$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa File: 8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa (raw, json) Hash identifier: mPJTe/1yYHXn1Ij80JI/QdfYcePifWH0QV2CzvbGc2E= Subject key identifier: 0D:DC:62:E9:44:46:9A:B1:5E:D3:D3:EB:29:5E:CE:FC:09:D1:BF:8F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C8429DFCF7BDFE035BB200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa Signing time: Mon 25 Aug 2025 17:00:32 +0000 ROA not before: Mon 25 Aug 2025 17:00:32 +0000 ROA not after: Sun 23 Nov 2025 18:00:32 +0000 asID: 31898 IP address blocks: 140.204.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:42:9d:fc:f7:bd:fe:03:5b:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:32 2025 GMT Not After : Nov 23 18:00:32 2025 GMT Subject: CN=9d58c187-bc20-46f3-a1b9-ba72cfd784bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:ce:03:40:83:71:cf:ca:12:fa:47:64:12: 3b:02:ea:3d:bd:d3:6d:f8:c4:9f:11:ff:7c:53:5c: aa:b1:f3:51:cc:08:92:4b:d2:71:06:cb:0a:89:46: ae:aa:fa:7d:09:e0:22:2e:c3:68:c6:3b:1a:ec:ec: f3:36:f9:00:ef:07:8b:ca:77:7f:42:03:cf:d6:ee: 88:10:3b:1c:9f:80:96:f7:7f:f5:29:49:4c:59:1a: 8e:7d:6c:ab:1b:44:d6:27:74:b1:a6:cf:92:eb:dc: 1a:33:ed:47:22:3c:12:ec:c3:e2:9d:15:2b:b4:60: 3d:e3:e8:9b:4e:3f:da:30:cb:55:f1:68:ff:77:87: 24:9a:0c:66:f1:10:98:ed:d6:ec:ec:cf:2e:6a:f9: d7:63:cc:48:1b:39:84:8e:c3:ee:5d:23:90:83:3f: 30:a0:c1:5f:a9:b7:9c:39:7c:1f:2e:22:6b:3c:83: b0:4f:e7:2f:af:ef:ab:c0:3a:6e:d0:d6:e4:6b:65: 46:fc:cd:6b:01:92:14:72:29:a2:a8:3c:4f:77:03: cb:f4:bc:61:25:70:cd:73:b2:2c:21:37:0d:90:96: 98:df:df:32:39:df:9d:54:34:09:72:bf:e2:48:c5: 3f:e9:ca:06:a4:54:5f:a5:23:9c:e3:79:e5:f8:bb: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:62:E9:44:46:9A:B1:5E:D3:D3:EB:29:5E:CE:FC:09:D1:BF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9d:d3:40:b4:00:c2:83:11:fb:71:84:13:33:2f:9e:f4:1e: 68:40:8a:66:4d:8a:30:6d:c2:a1:41:d7:8c:2c:27:a9:34:bb: 26:ae:98:66:e1:85:d2:df:b7:81:1d:e1:fe:02:98:9a:fd:fe: 6d:5a:2d:3a:08:2c:13:3c:f3:02:32:de:d0:68:f2:2f:c4:ec: db:30:26:90:9e:22:b5:8a:e1:95:1a:97:de:06:2d:c6:28:e7: cd:2e:19:f8:03:30:40:a5:2a:5e:2f:7a:8a:ce:9f:78:ae:f0: 67:2d:f7:b8:c8:ac:44:75:f3:b1:c5:10:e7:6a:7b:ad:e2:90: e8:8a:89:b4:5a:5d:4c:f6:4c:54:c3:13:98:41:2c:0a:c2:f0: a0:44:aa:03:3a:c2:6a:ec:66:6a:f2:55:1c:30:7a:04:df:93: 31:ec:b7:d4:39:e9:39:00:a8:79:e0:ba:eb:a2:4f:2a:9a:e1: 3f:2d:e4:6e:60:9d:a0:d4:a2:c3:98:89:10:1b:cc:3a:22:2f: da:dc:35:f0:53:e2:b3:ba:32:e7:58:73:05:be:cf:bb:35:0f: d3:61:d1:23:1f:c0:db:74:06:44:3a:9d:0e:08:06:3c:c0:96: 8b:34:5e:aa:43:67:69:a5:5e:7a:7c:21:4f:e8:b4:fa:37:02: af:05:52:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEKd/Pe9/gNbsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzMloXDTI1MTEyMzE4MDAzMlowLzEtMCsGA1UEAxMk OWQ1OGMxODctYmMyMC00NmYzLWExYjktYmE3MmNmZDc4NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rOA0CDcc/KEvpHZBI7Auo9vdNt+MSfEf98 U1yqsfNRzAiSS9JxBssKiUauqvp9CeAiLsNoxjsa7OzzNvkA7weLynd/QgPP1u6I EDscn4CW93/1KUlMWRqOfWyrG0TWJ3Sxps+S69waM+1HIjwS7MPinRUrtGA94+ib Tj/aMMtV8Wj/d4ckmgxm8RCY7dbs7M8uavnXY8xIGzmEjsPuXSOQgz8woMFfqbec OXwfLiJrPIOwT+cvr++rwDpu0Nbka2VG/M1rAZIUcimiqDxPdwPL9LxhJXDNc7Is ITcNkJaY398yOd+dVDQJcr/iSMU/6coGpFRfpSOc43nl+LsJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3cYulERpqxXtPT6ylezvwJ0b+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGYwZTNjZmQtZmVkZS0z Yjc4LTlmNzktYTZiMmEwZGFhNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+d00C0AMKDEftxhBMzL570HmhAimZNijBtwqFB14wsJ6k0uyaumGbh hdLft4Ed4f4CmJr9/m1aLToILBM88wIy3tBo8i/E7NswJpCeIrWK4ZUal94GLcYo 580uGfgDMEClKl4veorOn3iu8Gct97jIrER187HFEOdqe63ikOiKibRaXUz2TFTD E5hBLArC8KBEqgM6wmrsZmryVRwwegTfkzHst9Q56TkAqHnguuuiTyqa4T8t5G5g naDUosOYiRAbzDoiL9rcNfBT4rO6MudYcwW+z7s1D9Nh0SMfwNt0BkQ6nQ4IBjzA los0XqpDZ2mlXnp8IU/otPo3Aq8FUnE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:22 2025 by rpki-client