3f: ca:f2:fa:68:66:cf:b2:66:c1:f7:04:6c:02:71:c5: 94:9a:31:81:83:f4:36:07:16:36:2f:3a:c7:3d:ce: cc:08:46:b7:17:21:ea:4c:a3:d7:37:8f:c6:c7:0e: 35:74:b9:b3:ae:6e:38:33:8b:51:78:43:4d:40:a0: f8:d9:a1:7b:e1:c2:93:01:a8:d1:7d:3a:3d:79:55: f6:85:03:c4:64:01:09:66:5c:a3:47:5f:91:3c:07: 4f:8a:71:cb:23:5a:5d:72:23:d0:f8:8d:06:bf:15: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:0B:5C:4F:74:D0:2D:4F:93:22:4C:46:AE:9B:31:A0:81:7F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:7d:49:88:35:91:db:3e:5b:5a:52:31:3d:5c:cc:81:b1: 79:9d:39:a8:0f:39:ec:14:e1:1b:aa:63:36:e7:55:07:8b:cc: 5e:e9:de:23:9b:1e:a7:27:9f:ae:a5:c6:0e:79:7b:fb:f8:48: 67:f3:9a:ab:47:5c:1e:74:3d:24:9a:65:be:32:8f:84:f6:0c: af:a2:59:30:62:d0:58:45:84:50:4f:d5:a6:dd:f8:9b:0e:3e: 84:34:71:24:2e:b4:25:4e:bc:de:13:a9:fb:c9:0b:07:31:9f: 91:7b:1b:12:bb:b1:80:68:c3:3e:21:60:fc:d1:51:2b:00:b6: f1:88:e7:b9:94:22:73:a8:e4:06:70:50:7f:9f:c8:7f:3f:ab: f3:d1:9a:1f:df:19:d4:3d:46:34:83:3a:c3:df:93:08:a5:5f: 57:28:bc:75:94:5c:bd:26:2d:e6:d4:c6:d9:9c:95:3e:bd:32: 54:69:0a:4d:0a:e7:5a:15:05:b7:9a:b1:c9:09:82:d7:8a:97: 08:6d:fc:7d:0a:8c:fa:9c:0e:cf:ee:4c:44:08:fb:70:18:fc: 99:2c:ce:87:a5:6a:70:fe:10:41:1d:5d:89:43:99:8f:fe:45: 5c:eb:1f:72:6f:d0:cd:31:b3:44:2b:a6:1e:d9:99:84:57:24: d9:f9:ee:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2mQ7+mzpZHqOJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjcyMloXDTI1MTExOTExMjcyMlowLzEtMCsGA1UEAxMk ZjYyNTg2NDItZDIxOC00MGFlLTgyNmMtY2U4YzI0OThkMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc1UZOiOfveXQzfbaNqNntmkBEDRmfMrSTcY pCi4jUjBgJRVJUmAxDzk3b191PrEsjecCh+9MJ4T8jF6Z9LcfFEwcpIZmMpaAclG 9fnuib+Bz3g6FwChvx8xktv2CwAeOHKINER4A/IUy3po7XmOZNmuBhraB4CUxdXd vuOdWafEgqE30GZFXt4SNLeO6KDTsAFapD/K8vpoZs+yZsH3BGwCccWUmjGBg/Q2 BxY2LzrHPc7MCEa3FyHqTKPXN4/Gxw41dLmzrm44M4tReENNQKD42aF74cKTAajR fTo9eVX2hQPEZAEJZlyjR1+RPAdPinHLI1pdciPQ+I0GvxVHaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf4C1xPdNAtT5MiTEaumzGggX/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGYyYmM1YjQtOWU4ZC0z MmJkLTk1ZjAtNDQxOTk4NDdkMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAqfUmINZHbPltaUjE9XMyBsXmdOagPOewU4RuqYzbnVQeLzF7p3iOb Hqcnn66lxg55e/v4SGfzmqtHXB50PSSaZb4yj4T2DK+iWTBi0FhFhFBP1abd+JsO PoQ0cSQutCVOvN4TqfvJCwcxn5F7GxK7sYBowz4hYPzRUSsAtvGI57mUInOo5AZw UH+fyH8/q/PRmh/fGdQ9RjSDOsPfkwilX1covHWUXL0mLebUxtmclT69MlRpCk0K 51oVBbeasckJgteKlwht/H0KjPqcDs/uTEQI+3AY/JkszoelanD+EEEdXYlDmY/+ RVzrH3Jv0M0xs0Qrph7ZmYRXJNn57vY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:09 2025 by rpki-client