$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa File: 871efcfb-f5a1-3eb0-adc1-701040308d89.roa (raw, json) Hash identifier: VGEUT7Y1PIODNJcVpO4hJmGMiZ4PJ8J/b/awyLYPkbs= Subject key identifier: B3:39:4E:B5:21:3F:69:89:54:AF:0E:5A:E2:07:1B:77:8A:08:83:2C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C84803CA3E528A58288400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa Signing time: Mon 25 Aug 2025 17:00:35 +0000 ROA not before: Mon 25 Aug 2025 17:00:35 +0000 ROA not after: Sun 23 Nov 2025 18:00:35 +0000 asID: 31898 IP address blocks: 140.204.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:48:03:ca:3e:52:8a:58:28:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:35 2025 GMT Not After : Nov 23 18:00:35 2025 GMT Subject: CN=1b54f587-4c3c-44de-a294-442abf776fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:95:48:fe:af:ca:d7:bd:68:a9:3e:ef:92: e7:84:98:4f:61:df:3b:12:aa:3d:43:5c:e3:fe:53: c3:b9:9e:3d:8f:e4:30:8e:34:eb:00:f3:72:87:7e: 62:50:4a:5a:d5:5d:73:fe:eb:5c:0c:3c:35:98:ca: c3:49:8b:eb:d0:93:5d:e7:c0:ea:4d:d8:9c:7b:78: 90:47:a6:57:06:d0:63:bf:bb:67:c8:aa:6f:0d:9b: 09:ec:47:a2:02:f4:2c:3d:d6:4f:16:d2:31:de:cf: 32:89:92:ab:4b:c1:9b:6f:ab:d0:44:43:09:0b:06: 8d:ef:9e:8c:5c:fe:60:58:26:34:e8:00:a7:2b:02: 2d:f7:83:40:46:5a:d2:f0:96:ef:c5:d5:5b:99:e5: 7b:66:a4:3e:bf:11:77:7e:7a:46:4d:38:82:1c:7d: 65:c7:d9:ec:38:80:9f:e9:96:00:b2:23:ed:70:5a: 70:89:f6:8f:47:cf:b4:a8:3e:84:3e:e9:13:ee:f2: 40:11:2c:bd:66:21:07:72:a7:e3:5e:2a:73:e8:92: 40:12:72:0e:b2:57:b5:b7:8a:f9:de:11:73:17:ab: 64:44:bb:9c:3b:b3:78:c2:f6:c0:ee:b2:de:98:eb: 55:d3:29:dc:84:7e:a4:46:aa:90:67:2c:37:1a:0b: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:4E:B5:21:3F:69:89:54:AF:0E:5A:E2:07:1B:77:8A:08:83:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cf:fd:f9:48:cc:df:3a:c9:3c:83:85:d7:63:91:3c:9a:d8: bd:2c:bd:ba:3b:3f:19:b5:2a:e0:cc:53:83:68:3d:6d:36:79: 18:b8:94:39:e3:4e:ca:df:09:87:57:72:13:0f:78:54:08:a0: e3:c6:23:03:06:75:1a:68:5d:4d:63:6c:db:9a:91:6e:9c:ad: dd:02:60:73:f1:72:63:9c:3e:78:1e:50:06:ac:3f:e9:5f:40: 25:8c:e4:4a:0d:1f:be:4c:33:53:b2:a3:5d:8f:66:63:ba:30: fd:bc:4d:99:d6:0a:6d:45:ac:98:2b:c8:74:63:9a:b3:86:6e: ee:ca:8d:4a:50:05:d9:db:cf:af:0f:c5:38:12:88:ca:6a:21: c9:eb:4e:51:92:1d:aa:5e:26:e8:c5:b8:7c:60:19:60:5b:8b: 03:36:f9:0e:53:c2:5d:b0:0a:90:98:a2:8f:84:3a:90:1e:a5: 5c:99:79:a5:7e:19:66:50:16:6a:c7:86:ba:1d:b5:a1:e8:a2: e4:07:33:a4:b2:e2:b5:69:ed:51:07:c1:02:3a:ce:33:ef:a0: b1:26:2e:ad:09:9c:4c:7f:01:f2:b2:ef:65:43:80:c0:41:91: 3b:ff:09:c7:48:ec:a5:77:03:a7:9e:01:f7:0c:72:45:6f:de: 51:fd:fe:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEgDyj5SilgohAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzNVoXDTI1MTEyMzE4MDAzNVowLzEtMCsGA1UEAxMk MWI1NGY1ODctNGMzYy00NGRlLWEyOTQtNDQyYWJmNzc2ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3CVSP6vyte9aKk+75LnhJhPYd87Eqo9Q1zj /lPDuZ49j+QwjjTrAPNyh35iUEpa1V1z/utcDDw1mMrDSYvr0JNd58DqTdice3iQ R6ZXBtBjv7tnyKpvDZsJ7EeiAvQsPdZPFtIx3s8yiZKrS8Gbb6vQREMJCwaN756M XP5gWCY06ACnKwIt94NARlrS8JbvxdVbmeV7ZqQ+vxF3fnpGTTiCHH1lx9nsOICf 6ZYAsiPtcFpwifaPR8+0qD6EPukT7vJAESy9ZiEHcqfjXipz6JJAEnIOsle1t4r5 3hFzF6tkRLucO7N4wvbA7rLemOtV0ynchH6kRqqQZyw3GgvOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM5TrUhP2mJVK8OWuIHG3eKCIMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODcxZWZjZmItZjVhMS0z ZWIwLWFkYzEtNzAxMDQwMzA4ZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATP/flIzN86yTyDhddjkTya2L0svbo7Pxm1KuDMU4NoPW02eRi4lDnj TsrfCYdXchMPeFQIoOPGIwMGdRpoXU1jbNuakW6crd0CYHPxcmOcPngeUAasP+lf QCWM5EoNH75MM1Oyo12PZmO6MP28TZnWCm1FrJgryHRjmrOGbu7KjUpQBdnbz68P xTgSiMpqIcnrTlGSHapeJujFuHxgGWBbiwM2+Q5Twl2wCpCYoo+EOpAepVyZeaV+ GWZQFmrHhrodtaHoouQHM6Sy4rVp7VEHwQI6zjPvoLEmLq0JnEx/AfKy72VDgMBB kTv/CcdI7KV3A6eeAfcMckVv3lH9/l4= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:45 2025 by rpki-client