$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa File: b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa (raw, json) Hash identifier: JhDrq1Ie3mKUtUnoRjcZlfbQ5H81Nd+mtTF1Xn/wfeg= Subject key identifier: 03:63:0E:60:2A:C5:41:BA:94:83:A3:B9:5C:7E:C9:98:28:C1:98:92 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B26859F260A2EEADE5E7F2840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa Signing time: Wed 10 Sep 2025 17:37:39 +0000 ROA not before: Wed 10 Sep 2025 17:37:39 +0000 ROA not after: Tue 09 Dec 2025 18:37:39 +0000 asID: 54253 IP address blocks: 140.245.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:85:9f:26:0a:2e:ea:de:5e:7f:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 17:37:39 2025 GMT Not After : Dec 9 18:37:39 2025 GMT Subject: CN=4067bd63-5759-43f7-b407-55125331bd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:14:6b:16:a9:25:62:7c:df:c8:5e:52:51: 67:c6:7c:13:85:2b:c5:89:9d:b2:6e:37:89:a6:8c: 73:6b:24:c4:5b:49:1c:b8:10:ee:0a:a3:36:fd:2d: 7e:4c:9b:4b:92:a2:ce:fa:bc:7e:8b:e9:0f:31:4f: fd:21:d0:a5:78:c6:ce:7e:02:07:35:68:de:07:25: bc:bf:99:34:24:90:87:ab:07:1e:8a:1c:a2:4a:3a: 33:24:58:57:84:9c:c8:b0:a0:55:0b:68:35:22:16: bc:f3:2c:9c:6b:46:38:0d:c4:3a:f5:e2:0a:f2:2b: 83:17:0d:ae:1a:5d:ac:23:93:97:e3:58:6f:a5:89: 87:ea:58:2e:fc:fe:55:64:e8:47:5d:32:0d:ff:92: 08:ea:25:00:26:bf:7b:de:52:ad:fb:40:0f:6f:2d: be:70:0d:73:b1:9c:ff:c5:22:e5:87:f9:f6:32:2a: f5:72:94:4b:41:2b:98:a4:6e:eb:2d:3d:08:81:99: aa:43:7e:77:ba:ed:00:f5:b5:76:cf:32:57:a7:6f: ad:a3:10:45:93:72:0e:4f:83:c6:64:d7:f7:3a:0e: 9c:fe:fd:34:0b:28:ff:90:0c:0d:e2:0c:99:b9:d2: 85:63:60:3e:95:2b:01:e3:8a:b6:0d:49:30:c0:4b: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:0E:60:2A:C5:41:BA:94:83:A3:B9:5C:7E:C9:98:28:C1:98:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b2e0d72c-a48c-312a-becf-4e9fb4fc0e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:49:ba:33:dc:40:29:5a:bd:01:20:21:d6:22:b6:f7:52:f6: 1f:eb:1b:49:2a:f0:ac:78:8f:05:bc:40:75:5b:d1:ba:b9:88: 9f:9c:70:4b:7f:45:99:52:3c:7a:4c:c4:5e:60:ab:c4:86:5e: 03:d3:f3:27:98:6d:68:86:9a:eb:47:85:66:e0:76:16:71:93: e7:46:d5:cd:33:72:bb:c4:f8:f7:69:b1:dc:6d:68:35:d7:6c: 5d:01:fb:14:23:46:de:b5:fe:53:5a:24:14:2d:8b:32:03:37: 4c:db:a2:f0:f4:d5:bb:b4:c9:20:67:ee:b5:56:fb:1d:fa:6f: 92:74:e2:f5:4f:36:7c:9f:ae:87:d1:4b:d4:31:4c:68:3c:9b: fa:5e:23:a6:93:d1:1f:ca:bb:ce:34:b9:12:a6:42:78:56:5c: 9a:61:77:be:2d:94:d8:5e:c7:47:1a:71:f8:f2:87:db:e1:e8: 55:f2:50:4b:ed:75:bb:da:98:11:e8:f6:a9:83:24:23:f6:5f: 21:30:13:4c:e9:da:ea:60:79:57:4b:7a:77:81:9d:3b:70:5d: c0:14:9b:0c:02:05:39:c0:94:29:f3:d4:82:e3:ce:b3:94:9d: 59:95:67:b0:8b:91:b7:7a:6c:95:6e:d7:5e:6d:09:96:5a:6f: ae:74:93:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmhZ8mCi7q3l5/KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMDE3MzczOVoXDTI1MTIwOTE4MzczOVowLzEtMCsGA1UEAxMk NDA2N2JkNjMtNTc1OS00M2Y3LWI0MDctNTUxMjUzMzFiZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cUaxapJWJ838heUlFnxnwThSvFiZ2ybjeJ poxzayTEW0kcuBDuCqM2/S1+TJtLkqLO+rx+i+kPMU/9IdCleMbOfgIHNWjeByW8 v5k0JJCHqwceihyiSjozJFhXhJzIsKBVC2g1Iha88yyca0Y4DcQ69eIK8iuDFw2u Gl2sI5OX41hvpYmH6lgu/P5VZOhHXTIN/5II6iUAJr973lKt+0APby2+cA1zsZz/ xSLlh/n2Mir1cpRLQSuYpG7rLT0IgZmqQ353uu0A9bV2zzJXp2+toxBFk3IOT4PG ZNf3Og6c/v00Cyj/kAwN4gyZudKFY2A+lSsB44q2DUkwwEuDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANjDmAqxUG6lIOjuVx+yZgowZiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjJlMGQ3MmMtYTQ4Yy0z MTJhLWJlY2YtNGU5ZmI0ZmMwZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjPWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVJujPcQClavQEgIdYitvdS9h/rG0kq8Kx4jwW8QHVb0bq5iJ+ccEt/ RZlSPHpMxF5gq8SGXgPT8yeYbWiGmutHhWbgdhZxk+dG1c0zcrvE+PdpsdxtaDXX bF0B+xQjRt61/lNaJBQtizIDN0zbovD01bu0ySBn7rVW+x36b5J04vVPNnyfrofR S9QxTGg8m/peI6aT0R/Ku840uRKmQnhWXJphd74tlNhex0cacfjyh9vh6FXyUEvt dbvamBHo9qmDJCP2XyEwE0zp2upgeVdLeneBnTtwXcAUmwwCBTnAlCnz1ILjzrOU nVmVZ7CLkbd6bJVu115tCZZab650k8o= -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:15 2025 by rpki-client