$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa File: e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa (raw, json) Hash identifier: 1dx6cOBWNx52jZs3mZQrSb9dUX6ZkuENjKgPgw2A+SM= Subject key identifier: A8:F1:85:78:63:71:FA:37:16:2B:F0:0E:DA:78:6A:61:A0:B9:28:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EEFD418AD65E149F282D00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa Signing time: Fri 22 Aug 2025 12:56:18 +0000 ROA not before: Fri 22 Aug 2025 12:56:18 +0000 ROA not after: Thu 20 Nov 2025 13:56:18 +0000 asID: 31898 IP address blocks: 140.204.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ee:fd:41:8a:d6:5e:14:9f:28:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:18 2025 GMT Not After : Nov 20 13:56:18 2025 GMT Subject: CN=e4fa2da1-4343-45e9-8fee-1d9c19875ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:4e:08:82:5c:93:89:87:a1:0c:f8:70:4c: 74:31:2a:c8:44:e1:f7:65:ef:0f:e1:72:74:20:a3: 6c:3a:38:f3:1d:24:1a:2c:e3:e5:bd:83:dd:8c:10: bf:27:7d:5a:07:51:60:32:a3:71:6e:93:f7:40:c9: d4:ea:ac:d8:b4:29:24:ba:f6:9b:a6:e6:bf:2a:33: a7:63:43:68:cb:19:4b:f3:20:99:94:3f:42:b4:4e: 32:39:ff:05:f7:b8:21:40:f2:92:2f:d5:66:bc:16: 1f:10:a6:f1:0b:06:65:86:20:5c:b2:b4:fb:0c:d0: f9:a2:cd:67:d4:32:e8:25:8f:1c:48:fc:48:a1:e0: 12:de:23:80:cf:8a:3d:f0:84:67:32:17:2a:6b:14: fd:23:5a:59:63:77:ca:38:8f:93:13:f7:cc:c5:47: c0:a1:31:92:ed:a0:e7:d6:19:86:88:da:b6:66:85: bd:2f:fe:26:11:1d:ca:7b:49:a3:de:31:93:78:14: f2:8f:60:fc:91:14:2f:ad:22:0b:fa:f2:73:3a:9e: 23:f9:bb:73:72:f5:66:90:a0:6f:f6:2c:c8:a1:b8: 81:51:a5:db:ee:12:ee:d2:46:9c:af:22:bc:83:6f: e1:cb:7c:3a:bd:99:74:a7:1b:90:ad:ad:ae:1d:23: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F1:85:78:63:71:FA:37:16:2B:F0:0E:DA:78:6A:61:A0:B9:28:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5c:42:89:28:27:62:eb:77:8a:0d:a2:36:3c:fe:d7:0c:08: 38:06:55:bc:72:d7:eb:9f:51:13:b6:61:36:5c:0d:d5:44:43: 3c:18:c4:41:3f:35:f5:ef:a4:81:90:6b:e0:47:03:4b:66:b6: be:89:c1:74:4f:7f:a2:32:ea:f1:c8:98:a8:99:0b:2c:bc:63: 74:28:59:5b:7a:f8:ac:16:9a:61:f6:58:98:4d:30:6b:7e:a7: 3a:5f:83:05:c8:ae:ee:d8:5f:11:2d:29:ee:f0:3b:92:96:7b: 31:d5:f1:cc:00:ed:38:13:f8:4c:7f:e9:9d:25:ac:a1:7e:c5: 2a:20:ab:60:8f:d0:b4:cc:10:f9:9c:f0:e4:6b:31:b8:64:a5: 8b:4b:2c:d1:2e:fa:8f:0a:52:21:91:64:ab:39:b5:20:c9:b5: 9b:3f:f2:c8:4c:7d:96:da:fc:5b:02:c3:c0:49:87:e1:d8:14: df:ef:2c:a2:09:cd:cc:02:72:2a:70:0a:46:cc:b8:b9:51:7f: b0:78:2f:e1:eb:b0:4f:ff:07:c9:c8:a2:ad:b1:d5:66:d7:cd: 11:e6:32:d0:42:20:3a:40:49:85:0e:d1:50:77:8e:a4:51:d7: e9:bf:aa:bd:d5:9d:7a:c7:f8:7c:67:75:bd:9c:06:c0:6a:8c: 3f:a8:b7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7v1BitZeFJ8oLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYxOFoXDTI1MTEyMDEzNTYxOFowLzEtMCsGA1UEAxMk ZTRmYTJkYTEtNDM0My00NWU5LThmZWUtMWQ5YzE5ODc1ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEhOCIJck4mHoQz4cEx0MSrIROH3Ze8P4XJ0 IKNsOjjzHSQaLOPlvYPdjBC/J31aB1FgMqNxbpP3QMnU6qzYtCkkuvabpua/KjOn Y0NoyxlL8yCZlD9CtE4yOf8F97ghQPKSL9VmvBYfEKbxCwZlhiBcsrT7DND5os1n 1DLoJY8cSPxIoeAS3iOAz4o98IRnMhcqaxT9I1pZY3fKOI+TE/fMxUfAoTGS7aDn 1hmGiNq2ZoW9L/4mER3Ke0mj3jGTeBTyj2D8kRQvrSIL+vJzOp4j+btzcvVmkKBv 9izIobiBUaXb7hLu0kacryK8g2/hy3w6vZl0pxuQra2uHSMwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjxhXhjcfo3FivwDtp4amGguSj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTlmODYwMmItODAwYy0z OGM2LWJhZmMtZTJiZmM5MGQzNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJcQokoJ2Lrd4oNojY8/tcMCDgGVbxy1+ufURO2YTZcDdVEQzwYxEE/ NfXvpIGQa+BHA0tmtr6JwXRPf6Iy6vHImKiZCyy8Y3QoWVt6+KwWmmH2WJhNMGt+ pzpfgwXIru7YXxEtKe7wO5KWezHV8cwA7TgT+Ex/6Z0lrKF+xSogq2CP0LTMEPmc 8ORrMbhkpYtLLNEu+o8KUiGRZKs5tSDJtZs/8shMfZba/FsCw8BJh+HYFN/vLKIJ zcwCcipwCkbMuLlRf7B4L+HrsE//B8nIoq2x1WbXzRHmMtBCIDpASYUO0VB3jqRR 1+m/qr3VnXrH+Hxndb2cBsBqjD+ot3k= -----END CERTIFICATE-----Generated at Sat Aug 23 17:43:49 2025 by rpki-client