$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03fd37c4-edea-37b5-80ad-151223f49362.roa File: 03fd37c4-edea-37b5-80ad-151223f49362.roa (raw, json) Hash identifier: 2xJ5HQmpzSKlXh+fJfTFkG9ZKJxfohp7g9/R/Sb0EO0= Subject key identifier: 76:23:F2:49:E6:8D:21:A1:C3:CE:4E:11:2E:2A:5F:5F:73:9A:3C:8A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2685A1EE593D5B7D25154640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03fd37c4-edea-37b5-80ad-151223f49362.roa Signing time: Wed 10 Sep 2025 17:37:40 +0000 ROA not before: Wed 10 Sep 2025 17:37:40 +0000 ROA not after: Tue 09 Dec 2025 18:37:40 +0000 asID: 54253 IP address blocks: 140.245.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:a1:ee:59:3d:5b:7d:25:15:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:40 2025 GMT Not After : Dec 9 18:37:40 2025 GMT Subject: CN=8d509d52-febc-4525-a24d-faba7256694e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a5:bf:08:eb:4a:d2:f0:5a:8d:95:0f:7a:3b: 07:a1:b6:49:d1:db:a9:62:87:05:2f:b4:2d:64:82: 6d:86:48:df:c1:6b:52:40:99:4e:1f:29:3a:01:c6: 77:8e:24:7d:6a:15:e5:a6:c1:e9:56:a2:eb:c9:94: 03:3e:c8:6f:b7:be:d7:ef:b4:84:92:90:d7:18:42: e5:15:54:bc:e5:b4:43:d1:c2:7f:fb:37:f4:3b:73: d7:0f:e2:00:b3:b2:8d:8e:51:91:0c:9b:de:e7:d3: ca:bd:e8:5b:5d:c4:35:f5:a1:d4:9f:42:84:f4:44: 69:f4:82:b2:5d:55:a7:00:2b:c8:62:d1:80:45:56: 72:1a:4d:ce:56:ab:01:eb:f7:1f:49:9e:4c:a2:60: 0f:26:51:cd:7f:0d:40:16:ce:7c:5e:36:ad:94:42: 98:68:66:a9:15:22:f7:34:4e:76:ac:2f:50:da:23: 84:41:2e:5f:1b:6d:ba:b6:a6:fb:b1:fd:a4:9e:c7: 50:7c:38:99:17:5d:c1:ce:ef:f0:fe:0a:be:19:04: 0a:97:2e:40:89:2e:28:ea:12:5e:14:9f:f2:77:22: fa:bf:4f:e4:82:c4:3d:d9:7f:ca:1e:11:42:90:d9: 22:53:05:20:a9:dc:53:91:1b:d3:2b:84:a8:ed:a3: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:F2:49:E6:8D:21:A1:C3:CE:4E:11:2E:2A:5F:5F:73:9A:3C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03fd37c4-edea-37b5-80ad-151223f49362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:67:c6:3e:73:58:b1:75:90:ac:aa:e6:c9:e6:45:4a:89:74: a7:ca:e8:ef:06:73:ed:bd:05:d0:f5:dd:23:c4:ae:f1:f8:80: e1:6e:e0:e9:6b:c4:72:41:98:00:fa:9c:d2:bd:c4:5d:5f:67: b6:02:f2:27:fc:de:b0:81:d7:8b:65:d3:d1:34:0c:1e:75:aa: 71:e8:d1:44:b5:2a:d1:b4:7e:fc:f0:24:ca:0b:06:75:9b:28: c8:72:f2:91:90:71:8d:2b:64:c4:e4:da:d8:35:03:a2:b9:37: 03:5c:a6:5f:f4:28:41:9d:14:fb:74:f1:d9:14:8a:13:52:69: 32:45:fe:c3:df:c1:10:f2:72:7d:7b:6a:8e:b4:d0:d9:54:e4: d8:6b:ea:7e:66:3c:10:0a:3d:75:84:30:04:5b:2a:90:0d:c2: c0:ef:0f:5d:43:65:34:67:1d:74:f1:04:d2:be:78:ea:87:68: c5:82:1c:8a:49:1e:bd:bd:8d:1d:ed:b0:6e:ca:83:86:66:0e: c8:46:ae:49:5c:6e:de:3a:e5:09:bd:84:a0:5e:81:ee:44:58: fe:0c:73:d3:12:91:fb:98:be:d9:c6:b4:ca:6d:5b:00:27:9e: 0f:e5:37:68:4a:c0:d2:9c:41:a9:d2:40:18:0c:67:a2:ad:3f: 4b:8a:48:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhaHuWT1bfSUVRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3Mzc0MFoXDTI1MTIwOTE4Mzc0MFowLzEtMCsGA1UEAxMk OGQ1MDlkNTItZmViYy00NTI1LWEyNGQtZmFiYTcyNTY2OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6W/COtK0vBajZUPejsHobZJ0dupYocFL7Qt ZIJthkjfwWtSQJlOHyk6AcZ3jiR9ahXlpsHpVqLryZQDPshvt77X77SEkpDXGELl FVS85bRD0cJ/+zf0O3PXD+IAs7KNjlGRDJve59PKvehbXcQ19aHUn0KE9ERp9IKy XVWnACvIYtGARVZyGk3OVqsB6/cfSZ5MomAPJlHNfw1AFs58XjatlEKYaGapFSL3 NE52rC9Q2iOEQS5fG226tqb7sf2knsdQfDiZF13Bzu/w/gq+GQQKly5AiS4o6hJe FJ/ydyL6v0/kgsQ92X/KHhFCkNkiUwUgqdxTkRvTK4So7aMdRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYj8knmjSGhw85OES4qX19zmjyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDNmZDM3YzQtZWRlYS0z N2I1LTgwYWQtMTUxMjIzZjQ5MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjPWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtnxj5zWLF1kKyq5snmRUqJdKfK6O8Gc+29BdD13SPErvH4gOFu4Olr xHJBmAD6nNK9xF1fZ7YC8if83rCB14tl09E0DB51qnHo0US1KtG0fvzwJMoLBnWb KMhy8pGQcY0rZMTk2tg1A6K5NwNcpl/0KEGdFPt08dkUihNSaTJF/sPfwRDycn17 ao600NlU5Nhr6n5mPBAKPXWEMARbKpANwsDvD11DZTRnHXTxBNK+eOqHaMWCHIpJ Hr29jR3tsG7Kg4ZmDshGrklcbt465Qm9hKBege5EWP4Mc9MSkfuYvtnGtMptWwAn ng/lN2hKwNKcQanSQBgMZ6KtP0uKSAI= -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:44 2025 by rpki-client