$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa File: 9a00d5d0-8834-3899-9788-c77084566c30.roa (raw, json) Hash identifier: baWH4DpXAb3/Mrlkl7wf4uMxTA0Vo/mbhAb5/hlm+TA= Subject key identifier: 1C:0E:AE:23:74:75:63:F1:3C:D8:5A:86:2F:A9:75:A0:58:27:C3:46 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D9096AC7D244D023758B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa Signing time: Mon 25 Aug 2025 17:34:21 +0000 ROA not before: Mon 25 Aug 2025 17:34:21 +0000 ROA not after: Sun 23 Nov 2025 18:34:21 +0000 asID: 31898 IP address blocks: 140.204.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d9:09:6a:c7:d2:44:d0:23:75:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:21 2025 GMT Not After : Nov 23 18:34:21 2025 GMT Subject: CN=33579300-5f3a-494b-9071-121eff0256f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:7c:83:9b:7f:0f:3b:fa:3a:a7:2b:2d:fc: 3f:4b:36:c1:14:63:4e:dc:16:2b:c8:ae:6f:20:2c: 92:09:91:d6:75:57:bc:e1:3b:3a:04:af:d2:d4:9a: 9b:aa:80:b4:21:a1:47:6b:d2:28:0e:32:e9:a0:78: df:8d:42:0a:44:0f:2b:12:34:ae:a8:b7:31:e2:c2: 4d:0b:42:8d:9e:54:ba:2f:a1:6d:d5:b3:e1:70:41: 3c:90:2b:2e:fb:1c:7e:8a:37:86:99:72:8d:e7:8d: 11:ca:fb:a4:27:3b:c2:80:7a:1b:3a:25:fe:38:f2: 80:5c:b4:7f:cc:27:19:cf:63:7d:ed:73:c8:cd:39: 57:4a:73:df:69:3f:ca:9a:c9:4e:e7:4b:30:7a:e8: 93:8b:bb:03:ce:c6:1d:6b:c9:13:37:03:c3:b4:78: 64:a3:78:c4:bc:8b:59:85:39:aa:80:e6:c9:d0:f0: 5d:08:f4:b1:70:58:0e:aa:6a:9a:99:ca:ff:01:87: c3:27:f1:20:c6:7d:ce:4e:5c:31:5c:42:20:31:47: dd:46:04:14:d1:c2:e4:20:6e:e9:aa:76:9b:26:ca: 24:5a:61:55:13:c4:e4:bc:24:e2:0e:22:59:c0:a7: 59:fc:2d:59:3c:1f:b4:8e:b8:bd:c3:44:3a:91:73: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0E:AE:23:74:75:63:F1:3C:D8:5A:86:2F:A9:75:A0:58:27:C3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:02:4d:76:36:23:1d:6f:50:99:26:9a:5d:48:a3:a6:ca:4b: 9f:14:f0:50:4b:58:29:75:e9:48:01:bb:0d:70:cd:03:11:33: 70:8d:81:8e:bb:7b:39:98:63:29:82:d6:49:36:1e:88:f9:82: c0:76:69:01:33:a7:ed:d1:fa:e7:39:f4:74:d0:3b:29:b4:6a: 89:99:7d:ca:b3:dd:0a:3b:ef:34:a3:4c:a4:03:eb:b7:b0:46: bc:b8:98:b7:e4:44:81:37:80:da:c4:41:49:98:3b:ce:54:a2: 26:ef:c0:7a:e0:0d:b9:5c:1f:25:0d:f0:d1:ed:9e:d9:78:e8: ce:79:4b:cd:66:39:f4:b9:d3:71:4d:5c:9a:29:bd:9d:1b:ad: b0:5a:77:0d:de:52:df:63:34:fa:2c:a5:9e:0f:65:a8:8b:a1: bc:c2:cc:5e:55:44:e9:95:e5:0a:23:53:1a:aa:b3:24:ce:01: 75:d1:b3:e2:5d:2f:49:72:92:8d:8f:85:b4:66:1f:d5:25:8e: 55:82:a4:19:9d:32:17:41:57:26:9b:25:11:c4:e2:dc:b6:3e: 45:ac:d8:63:e1:a2:b4:5f:b3:bf:21:99:2e:3a:44:03:31:b2: be:35:cb:4c:0b:45:f8:30:96:a1:a7:02:88:b4:8d:4b:1c:3f: 64:37:63:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr52Qlqx9JE0CN1i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQyMVoXDTI1MTEyMzE4MzQyMVowLzEtMCsGA1UEAxMk MzM1NzkzMDAtNWYzYS00OTRiLTkwNzEtMTIxZWZmMDI1NmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLt8g5t/Dzv6OqcrLfw/SzbBFGNO3BYryK5v ICySCZHWdVe84Ts6BK/S1JqbqoC0IaFHa9IoDjLpoHjfjUIKRA8rEjSuqLcx4sJN C0KNnlS6L6Ft1bPhcEE8kCsu+xx+ijeGmXKN540RyvukJzvCgHobOiX+OPKAXLR/ zCcZz2N97XPIzTlXSnPfaT/KmslO50sweuiTi7sDzsYda8kTNwPDtHhko3jEvItZ hTmqgObJ0PBdCPSxcFgOqmqamcr/AYfDJ/Egxn3OTlwxXEIgMUfdRgQU0cLkIG7p qnabJsokWmFVE8TkvCTiDiJZwKdZ/C1ZPB+0jri9w0Q6kXMiMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwOriN0dWPxPNhahi+pdaBYJ8NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWEwMGQ1ZDAtODgzNC0z ODk5LTk3ODgtYzc3MDg0NTY2YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4CTXY2Ix1vUJkmml1Io6bKS58U8FBLWCl16UgBuw1wzQMRM3CNgY67 ezmYYymC1kk2Hoj5gsB2aQEzp+3R+uc59HTQOym0aomZfcqz3Qo77zSjTKQD67ew Rry4mLfkRIE3gNrEQUmYO85UoibvwHrgDblcHyUN8NHtntl46M55S81mOfS503FN XJopvZ0brbBadw3eUt9jNPospZ4PZaiLobzCzF5VROmV5QojUxqqsyTOAXXRs+Jd L0lyko2PhbRmH9UljlWCpBmdMhdBVyabJRHE4ty2PkWs2GPhorRfs78hmS46RAMx sr41y0wLRfgwlqGnAoi0jUscP2Q3YyA= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:31 2025 by rpki-client