$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa File: b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa (raw, json) Hash identifier: 8ZY+qfJ7XJdAP422rrYrWXOEMhCQuFj6mwY8dYtTgcY= Subject key identifier: 87:89:11:88:92:BA:34:37:BE:7F:A7:A9:D2:A8:57:D5:10:FD:D9:90 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C840D246A131C486007200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa Signing time: Mon 25 Aug 2025 17:00:32 +0000 ROA not before: Mon 25 Aug 2025 17:00:32 +0000 ROA not after: Sun 23 Nov 2025 18:00:32 +0000 asID: 31898 IP address blocks: 140.204.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:40:d2:46:a1:31:c4:86:00:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:32 2025 GMT Not After : Nov 23 18:00:32 2025 GMT Subject: CN=d41a2143-ee44-4625-b2f1-eafd46b666d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:ca:85:9f:12:10:63:a8:c5:eb:ab:5b:b4: 99:1a:e5:22:33:c2:92:ca:13:4f:1d:11:e1:90:19: fb:60:d6:db:b8:5b:f8:1c:61:7c:ff:fb:a5:58:84: 51:8d:92:ec:87:1d:06:d9:21:b2:ba:7d:7e:21:11: 42:0a:6d:d7:85:8a:99:83:0a:28:84:2c:26:64:6b: 12:50:90:a2:28:bb:09:ea:20:b8:ef:6d:45:b5:2e: 5e:f5:57:ad:e2:b0:84:07:5b:b0:5b:3d:d5:15:e8: 40:ab:4f:b7:cf:41:ca:6b:4a:4e:92:9b:76:24:a1: f8:6e:89:a9:6b:5c:07:21:59:c3:92:0a:61:8a:03: 1d:c3:11:69:63:e4:03:ef:25:7d:3b:37:c6:06:be: 63:31:c0:d5:4e:db:9e:f5:f1:97:7c:a5:0b:44:b6: 10:80:41:3c:fd:5a:a1:0b:6d:98:de:35:98:6f:24: 4e:a0:d4:a7:1b:80:b2:3b:4f:66:65:87:19:43:78: 08:9f:fc:df:59:4f:7c:7d:3e:9c:d9:10:ff:46:76: 33:d0:7c:43:70:32:b1:e6:27:2d:36:5a:64:6f:45: 5b:1c:a9:fd:98:70:45:31:4f:fc:29:d0:de:e0:a6: 2f:97:37:e5:67:c3:d7:97:36:48:d2:1c:6b:19:cd: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:11:88:92:BA:34:37:BE:7F:A7:A9:D2:A8:57:D5:10:FD:D9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3e:c4:68:c3:b1:94:8a:f7:0b:6e:ff:42:ac:f3:f0:92:6a: 56:4d:74:70:1e:fc:39:4b:cd:1a:91:78:1a:32:84:02:aa:35: ea:4e:ea:ee:a3:ed:66:d3:b2:38:2d:a6:0d:29:df:ae:be:ae: 15:59:4a:7f:23:ca:3b:22:03:fe:32:a1:39:2c:e6:53:d8:d0: d5:d5:15:b5:c4:96:05:6c:5d:45:7c:a8:79:d5:15:dd:97:c0: d4:85:e4:2d:2e:b1:bd:22:9a:bc:14:a1:ab:a7:0b:06:66:f5: b8:e5:90:a0:bc:95:7d:fa:9e:54:4e:56:bb:07:f3:28:d6:fd: ea:61:dc:b9:71:6a:fb:53:cc:58:ee:ad:f2:8e:43:18:ad:e0: 40:e6:a0:46:f0:81:35:7b:d8:91:3c:9e:8d:77:68:af:93:7d: 0d:7b:04:0b:08:e2:df:7e:7d:44:f2:60:83:60:a5:f7:7d:a9: 9d:24:f5:c3:32:cb:14:eb:1f:16:40:34:f3:d6:00:83:a4:b9: b5:83:4e:82:ed:c0:63:d7:89:b1:a8:93:53:27:39:f0:0b:8a: 4d:b2:b3:20:31:ac:0f:0f:f8:48:f1:21:7f:ad:b4:4c:a1:63: 5d:bb:a5:c2:f7:0e:9e:12:b3:a9:ed:ef:e5:c1:ab:37:4d:3d: 0e:6a:9f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEDSRqExxIYAcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzMloXDTI1MTEyMzE4MDAzMlowLzEtMCsGA1UEAxMk ZDQxYTIxNDMtZWU0NC00NjI1LWIyZjEtZWFmZDQ2YjY2NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPrKhZ8SEGOoxeurW7SZGuUiM8KSyhNPHRHh kBn7YNbbuFv4HGF8//ulWIRRjZLshx0G2SGyun1+IRFCCm3XhYqZgwoohCwmZGsS UJCiKLsJ6iC4721FtS5e9Vet4rCEB1uwWz3VFehAq0+3z0HKa0pOkpt2JKH4bomp a1wHIVnDkgphigMdwxFpY+QD7yV9OzfGBr5jMcDVTtue9fGXfKULRLYQgEE8/Vqh C22Y3jWYbyROoNSnG4CyO09mZYcZQ3gIn/zfWU98fT6c2RD/RnYz0HxDcDKx5ict Nlpkb0VbHKn9mHBFMU/8KdDe4KYvlzflZ8PXlzZI0hxrGc3B4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeJEYiSujQ3vn+nqdKoV9UQ/dmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmMzVmNDktM2JmZS0z ODhiLWE5NGYtNmY5ZjNkZDFmMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs+xGjDsZSK9wtu/0Ks8/CSalZNdHAe/DlLzRqReBoyhAKqNepO6u6j 7WbTsjgtpg0p366+rhVZSn8jyjsiA/4yoTks5lPY0NXVFbXElgVsXUV8qHnVFd2X wNSF5C0usb0imrwUoaunCwZm9bjlkKC8lX36nlROVrsH8yjW/eph3LlxavtTzFju rfKOQxit4EDmoEbwgTV72JE8no13aK+TfQ17BAsI4t9+fUTyYINgpfd9qZ0k9cMy yxTrHxZANPPWAIOkubWDToLtwGPXibGok1MnOfALik2ysyAxrA8P+EjxIX+ttEyh Y127pcL3Dp4Ss6nt7+XBqzdNPQ5qnx0= -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:08 2025 by rpki-client