$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b51bea-f116-3c00-9c4a-02a379e6b18a.roa File: e4b51bea-f116-3c00-9c4a-02a379e6b18a.roa (raw, json) Hash identifier: Wj+RVw3wSxZVMaUygSTit1QpTmfEoKtnHmcVGYelN1M= Subject key identifier: 6D:1B:35:DD:1F:64:50:05:55:F5:C9:3A:38:5B:D0:48:5C:90:A5:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B63DEA59858D40B4A24549660 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b51bea-f116-3c00-9c4a-02a379e6b18a.roa Signing time: Sat 09 Aug 2025 19:17:13 +0000 ROA not before: Sat 09 Aug 2025 19:17:13 +0000 ROA not after: Fri 07 Nov 2025 20:17:13 +0000 asID: 31898 IP address blocks: 140.238.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:de:a5:98:58:d4:0b:4a:24:54:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:13 2025 GMT Not After : Nov 7 20:17:13 2025 GMT Subject: CN=09eefcc8-8e24-441b-8367-f3c5d27196ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:c3:ad:60:b1:7a:cf:b0:f9:03:1e:4b:2e: f1:0e:50:99:39:4b:b8:f3:41:2a:a6:e5:d3:e4:3d: 52:cb:d2:0b:83:9c:b5:47:46:d1:84:41:55:ac:14: e3:1e:59:cd:39:46:1a:26:18:42:2c:94:17:76:b5: 28:59:4d:f4:e1:3e:25:1e:c0:29:1a:10:4d:f8:5d: 94:1d:48:54:ce:48:75:2e:29:51:e9:c5:b2:b9:5a: bc:47:d5:45:42:fb:97:60:8a:12:56:01:83:ad:41: e7:ed:38:44:58:7f:50:4a:f3:ad:26:ac:8c:fd:79: 99:74:44:af:ae:7e:50:89:e6:61:d9:96:c0:c5:38: ef:a6:e7:d5:a7:51:17:aa:aa:b8:1e:3e:0d:ce:37: 6e:0e:7a:51:98:a0:56:a0:7a:b8:23:6a:a0:ae:c2: cd:16:9b:57:dc:2d:09:51:3f:6c:18:ac:9d:b4:74: a7:51:20:d2:69:91:22:ec:f1:20:76:85:30:0c:d0: bb:c0:5b:15:a2:66:13:1c:cd:60:0b:ec:d1:ee:ff: fb:e4:f5:ea:88:14:95:d2:fc:f9:3b:67:46:0f:95: c3:06:49:5e:55:11:6f:0a:65:c0:df:ca:77:a7:ed: ad:09:91:61:99:55:10:8e:0c:d6:66:ad:0f:93:63: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:35:DD:1F:64:50:05:55:F5:C9:3A:38:5B:D0:48:5C:90:A5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e4b51bea-f116-3c00-9c4a-02a379e6b18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:30:82:d0:b0:d8:92:1d:52:fb:22:85:98:24:b5:ac:b0:49: bf:56:85:e7:3e:bf:fe:22:bb:1b:fb:41:f0:1c:8b:a8:a5:93: 87:ce:21:ca:24:cf:a9:fa:45:38:d4:f8:dd:3e:4c:8f:6f:76: 80:48:e7:44:e5:e9:02:f3:d1:21:15:2d:09:23:b0:1b:af:3e: 53:68:bb:ba:83:3e:71:c3:dc:38:00:b0:67:9c:be:02:c7:c6: 98:cd:59:45:5c:eb:78:4b:f3:f3:b3:ad:68:0b:99:de:7f:bc: 5b:75:6f:b7:e2:be:66:3c:0b:cf:84:bd:cb:55:1e:c0:f6:5e: c6:1f:f8:41:54:d9:4a:48:24:bc:78:f9:cf:c2:14:6a:b0:52: a6:0f:02:8b:67:f2:f3:bf:2a:c7:96:5d:53:d4:92:59:a9:eb: 5b:50:2e:98:56:97:21:93:c1:28:21:e1:d9:61:65:bc:88:4b: ba:8c:4a:97:42:c1:b2:fb:8d:3c:b3:63:28:30:e7:a8:03:fc: a7:92:7d:82:1c:94:d2:5f:30:1d:cc:06:39:81:4f:4e:9e:8a: 19:be:65:4d:ae:ef:15:30:85:ec:29:d9:a4:d2:7b:1c:66:56: 13:2a:4c:b5:a2:3d:cd:38:b6:ab:7c:83:1e:49:6a:47:82:26: 7c:36:80:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtj3qWYWNQLSiRUlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcxM1oXDTI1MTEwNzIwMTcxM1owLzEtMCsGA1UEAxMk MDllZWZjYzgtOGUyNC00NDFiLTgzNjctZjNjNWQyNzE5NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOnDrWCxes+w+QMeSy7xDlCZOUu480EqpuXT 5D1Sy9ILg5y1R0bRhEFVrBTjHlnNOUYaJhhCLJQXdrUoWU304T4lHsApGhBN+F2U HUhUzkh1LilR6cWyuVq8R9VFQvuXYIoSVgGDrUHn7ThEWH9QSvOtJqyM/XmZdESv rn5QieZh2ZbAxTjvpufVp1EXqqq4Hj4NzjduDnpRmKBWoHq4I2qgrsLNFptX3C0J UT9sGKydtHSnUSDSaZEi7PEgdoUwDNC7wFsVomYTHM1gC+zR7v/75PXqiBSV0vz5 O2dGD5XDBkleVRFvCmXA38p3p+2tCZFhmVUQjgzWZq0Pk2NA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0bNd0fZFAFVfXJOjhb0EhckKXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTRiNTFiZWEtZjExNi0z YzAwLTljNGEtMDJhMzc5ZTZiMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjO5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcwgtCw2JIdUvsihZgktaywSb9Whec+v/4iuxv7QfAci6ilk4fOIcok z6n6RTjU+N0+TI9vdoBI50Tl6QLz0SEVLQkjsBuvPlNou7qDPnHD3DgAsGecvgLH xpjNWUVc63hL8/OzrWgLmd5/vFt1b7fivmY8C8+EvctVHsD2XsYf+EFU2UpIJLx4 +c/CFGqwUqYPAotn8vO/KseWXVPUklmp61tQLphWlyGTwSgh4dlhZbyIS7qMSpdC wbL7jTyzYygw56gD/KeSfYIclNJfMB3MBjmBT06eihm+ZU2u7xUwhewp2aTSexxm VhMqTLWiPc04tqt8gx5JakeCJnw2gEI= -----END CERTIFICATE-----Generated at Thu Oct 9 01:05:38 2025 by rpki-client