$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96122398-dd2b-339a-b1d2-ca0eb6634432.roa File: 96122398-dd2b-339a-b1d2-ca0eb6634432.roa (raw, json) Hash identifier: LlpJwUKpNOIkRgJGclJMgL4ANfLoPyvduDDxqs+c9Sg= Subject key identifier: 16:F3:57:8F:7F:6C:18:4F:C2:11:99:F0:F3:F3:AB:DA:6E:CE:15:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C3ABC364E88084ECB24B40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96122398-dd2b-339a-b1d2-ca0eb6634432.roa Signing time: Mon 25 Aug 2025 08:15:29 +0000 ROA not before: Mon 25 Aug 2025 08:15:29 +0000 ROA not after: Sun 23 Nov 2025 09:15:29 +0000 asID: 31898 IP address blocks: 140.204.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c3:ab:c3:64:e8:80:84:ec:b2:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:15:29 2025 GMT Not After : Nov 23 09:15:29 2025 GMT Subject: CN=8daa36a7-1a4f-4fb9-830f-de4654d72a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:3d:fd:9b:ab:57:71:1b:cf:7a:35:ac:f1: 6e:93:73:17:56:a7:a8:fb:b6:e2:1f:b8:fc:ed:03: 11:ec:5d:5f:5e:a6:7a:2f:d9:fb:f7:f8:f4:19:f4: 87:43:01:f7:59:2b:d9:db:2d:d6:51:30:c2:60:a8: cf:d0:84:f7:38:14:ad:10:aa:cd:2d:63:80:cc:d6: 76:77:cc:95:e5:d1:c3:71:6a:a6:11:54:30:50:99: 0b:9d:21:91:18:78:68:78:46:f7:9f:9b:52:30:82: 2c:fb:f6:63:5c:3c:b1:ea:9e:02:ea:27:8d:0c:a3: b1:07:19:af:75:f1:94:48:05:18:c4:5e:7f:ab:fc: eb:f4:9e:e7:dd:86:72:c7:a8:1f:c2:05:bc:eb:cd: 17:0d:86:b0:31:2a:61:69:44:af:bb:c1:45:47:0f: 99:2d:ca:e4:f5:29:7a:4f:32:97:b7:bb:e1:f2:68: 1d:94:80:e7:4f:56:78:87:3a:cb:3c:f9:49:36:16: a1:0a:a8:f4:78:52:16:24:52:14:32:30:a9:7e:86: 5b:e0:aa:ea:02:ef:ce:a1:43:a8:6d:12:98:90:97: f8:bf:d9:c6:e5:11:73:70:9f:e2:ed:7d:dd:cf:75: 3c:87:4a:2a:8a:e9:be:06:d5:96:fe:5b:c2:17:4e: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:57:8F:7F:6C:18:4F:C2:11:99:F0:F3:F3:AB:DA:6E:CE:15:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96122398-dd2b-339a-b1d2-ca0eb6634432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:43:ae:be:d3:c2:93:59:7e:d7:6e:52:75:e8:27:79:21:cc: 55:1b:c0:8f:b3:95:e3:d7:a5:ce:9f:22:0c:08:5b:35:17:a2: 34:1c:0a:67:a5:91:d4:14:9a:f9:50:ca:85:16:7c:7f:bb:61: b7:fe:17:5f:59:f4:f7:bb:ec:ab:8e:14:9e:02:1f:ad:7b:13: fc:75:97:11:26:af:ed:7c:1f:0d:19:9b:0c:f3:a0:7b:68:3c: c2:12:36:fa:ba:c5:ff:10:ab:f7:a3:ab:d0:bb:2f:ef:33:e5: 79:10:6a:79:1f:67:bf:ba:b0:d3:3b:7b:db:b4:33:e3:d2:9d: 39:e5:f4:5b:63:a6:78:d3:eb:c3:4a:f3:30:0e:51:c3:64:42: 0e:36:74:5e:1e:78:ad:da:fd:2f:98:b5:eb:ed:cc:d1:d0:4c: 71:58:52:a2:20:bb:35:98:a2:f9:77:51:86:f1:f8:1e:b4:76: 53:be:25:be:8c:1f:2f:ef:a3:4a:ec:d5:e4:e3:80:61:6e:f2: bd:67:62:e9:90:a3:ef:e0:8d:7a:82:4d:6a:02:19:8e:ee:ea: 54:66:ed:6d:b6:d0:47:88:39:3c:fb:13:7b:9c:20:74:44:a2: aa:92:e0:c1:be:ec:cb:8f:e0:49:ce:f4:a3:d2:ba:e1:ab:92: b9:d7:a1:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4w6vDZOiAhOyyS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTUyOVoXDTI1MTEyMzA5MTUyOVowLzEtMCsGA1UEAxMk OGRhYTM2YTctMWE0Zi00ZmI5LTgzMGYtZGU0NjU0ZDcyYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcY9/ZurV3Ebz3o1rPFuk3MXVqeo+7biH7j8 7QMR7F1fXqZ6L9n79/j0GfSHQwH3WSvZ2y3WUTDCYKjP0IT3OBStEKrNLWOAzNZ2 d8yV5dHDcWqmEVQwUJkLnSGRGHhoeEb3n5tSMIIs+/ZjXDyx6p4C6ieNDKOxBxmv dfGUSAUYxF5/q/zr9J7n3YZyx6gfwgW8680XDYawMSphaUSvu8FFRw+ZLcrk9Sl6 TzKXt7vh8mgdlIDnT1Z4hzrLPPlJNhahCqj0eFIWJFIUMjCpfoZb4KrqAu/OoUOo bRKYkJf4v9nG5RFzcJ/i7X3dz3U8h0oqium+BtWW/lvCF04XBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbzV49/bBhPwhGZ8PPzq9puzhVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYxMjIzOTgtZGQyYi0z MzlhLWIxZDItY2EwZWI2NjM0NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNDrr7TwpNZftduUnXoJ3khzFUbwI+zlePXpc6fIgwIWzUXojQcCmel kdQUmvlQyoUWfH+7Ybf+F19Z9Pe77KuOFJ4CH617E/x1lxEmr+18Hw0ZmwzzoHto PMISNvq6xf8Qq/ejq9C7L+8z5XkQankfZ7+6sNM7e9u0M+PSnTnl9FtjpnjT68NK 8zAOUcNkQg42dF4eeK3a/S+YtevtzNHQTHFYUqIguzWYovl3UYbx+B60dlO+Jb6M Hy/vo0rs1eTjgGFu8r1nYumQo+/gjXqCTWoCGY7u6lRm7W220EeIOTz7E3ucIHRE oqqS4MG+7MuP4EnO9KPSuuGrkrnXoew= -----END CERTIFICATE-----Generated at Thu Oct 9 00:59:15 2025 by rpki-client