$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f732f9fb-67c3-3651-99bd-43ed24dba13e.roa File: f732f9fb-67c3-3651-99bd-43ed24dba13e.roa (raw, json) Hash identifier: ONJJ9p0MW4toxCPrlM7zphs41N4RgbgcyNDYw64O7uY= Subject key identifier: A3:EC:10:CE:53:02:53:CD:F7:34:AE:4B:B6:9E:88:FD:91:D6:8C:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB440FC669B70AEA848A4140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f732f9fb-67c3-3651-99bd-43ed24dba13e.roa Signing time: Wed 20 Aug 2025 12:12:52 +0000 ROA not before: Wed 20 Aug 2025 12:12:52 +0000 ROA not after: Tue 18 Nov 2025 13:12:52 +0000 asID: 31898 IP address blocks: 140.204.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:0f:c6:69:b7:0a:ea:84:8a:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:52 2025 GMT Not After : Nov 18 13:12:52 2025 GMT Subject: CN=66b461ae-1570-4555-97f5-12e3e6cbc994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:1e:9d:7d:00:49:59:81:50:0d:2d:66:82: 65:e2:e9:b8:73:da:e4:60:76:8d:1f:85:18:03:db: d1:7d:91:0d:00:fa:5a:eb:4b:48:36:17:66:1e:c5: 09:3a:b6:23:ff:87:d8:0d:7b:39:ac:00:e6:87:5e: 6b:63:b4:64:53:db:03:30:39:dd:aa:53:de:13:a1: 63:90:92:6f:f9:87:20:b3:8d:14:1f:69:c6:dc:91: af:59:c0:23:3d:6f:93:a2:e9:4f:d9:2c:71:2f:aa: 0c:2b:de:fb:17:1a:af:b0:f8:76:53:d7:2f:bf:d9: c7:d0:02:19:39:18:6c:3d:ba:55:cc:e1:5c:20:c1: 81:f4:5b:61:c9:08:dd:94:ab:c4:fe:da:44:00:b5: 51:93:e9:bb:39:6f:20:cc:d1:5f:95:47:9a:2d:89: 51:ff:62:91:ce:4d:d0:b9:e9:3a:72:d4:28:77:8f: a0:68:d9:eb:f5:62:c2:23:05:95:ff:32:a0:f3:87: 1f:f3:03:2b:31:ff:61:6d:c9:7d:f6:2a:3d:0a:d8: 03:f8:db:ae:9d:f9:ac:e0:9e:d9:67:77:1f:db:12: 46:1c:3e:1f:e2:5a:1c:1c:19:d4:bc:c8:d6:12:a4: 30:9f:0b:32:e3:c9:40:dc:26:41:a0:ba:37:51:3d: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:10:CE:53:02:53:CD:F7:34:AE:4B:B6:9E:88:FD:91:D6:8C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f732f9fb-67c3-3651-99bd-43ed24dba13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d2:b2:2e:0a:14:73:b9:0f:61:3f:d0:83:27:ba:e5:c0:f7: d2:36:d5:80:bb:01:19:fc:93:9b:77:b5:79:db:81:d2:8f:51: 17:60:f8:2d:a1:7a:17:54:89:b8:e8:99:6f:f2:5b:cb:9b:bc: d2:24:1b:d4:0a:28:25:a7:4a:f6:ed:59:33:8a:63:2b:13:d8: 9b:ea:ca:24:5b:91:f9:3e:6b:3a:6f:5e:6d:c9:f1:ea:bc:c1: c7:8a:11:7c:74:a9:95:f3:db:1f:85:0a:cd:49:8f:e4:1d:fa: f3:0c:b2:f6:b9:6a:f5:ab:a8:a0:e6:9b:12:69:a6:b7:a7:c4: f1:53:71:05:fe:c7:e2:a2:fc:5d:ef:41:43:04:c9:ba:87:55: 4f:82:4f:7c:6e:b6:4c:50:e9:a8:00:3a:22:5a:88:11:11:4f: ea:f1:c7:0a:ed:7d:43:3a:bc:3b:b2:5d:18:05:a4:56:f1:2c: c3:43:71:65:45:97:18:8a:d0:74:b8:ef:ab:37:89:62:4a:ec: 6d:64:0f:1a:d1:54:1f:79:ab:c1:a9:fa:94:0e:19:40:af:f5: a2:6d:29:c3:18:c7:76:37:3c:47:f3:70:61:03:1b:1f:28:be: 85:97:4b:f4:63:e9:b1:fe:33:58:f3:88:74:38:5a:12:35:77: 7c:a8:1f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRA/GabcK6oSKQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1MloXDTI1MTExODEzMTI1MlowLzEtMCsGA1UEAxMk NjZiNDYxYWUtMTU3MC00NTU1LTk3ZjUtMTJlM2U2Y2JjOTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy8enX0ASVmBUA0tZoJl4um4c9rkYHaNH4UY A9vRfZENAPpa60tINhdmHsUJOrYj/4fYDXs5rADmh15rY7RkU9sDMDndqlPeE6Fj kJJv+Ycgs40UH2nG3JGvWcAjPW+ToulP2SxxL6oMK977FxqvsPh2U9cvv9nH0AIZ ORhsPbpVzOFcIMGB9FthyQjdlKvE/tpEALVRk+m7OW8gzNFflUeaLYlR/2KRzk3Q uek6ctQod4+gaNnr9WLCIwWV/zKg84cf8wMrMf9hbcl99io9CtgD+Nuunfms4J7Z Z3cf2xJGHD4f4locHBnUvMjWEqQwnwsy48lA3CZBoLo3UT0KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPsEM5TAlPN9zSuS7aeiP2R1oynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjczMmY5ZmItNjdjMy0z NjUxLTk5YmQtNDNlZDI0ZGJhMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPSsi4KFHO5D2E/0IMnuuXA99I21YC7ARn8k5t3tXnbgdKPURdg+C2h ehdUibjomW/yW8ubvNIkG9QKKCWnSvbtWTOKYysT2JvqyiRbkfk+azpvXm3J8eq8 wceKEXx0qZXz2x+FCs1Jj+Qd+vMMsva5avWrqKDmmxJpprenxPFTcQX+x+Ki/F3v QUMEybqHVU+CT3xutkxQ6agAOiJaiBERT+rxxwrtfUM6vDuyXRgFpFbxLMNDcWVF lxiK0HS476s3iWJK7G1kDxrRVB95q8Gp+pQOGUCv9aJtKcMYx3Y3PEfzcGEDGx8o voWXS/Rj6bH+M1jziHQ4WhI1d3yoH88= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:06 2025 by rpki-client