$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa File: 1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa (raw, json) Hash identifier: 05f/vYdBzUEcEBxw/M3+V8uPGj/2i9FqqitflMjd5Xc= Subject key identifier: 09:7C:E1:FB:7B:4C:F5:93:E3:C2:EE:CB:CB:9D:6D:8C:02:AE:46:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42C72335B6084866A58340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa Signing time: Tue 26 Aug 2025 22:54:49 +0000 ROA not before: Tue 26 Aug 2025 22:54:49 +0000 ROA not after: Mon 24 Nov 2025 23:54:49 +0000 asID: 31898 IP address blocks: 140.204.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:c7:23:35:b6:08:48:66:a5:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:49 2025 GMT Not After : Nov 24 23:54:49 2025 GMT Subject: CN=c0de4fc3-5a7c-40f0-acaf-0207b9bf53c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:8d:e5:60:4e:37:5f:b1:35:c9:d9:53:bc: 45:2a:79:11:a2:c8:9e:9a:da:12:30:29:76:de:a8: 17:c5:de:d6:fe:e5:ee:3a:84:a9:94:65:66:5d:79: 00:f7:0c:08:a0:cd:5d:86:b5:14:bb:7d:d1:2c:74: 72:bd:31:0f:77:ac:c2:f7:96:b6:b4:65:d6:8b:7d: ae:14:5f:79:44:e5:5b:cb:fc:7a:26:9b:c7:9c:46: d9:a5:b9:43:14:68:9e:c3:51:66:40:72:23:d2:36: 6b:39:39:68:11:fa:e1:17:8e:06:c4:fd:2d:7d:ad: 07:55:55:ca:f7:e1:bf:b0:be:da:2d:d6:fc:34:69: 5d:ad:27:02:05:82:e7:6f:8a:ce:d6:d7:44:50:4e: 2b:93:19:b3:35:ab:73:27:1f:11:c8:fa:48:ac:29: 07:24:e1:05:b9:1d:35:46:1e:4d:4c:3d:b4:2c:79: d4:ea:1f:e6:8c:40:fd:46:a0:d5:f1:da:ed:9a:fd: 6f:63:33:2f:6a:dd:36:f7:ca:0d:b0:a6:97:97:35: e2:f4:19:82:72:47:00:78:5d:2e:18:84:18:36:08: 33:52:5a:ca:b9:96:53:8f:ad:b0:4c:03:cf:76:49: 61:f2:2e:a7:ee:34:ed:03:70:18:4d:a5:00:6f:87: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:E1:FB:7B:4C:F5:93:E3:C2:EE:CB:CB:9D:6D:8C:02:AE:46:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:52:07:7b:66:30:1f:58:09:e3:58:38:27:36:44:0e:a4:fb: e5:a2:6a:28:1a:75:36:63:35:1b:c9:18:d9:91:66:8c:5b:67: b4:de:09:8d:03:f9:08:41:a3:be:14:62:78:86:16:cb:eb:00: ed:8f:fc:60:57:58:6f:8e:9b:4f:25:c4:05:fd:45:d2:c7:26: 08:62:ad:69:1d:56:ad:4b:15:81:58:6d:03:2d:b6:4c:de:8d: 14:c5:cb:c2:1a:6c:bd:e3:61:eb:0b:95:1b:2f:28:d7:c6:1e: 50:0d:5a:98:2b:44:99:90:45:34:9e:65:ae:6a:5d:00:b8:3d: e2:63:a3:a2:ff:42:a1:14:3a:fc:e1:15:b8:19:c9:84:fb:c1: c5:4f:5e:30:cf:2f:4e:82:c9:4a:0c:2b:da:87:5c:d1:7f:0a: fd:7a:f4:12:36:07:b2:6e:2d:da:07:15:b1:e3:96:6b:ff:44: 6a:f5:88:05:be:0f:27:64:0c:19:5e:e7:6f:a0:34:5e:42:b2: 7c:96:6c:3c:6c:04:1b:d8:a8:13:4f:f5:b3:28:8f:bc:1e:ba: 06:cd:c3:1c:85:18:d3:79:72:00:fe:0c:72:6d:6e:4a:9a:64: 39:ca:20:e1:11:9d:6f:ad:59:3c:bc:42:73:30:6f:dc:14:ca: c7:94:4f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QscjNbYISGalg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQ0OVoXDTI1MTEyNDIzNTQ0OVowLzEtMCsGA1UEAxMk YzBkZTRmYzMtNWE3Yy00MGYwLWFjYWYtMDIwN2I5YmY1M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFGN5WBON1+xNcnZU7xFKnkRosiemtoSMCl2 3qgXxd7W/uXuOoSplGVmXXkA9wwIoM1dhrUUu33RLHRyvTEPd6zC95a2tGXWi32u FF95ROVby/x6JpvHnEbZpblDFGiew1FmQHIj0jZrOTloEfrhF44GxP0tfa0HVVXK 9+G/sL7aLdb8NGldrScCBYLnb4rO1tdEUE4rkxmzNatzJx8RyPpIrCkHJOEFuR01 Rh5NTD20LHnU6h/mjED9RqDV8drtmv1vYzMvat0298oNsKaXlzXi9BmCckcAeF0u GIQYNggzUlrKuZZTj62wTAPPdklh8i6n7jTtA3AYTaUAb4cU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl84ft7TPWT48Luy8udbYwCrkaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEzYjhiNDctYjliNC0z ZjE1LTg4YmMtNGE1YWFmNWUyNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdSB3tmMB9YCeNYOCc2RA6k++WiaigadTZjNRvJGNmRZoxbZ7TeCY0D +QhBo74UYniGFsvrAO2P/GBXWG+Om08lxAX9RdLHJghirWkdVq1LFYFYbQMttkze jRTFy8IabL3jYesLlRsvKNfGHlANWpgrRJmQRTSeZa5qXQC4PeJjo6L/QqEUOvzh FbgZyYT7wcVPXjDPL06CyUoMK9qHXNF/Cv169BI2B7JuLdoHFbHjlmv/RGr1iAW+ DydkDBle52+gNF5CsnyWbDxsBBvYqBNP9bMoj7weugbNwxyFGNN5cgD+DHJtbkqa ZDnKIOERnW+tWTy8QnMwb9wUyseUT98= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:17 2025 by rpki-client