$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa File: ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa (raw, json) Hash identifier: 76W23H9MMYqZFs7UWhoTFdG3goKlFeizGzp4/Mfzp9s= Subject key identifier: 68:95:EB:C6:05:CF:37:9E:FE:37:83:7C:49:D7:0B:B8:07:AC:63:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF14E386E8FB5254C554BDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa Signing time: Thu 21 Aug 2025 21:01:03 +0000 ROA not before: Thu 21 Aug 2025 21:01:03 +0000 ROA not after: Wed 19 Nov 2025 22:01:03 +0000 asID: 31898 IP address blocks: 140.204.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:14:e3:86:e8:fb:52:54:c5:54:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 21:01:03 2025 GMT Not After : Nov 19 22:01:03 2025 GMT Subject: CN=c644c70a-442d-4b2e-a959-fcef2301b9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:e4:93:9c:be:55:ad:e4:23:de:10:26:c2: 1a:df:c6:62:71:45:15:0f:2b:4e:9f:40:64:6f:44: 40:21:f2:0f:9a:2f:ed:9c:c1:a4:f4:2e:14:cd:53: dd:a4:bf:9c:0a:84:14:2a:56:fd:9a:f1:fd:a2:a9: 93:64:fd:03:d9:0e:bf:7b:58:9f:22:52:96:60:db: 7a:9a:76:96:e0:1e:25:b5:54:1c:bd:83:b2:21:a4: a6:16:08:a0:06:57:98:de:b0:2a:1a:b6:f2:28:97: a3:09:dc:76:8e:53:ee:c8:03:f4:a2:51:29:88:1d: 07:83:5d:21:99:de:63:fb:90:c3:d1:41:2c:2d:e1: 0c:e0:9b:30:5e:06:a0:5d:24:eb:17:9b:c2:a5:73: 18:dd:00:21:b2:a9:53:18:23:54:d3:50:30:52:ee: 91:f1:bb:9f:fe:9a:d3:f0:bc:47:ff:02:fa:ee:34: ed:48:35:16:64:7f:e7:cf:d8:65:14:32:83:dc:91: a5:c1:6b:93:3c:59:2f:22:bf:0c:da:22:03:27:a0: df:bd:92:68:ff:6e:c0:04:24:e0:0a:35:66:4d:fb: 80:96:a0:4e:93:fc:74:dd:0c:61:1e:70:5a:0f:58: 58:15:2c:0c:49:95:c7:c6:35:3d:3c:a1:2d:68:76: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:EB:C6:05:CF:37:9E:FE:37:83:7C:49:D7:0B:B8:07:AC:63:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:91:f8:0c:9c:08:41:28:0b:a3:1a:68:e7:27:c5:86:21:93: e0:c0:30:82:b0:b2:da:56:27:e3:4d:90:5b:7f:66:54:04:a7: 4e:fb:b9:24:e6:46:ae:af:b2:2c:96:09:bb:b7:a9:9e:e2:77: a3:4d:66:97:9c:c9:bf:c3:50:28:a0:fb:16:55:f7:1f:dc:fd: 1a:a0:8c:e1:26:4e:82:9a:df:2a:37:06:33:97:8d:67:ff:ee: fa:bc:80:a1:35:41:10:f7:b1:84:9c:12:46:db:5c:0e:03:d0: 38:f0:c6:6a:90:e9:3b:e7:45:94:cf:66:d0:81:7f:01:7c:22: ec:56:39:42:e8:91:55:b8:2e:41:e4:ed:90:c5:f9:ad:52:a4: e4:5d:45:4c:a7:82:9f:fc:18:04:cc:7d:02:34:d6:69:cd:bb: f5:fe:46:00:a4:da:70:47:d6:cc:0f:50:46:64:8d:9d:9a:57: 0d:07:2c:5b:b2:18:1c:29:39:58:bb:77:a5:a1:85:65:ee:5f: 78:2d:41:92:3e:34:ad:ae:7e:af:bc:99:5c:69:5e:99:3d:a8: 24:bf:0e:4f:05:55:d8:23:04:2d:8c:2a:25:62:79:32:e2:ab: 9d:92:77:ca:27:8b:3c:ce:f9:71:d5:6f:db:c8:cb:83:8d:1d: 15:7d:40:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvFOOG6PtSVMVUvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIxMDEwM1oXDTI1MTExOTIyMDEwM1owLzEtMCsGA1UEAxMk YzY0NGM3MGEtNDQyZC00YjJlLWE5NTktZmNlZjIzMDFiOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN/kk5y+Va3kI94QJsIa38ZicUUVDytOn0Bk b0RAIfIPmi/tnMGk9C4UzVPdpL+cCoQUKlb9mvH9oqmTZP0D2Q6/e1ifIlKWYNt6 mnaW4B4ltVQcvYOyIaSmFgigBleY3rAqGrbyKJejCdx2jlPuyAP0olEpiB0Hg10h md5j+5DD0UEsLeEM4JswXgagXSTrF5vCpXMY3QAhsqlTGCNU01AwUu6R8buf/prT 8LxH/wL67jTtSDUWZH/nz9hlFDKD3JGlwWuTPFkvIr8M2iIDJ6DfvZJo/27ABCTg CjVmTfuAlqBOk/x03QxhHnBaD1hYFSwMSZXHxjU9PKEtaHboZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiV68YFzzee/jeDfEnXC7gHrGMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmYzY2JhYzctZWRiZi0z M2ZjLTgyY2ItN2EwMzcyZDFmZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6R+AycCEEoC6MaaOcnxYYhk+DAMIKwstpWJ+NNkFt/ZlQEp077uSTm Rq6vsiyWCbu3qZ7id6NNZpecyb/DUCig+xZV9x/c/RqgjOEmToKa3yo3BjOXjWf/ 7vq8gKE1QRD3sYScEkbbXA4D0DjwxmqQ6TvnRZTPZtCBfwF8IuxWOULokVW4LkHk 7ZDF+a1SpORdRUyngp/8GATMfQI01mnNu/X+RgCk2nBH1swPUEZkjZ2aVw0HLFuy GBwpOVi7d6WhhWXuX3gtQZI+NK2ufq+8mVxpXpk9qCS/Dk8FVdgjBC2MKiVieTLi q52Sd8onizzO+XHVb9vIy4ONHRV9QB0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:00 2025 by rpki-client