$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa File: 0122ee3f-e947-3c1e-888d-9590ebad2788.roa (raw, json) Hash identifier: Ztyhx60sfjNXu/JhsgwRLlnBqubAfj2ukoey4btUm5Y= Subject key identifier: B3:3F:62:59:B1:DF:9B:8F:EC:67:A9:8D:D4:17:73:78:BE:0B:F4:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9771E5AF5B8611E409BCE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa Signing time: Tue 19 Aug 2025 20:44:07 +0000 ROA not before: Tue 19 Aug 2025 20:44:07 +0000 ROA not after: Mon 17 Nov 2025 21:44:07 +0000 asID: 31898 IP address blocks: 140.238.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:1e:5a:f5:b8:61:1e:40:9b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:07 2025 GMT Not After : Nov 17 21:44:07 2025 GMT Subject: CN=2dd2e1be-78ed-45fa-9e95-d09f4016d712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:85:6c:1b:e7:87:27:a2:14:b9:94:19:42: f8:68:c0:0e:7a:ee:e2:16:38:08:7a:d3:57:64:71: 20:60:ea:27:80:c8:f8:f6:89:af:86:d7:69:d6:50: b0:15:3d:cb:42:ee:eb:7d:40:83:97:99:58:61:07: ad:de:be:69:c6:ad:c2:56:54:ed:bf:de:7f:ab:a6: ce:4f:3b:a5:31:54:34:bb:3d:17:82:02:20:b8:3e: 69:15:6a:0e:7a:76:92:50:ea:db:ae:08:5c:5c:c0: e1:52:4f:ff:57:ea:1d:4c:4a:6c:77:23:5d:b3:a7: b1:37:94:be:e0:42:67:03:1d:a9:7b:58:10:b1:81: 05:32:cb:fe:4b:50:6f:4a:02:0e:73:d5:76:a9:1f: 33:6d:da:9d:e6:2b:59:0d:bf:b6:69:5b:10:dc:bb: cd:a5:e5:9b:59:2e:75:25:d4:85:c1:00:d7:59:7e: e0:fa:78:5d:5d:ad:eb:c4:67:d7:66:02:06:4f:19: 15:f3:84:83:3f:6c:0b:9b:26:c1:17:ed:64:01:86: c6:9c:45:2c:18:66:e6:be:ca:3d:bc:aa:66:8f:b8: 4a:d9:30:85:88:68:a9:22:54:51:dc:31:69:d2:30: 38:31:1c:2b:f3:a9:93:18:ff:65:71:f1:5d:37:8b: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3F:62:59:B1:DF:9B:8F:EC:67:A9:8D:D4:17:73:78:BE:0B:F4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3a:49:85:e3:56:cb:60:83:7d:2e:8f:82:23:ed:e8:62:65: a6:36:93:2e:04:cd:ba:77:91:43:25:1e:1e:41:f1:71:33:bc: fe:44:57:a0:44:05:bb:1a:90:eb:06:7e:9e:fb:ee:2f:e7:64: 04:0f:19:38:fd:bc:78:66:aa:84:d0:0d:82:ed:a5:a4:a3:84: 6c:ba:b6:43:94:35:3b:22:5d:66:90:80:d0:87:1c:19:0a:88: 50:1e:2a:18:02:cc:bf:46:4c:00:e1:be:43:ed:2d:ac:da:4f: a6:8f:cb:36:91:00:81:4b:2c:bd:03:47:bf:c5:a6:b1:85:4a: 43:d7:95:3b:a5:69:c3:6a:e6:3c:af:8c:06:85:9f:e3:8c:29: 8e:70:c4:e6:4d:7e:3c:e7:2f:ce:15:80:4f:63:59:7a:9b:8a: 83:24:3c:64:9a:26:a0:92:b1:ff:0d:b8:79:90:5e:34:25:e1: b3:ae:ef:66:77:5e:82:f1:1d:f6:20:4e:64:01:7f:83:40:a8: 8c:a8:4d:5a:f5:24:02:d3:81:55:4d:ec:a2:94:79:8b:9e:30: 9b:1d:a3:1c:bb:42:06:48:a5:73:1b:46:6a:72:c0:9f:b6:e6: 4f:1c:98:56:7d:aa:f2:f2:12:03:16:56:7e:2f:44:42:71:6a: 0b:fe:7b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdx5a9bhhHkCbzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQwN1oXDTI1MTExNzIxNDQwN1owLzEtMCsGA1UEAxMk MmRkMmUxYmUtNzhlZC00NWZhLTllOTUtZDA5ZjQwMTZkNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBiFbBvnhyeiFLmUGUL4aMAOeu7iFjgIetNX ZHEgYOongMj49omvhtdp1lCwFT3LQu7rfUCDl5lYYQet3r5pxq3CVlTtv95/q6bO TzulMVQ0uz0XggIguD5pFWoOenaSUOrbrghcXMDhUk//V+odTEpsdyNds6exN5S+ 4EJnAx2pe1gQsYEFMsv+S1BvSgIOc9V2qR8zbdqd5itZDb+2aVsQ3LvNpeWbWS51 JdSFwQDXWX7g+nhdXa3rxGfXZgIGTxkV84SDP2wLmybBF+1kAYbGnEUsGGbmvso9 vKpmj7hK2TCFiGipIlRR3DFp0jA4MRwr86mTGP9lcfFdN4uFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM/Ylmx35uP7GepjdQXc3i+C/QIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDEyMmVlM2YtZTk0Ny0z YzFlLTg4OGQtOTU5MGViYWQyNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM6SYXjVstgg30uj4Ij7ehiZaY2ky4Ezbp3kUMlHh5B8XEzvP5EV6BE BbsakOsGfp777i/nZAQPGTj9vHhmqoTQDYLtpaSjhGy6tkOUNTsiXWaQgNCHHBkK iFAeKhgCzL9GTADhvkPtLazaT6aPyzaRAIFLLL0DR7/FprGFSkPXlTulacNq5jyv jAaFn+OMKY5wxOZNfjznL84VgE9jWXqbioMkPGSaJqCSsf8NuHmQXjQl4bOu72Z3 XoLxHfYgTmQBf4NAqIyoTVr1JALTgVVN7KKUeYueMJsdoxy7QgZIpXMbRmpywJ+2 5k8cmFZ9qvLyEgMWVn4vREJxagv+e5Y= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:09 2025 by rpki-client