$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5398acd-4222-3020-8dc9-ecaaa873e04a.roa File: f5398acd-4222-3020-8dc9-ecaaa873e04a.roa (raw, json) Hash identifier: VmbjRhldkMbz5XZ82zbUYxY04zCSHBf/Qq9uxPhu8mk= Subject key identifier: 97:A5:A6:08:4B:95:42:0D:A4:14:6F:C8:3E:85:07:4B:06:14:9D:2F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFCA6C11ADDDE675BEAA640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5398acd-4222-3020-8dc9-ecaaa873e04a.roa Signing time: Thu 21 Aug 2025 11:36:24 +0000 ROA not before: Thu 21 Aug 2025 11:36:24 +0000 ROA not after: Wed 19 Nov 2025 12:36:24 +0000 asID: 31898 IP address blocks: 140.204.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:a6:c1:1a:dd:de:67:5b:ea:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:24 2025 GMT Not After : Nov 19 12:36:24 2025 GMT Subject: CN=4952eb7e-048e-4154-8d59-ad941579e083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:1e:a8:1b:10:e4:00:27:7d:d3:8d:76:f3: d6:fd:e5:8f:b0:22:df:7a:c7:9f:57:b2:f2:70:65: ef:47:70:c4:d4:f1:59:fa:ac:1f:b1:6c:b5:3f:d3: 5f:a6:7c:31:13:d2:3c:65:8a:bc:b8:c4:cb:bf:7a: c6:c0:82:00:c6:56:71:9d:c0:78:5c:17:3f:05:06: 2f:c2:27:ba:fa:fa:06:16:35:2a:a7:8a:3c:49:07: c4:9b:8d:8c:9c:e1:57:3a:57:eb:c1:cd:79:d6:69: 81:ec:b2:73:08:d1:f1:bc:b3:7a:82:c1:7e:4d:01: a5:43:85:4c:e4:eb:5d:cb:d2:cc:0d:84:b1:b4:ee: 5f:6f:2b:a5:da:3b:50:be:fe:fa:bf:19:5a:e2:0c: 1e:02:48:0a:30:05:90:6f:b4:d2:c7:7c:86:9a:17: 0f:eb:62:d7:24:c9:75:b6:d7:90:d5:0c:4e:27:17: 46:56:1e:9a:48:4f:42:d6:16:7c:b1:b4:f2:d8:2e: 43:09:fd:d0:b7:eb:4f:43:2c:c9:0f:fb:b5:c3:6a: c9:98:89:96:07:8d:e5:cd:7b:43:a7:a1:bc:ff:f3: de:4c:e6:2a:53:9a:ef:75:c6:bd:7e:37:6b:a6:e4: 85:39:d6:16:90:81:fc:d7:83:58:78:aa:01:08:20: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:A6:08:4B:95:42:0D:A4:14:6F:C8:3E:85:07:4B:06:14:9D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f5398acd-4222-3020-8dc9-ecaaa873e04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ce:9b:1a:ce:f5:94:d8:24:1a:ed:c6:44:3c:c7:bd:b5:d4: bb:9f:8a:c6:10:49:ca:70:0a:10:c0:26:e1:48:39:ce:71:a9: f7:b2:a0:23:0e:a1:3d:ee:f6:01:93:a6:6d:93:e5:a3:cd:f7: 85:1a:af:7c:d6:56:1f:67:2b:92:4b:8f:f7:cc:95:e0:0b:40: 71:da:e7:b2:31:96:df:7f:ce:da:4d:af:65:40:9a:20:9b:10: ce:bc:34:bb:04:a9:f5:ab:ac:93:9f:48:e8:86:6e:bd:84:7b: 53:68:6a:60:62:8c:cd:57:19:ab:2e:dc:81:a7:00:8c:10:b2: 3d:9a:56:48:eb:83:8e:b6:0b:68:ff:8d:a5:2d:b4:22:73:46: 53:16:ad:ff:a0:10:b8:29:b0:cf:ea:9c:54:e8:5e:2b:a5:fd: f8:34:50:92:2b:de:6a:07:7d:a7:3f:85:53:0e:c5:9c:4e:c3: 7b:db:20:3a:ed:79:d0:3e:73:3c:af:86:d6:c6:9c:75:e0:a6: a8:01:f8:41:4a:0e:b0:20:37:c2:02:85:55:b3:e3:85:90:35: 65:c7:cd:5d:de:e7:48:b9:52:96:17:62:cf:60:bb:96:9d:33: 30:e3:f4:b4:96:02:a4:9d:d2:5a:bd:d5:4a:f4:58:34:eb:2b: 02:3a:65:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt/KbBGt3eZ1vqpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzYyNFoXDTI1MTExOTEyMzYyNFowLzEtMCsGA1UEAxMk NDk1MmViN2UtMDQ4ZS00MTU0LThkNTktYWQ5NDE1NzllMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC4eqBsQ5AAnfdONdvPW/eWPsCLfesefV7Ly cGXvR3DE1PFZ+qwfsWy1P9NfpnwxE9I8ZYq8uMTLv3rGwIIAxlZxncB4XBc/BQYv wie6+voGFjUqp4o8SQfEm42MnOFXOlfrwc151mmB7LJzCNHxvLN6gsF+TQGlQ4VM 5Otdy9LMDYSxtO5fbyul2jtQvv76vxla4gweAkgKMAWQb7TSx3yGmhcP62LXJMl1 tteQ1QxOJxdGVh6aSE9C1hZ8sbTy2C5DCf3Qt+tPQyzJD/u1w2rJmImWB43lzXtD p6G8//PeTOYqU5rvdca9fjdrpuSFOdYWkIH814NYeKoBCCB2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJelpghLlUINpBRvyD6FB0sGFJ0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjUzOThhY2QtNDIyMi0z MDIwLThkYzktZWNhYWE4NzNlMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjOmxrO9ZTYJBrtxkQ8x7211LufisYQScpwChDAJuFIOc5xqfeyoCMO oT3u9gGTpm2T5aPN94Uar3zWVh9nK5JLj/fMleALQHHa57Ixlt9/ztpNr2VAmiCb EM68NLsEqfWrrJOfSOiGbr2Ee1NoamBijM1XGasu3IGnAIwQsj2aVkjrg462C2j/ jaUttCJzRlMWrf+gELgpsM/qnFToXiul/fg0UJIr3moHfac/hVMOxZxOw3vbIDrt edA+czyvhtbGnHXgpqgB+EFKDrAgN8IChVWz44WQNWXHzV3e50i5UpYXYs9gu5ad MzDj9LSWAqSd0lq91Ur0WDTrKwI6ZXw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:03 2025 by rpki-client