$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa File: aff52061-08df-3f5d-82f3-9bd999e3d55a.roa (raw, json) Hash identifier: SHbOKrlX/gDP0cfzS0QN+r614E/DjwWEgzyowoFB+VQ= Subject key identifier: 5D:3B:EC:9D:6F:B3:E5:CB:C6:85:B3:AE:B6:F1:4E:97:5B:E8:73:65 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584B04775BC30A9D5407A43786E0 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa Signing time: Fri 29 Aug 2025 12:51:26 +0000 ROA not before: Fri 29 Aug 2025 12:51:26 +0000 ROA not after: Thu 27 Nov 2025 13:51:26 +0000 asID: 214208 IP address blocks: 140.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:77:5b:c3:0a:9d:54:07:a4:37:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Aug 29 12:51:26 2025 GMT Not After : Nov 27 13:51:26 2025 GMT Subject: CN=5f630a6e-0bdb-4ab6-b845-014ee08c4dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:ce:21:65:a0:f5:bf:c6:dc:6e:92:04:40: cd:9c:ca:bb:0d:8b:65:21:e6:d5:f5:8e:a7:02:a1: 74:ea:70:f7:c6:75:5e:44:7d:89:f5:34:f6:c7:46: 0c:f9:f0:13:0f:d4:77:67:95:3e:b2:c1:99:b5:c7: 9d:1d:c7:95:83:2a:da:88:4a:d3:98:87:69:72:73: b6:02:f1:cc:15:3c:f0:01:ee:63:18:5d:67:e7:8a: 04:9e:e1:d9:b6:d1:ae:ab:e5:3e:17:bb:ce:2b:e5: 18:8c:e1:d8:9b:f0:da:65:32:97:81:52:87:1f:7e: e9:29:79:e5:14:1a:4d:f5:b7:9e:7a:a0:09:fa:bd: 0b:f8:c9:fb:93:03:7b:1d:ea:3d:1e:5b:21:d2:13: 04:59:0a:98:7f:03:da:94:35:cd:20:ef:98:7a:81: 70:f1:39:49:be:b3:0a:77:27:b5:cd:c1:f1:e9:17: 73:02:1a:88:7a:4c:f6:6a:05:d3:d2:df:64:b2:81: fc:9d:fa:1f:f9:15:d5:3a:4d:59:70:3c:b7:a0:df: 42:69:2a:8d:14:15:5d:2a:ed:dd:01:68:b1:91:5b: ba:81:0d:6c:11:85:a1:f1:0a:91:b8:7f:3d:e3:05: 16:4d:fc:43:76:48:31:3b:bd:df:52:e5:3c:06:e3: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:EC:9D:6F:B3:E5:CB:C6:85:B3:AE:B6:F1:4E:97:5B:E8:73:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:93:c9:9d:1a:a5:07:48:f2:ab:26:fa:87:25:f8:b2:87:e0: c6:62:12:b0:5f:7a:1c:0f:2a:59:01:2e:32:f9:d0:85:ab:51: 7f:a7:2f:99:97:30:9e:67:f1:16:53:fe:ac:12:fc:60:b0:07: 01:fe:3b:4e:68:f3:f4:77:53:f7:ce:fb:a4:15:eb:c4:6b:8d: 4d:ef:29:25:23:e7:6c:83:30:1d:63:d9:91:b3:3a:fe:b6:5c: 34:8b:6b:c4:f6:5c:0a:b5:5f:79:b5:b6:63:67:d2:72:15:bb: db:30:29:f4:39:9e:0d:25:da:79:d0:00:27:9e:9a:3a:c9:ce: 24:0a:cb:d9:51:51:ac:04:b6:f6:1a:7a:d1:04:72:6f:32:e5: 34:97:cd:fd:cb:a5:80:cf:9a:a0:c8:a3:35:2e:39:d9:8b:a7: 0e:59:bf:56:cd:ca:4a:e1:74:5e:09:20:60:33:ac:0b:80:d3: 5f:85:03:99:53:00:4d:09:ce:9d:d8:72:12:66:72:88:26:8b: 79:52:a9:ee:01:b5:d3:ad:f4:5d:b7:ae:cb:7e:f9:bc:6e:38: f6:0f:a0:51:07:2e:d5:1f:43:ac:b2:04:ca:18:d9:43:98:26: 12:26:5a:b0:c2:b9:54:0d:1c:9c:73:4f:35:d5:12:67:dc:d2: 4d:40:44:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEd1vDCp1UB6Q3huAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI1MDgyOTEyNTEyNloXDTI1MTEyNzEzNTEyNlowLzEtMCsGA1UEAxMk NWY2MzBhNmUtMGJkYi00YWI2LWI4NDUtMDE0ZWUwOGM0ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlXOIWWg9b/G3G6SBEDNnMq7DYtlIebV9Y6n AqF06nD3xnVeRH2J9TT2x0YM+fATD9R3Z5U+ssGZtcedHceVgyraiErTmIdpcnO2 AvHMFTzwAe5jGF1n54oEnuHZttGuq+U+F7vOK+UYjOHYm/DaZTKXgVKHH37pKXnl FBpN9beeeqAJ+r0L+Mn7kwN7Heo9Hlsh0hMEWQqYfwPalDXNIO+YeoFw8TlJvrMK dye1zcHx6RdzAhqIekz2agXT0t9ksoH8nfof+RXVOk1ZcDy3oN9CaSqNFBVdKu3d AWixkVu6gQ1sEYWh8QqRuH894wUWTfxDdkgxO73fUuU8BuPP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF077J1vs+XLxoWzrrbxTpdb6HNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvYWZmNTIwNjEtMDhkZi0z ZjVkLTgyZjMtOWJkOTk5ZTNkNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaTyZ0apQdI8qsm+ocl+LKH4MZiErBfehwPKlkBLjL50IWrUX+nL5mX MJ5n8RZT/qwS/GCwBwH+O05o8/R3U/fO+6QV68RrjU3vKSUj52yDMB1j2ZGzOv62 XDSLa8T2XAq1X3m1tmNn0nIVu9swKfQ5ng0l2nnQACeemjrJziQKy9lRUawEtvYa etEEcm8y5TSXzf3LpYDPmqDIozUuOdmLpw5Zv1bNykrhdF4JIGAzrAuA01+FA5lT AE0Jzp3YchJmcogmi3lSqe4BtdOt9F23rst++bxuOPYPoFEHLtUfQ6yyBMoY2UOY JhImWrDCuVQNHJxzTzXVEmfc0k1AREQ= -----END CERTIFICATE-----Generated at Mon Sep 8 02:15:55 2025 by rpki-client