$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/834130d1-65bd-3da6-8447-4239d2ccd474.roa File: 834130d1-65bd-3da6-8447-4239d2ccd474.roa (raw, json) Hash identifier: QOUl6LitA+rBPd7tVS9R/VlySc5XCb8NAc87uu0uAs8= Subject key identifier: E9:FC:FB:76:01:48:80:5F:6A:39:A6:DB:DF:4E:98:DE:1A:C9:16:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C84A8487BC357DBC66A840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/834130d1-65bd-3da6-8447-4239d2ccd474.roa Signing time: Mon 25 Aug 2025 17:00:36 +0000 ROA not before: Mon 25 Aug 2025 17:00:36 +0000 ROA not after: Sun 23 Nov 2025 18:00:36 +0000 asID: 31898 IP address blocks: 140.204.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:4a:84:87:bc:35:7d:bc:66:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:36 2025 GMT Not After : Nov 23 18:00:36 2025 GMT Subject: CN=eecdade2-162f-4b5c-9a6f-9c4f4e5f6cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:e6:ec:1c:3e:9f:57:30:b1:fd:bf:a7:5a: c7:17:74:33:4f:35:3a:04:b5:1e:aa:48:74:f8:a3: 88:1a:7b:6b:04:4a:2d:9e:c0:35:88:3b:53:1e:39: 2c:46:45:5b:a6:95:49:95:2f:6d:7f:41:ae:9c:4d: 37:15:cb:20:30:e5:ff:a0:09:0a:35:84:73:4e:63: a2:a5:51:bc:f6:86:ed:d3:50:1d:ad:8d:fc:d2:3a: 91:b1:30:c0:95:21:2e:2a:28:d9:45:14:eb:dd:a5: cf:91:f1:61:ec:c0:97:f9:dd:46:2e:31:a1:54:b6: e2:5b:3b:bd:d6:a5:4e:1f:35:32:6b:1e:1f:52:27: 76:a3:64:3b:6f:be:e4:1d:b2:bf:8e:67:1c:f6:83: f2:bf:96:24:83:48:3e:09:2d:38:83:49:b5:81:ac: ac:86:7d:ed:48:39:b1:ef:8f:3a:f1:f6:27:58:a6: 55:6a:f3:34:db:1f:06:7d:cc:fe:37:97:bc:fb:f8: 78:ef:08:fa:21:df:82:39:1a:9c:8b:fd:2c:33:40: da:36:46:0b:ad:10:79:ab:6c:15:7d:74:2b:39:e9: 43:28:f6:5c:31:f5:1b:b2:7b:36:6e:1b:17:a5:9a: 7a:be:bc:1a:8b:23:08:64:26:e8:72:a5:f6:cb:b3: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:FB:76:01:48:80:5F:6A:39:A6:DB:DF:4E:98:DE:1A:C9:16:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/834130d1-65bd-3da6-8447-4239d2ccd474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:bc:86:dc:22:4f:32:29:9c:04:5c:c6:d1:2a:d2:3b:65:c0: ea:fa:a0:10:fa:34:24:eb:c6:9d:98:59:d4:d3:9b:30:ca:03: 3a:de:6a:e7:a8:bf:02:d4:09:9f:ee:75:d5:f0:19:f1:e1:3f: 9d:b2:54:fc:21:11:55:bb:25:84:31:4d:af:69:8a:e4:59:78: bd:bc:75:d5:d2:ff:7f:a2:2f:9a:c7:8e:c4:44:b5:f5:9d:ac: 7b:61:f8:b7:a2:8e:9d:f6:6d:66:39:d4:18:0c:49:c2:63:82: 3a:a1:dd:16:5b:48:84:db:22:b1:a2:28:78:14:03:6c:b7:50: 8a:0b:ee:3c:2b:aa:bb:6d:22:87:dd:c8:84:b9:5c:e2:2a:46: e4:cc:2f:9b:b6:9e:f9:e2:5a:b8:2a:bc:a5:ce:12:ce:14:ff: 81:1e:d9:c4:11:87:6e:36:6c:47:6d:0d:a1:83:af:65:7d:8c: 9f:d2:ac:6e:dd:5e:65:77:12:08:33:ff:8f:95:3a:72:ce:b9: 3d:37:c1:6a:4e:e3:fa:63:b8:23:24:f3:37:a9:6a:cf:6e:c7: fa:14:23:1b:3d:44:b8:02:75:8a:3b:df:7a:33:e6:4f:be:19: 78:f9:f4:45:44:d3:e7:d7:2e:f0:18:f1:7f:d9:e3:97:99:07: d7:8f:0b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEqEh7w1fbxmqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzNloXDTI1MTEyMzE4MDAzNlowLzEtMCsGA1UEAxMk ZWVjZGFkZTItMTYyZi00YjVjLTlhNmYtOWM0ZjRlNWY2Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Dm7Bw+n1cwsf2/p1rHF3QzTzU6BLUeqkh0 +KOIGntrBEotnsA1iDtTHjksRkVbppVJlS9tf0GunE03FcsgMOX/oAkKNYRzTmOi pVG89obt01AdrY380jqRsTDAlSEuKijZRRTr3aXPkfFh7MCX+d1GLjGhVLbiWzu9 1qVOHzUyax4fUid2o2Q7b77kHbK/jmcc9oPyv5Ykg0g+CS04g0m1gayshn3tSDmx 74868fYnWKZVavM02x8Gfcz+N5e8+/h47wj6Id+CORqci/0sM0DaNkYLrRB5q2wV fXQrOelDKPZcMfUbsns2bhsXpZp6vrwaiyMIZCbocqX2y7NPdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn8+3YBSIBfajmm299OmN4ayRacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODM0MTMwZDEtNjViZC0z ZGE2LTg0NDctNDIzOWQyY2NkNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG8htwiTzIpnARcxtEq0jtlwOr6oBD6NCTrxp2YWdTTmzDKAzreaueo vwLUCZ/uddXwGfHhP52yVPwhEVW7JYQxTa9piuRZeL28ddXS/3+iL5rHjsREtfWd rHth+Leijp32bWY51BgMScJjgjqh3RZbSITbIrGiKHgUA2y3UIoL7jwrqrttIofd yIS5XOIqRuTML5u2nvniWrgqvKXOEs4U/4Ee2cQRh242bEdtDaGDr2V9jJ/SrG7d XmV3Eggz/4+VOnLOuT03wWpO4/pjuCMk8zepas9ux/oUIxs9RLgCdYo733oz5k++ GXj59EVE0+fXLvAY8X/Z45eZB9ePC/U= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:34 2025 by rpki-client