$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa File: 12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa (raw, json) Hash identifier: +Jk88TWLW3q0vE9rxmXKKEjA7wkPG/vMi01TLkXPWao= Subject key identifier: 47:9E:AC:05:32:F8:79:F6:32:6F:84:27:A4:1F:D7:30:5F:0E:DC:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE977D066415FDD9726B335C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa Signing time: Tue 19 Aug 2025 20:45:31 +0000 ROA not before: Tue 19 Aug 2025 20:45:31 +0000 ROA not after: Mon 17 Nov 2025 21:45:31 +0000 asID: 31898 IP address blocks: 140.204.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:d0:66:41:5f:dd:97:26:b3:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:31 2025 GMT Not After : Nov 17 21:45:31 2025 GMT Subject: CN=95f86987-0c03-47bd-adc6-70b140635123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5a:d4:40:e6:9e:84:c7:46:0a:b1:e7:76:d6: f1:4c:c6:ff:92:fd:f1:4e:32:91:ff:81:c1:ce:db: 9e:2e:2e:6d:4c:d1:3e:b5:d8:37:ee:02:5d:fe:72: 83:5e:ca:e9:22:e4:8c:9f:e7:63:26:91:e4:db:62: f8:91:2e:42:b1:4e:9c:1d:91:9b:dd:61:e3:31:a1: 74:9e:76:43:3e:65:c7:bb:ae:ac:f5:30:e0:59:37: 50:41:13:2d:d4:4f:14:2c:51:08:fc:71:6d:d4:53: ec:5e:76:99:fd:7d:1d:f8:47:6f:07:db:07:dd:57: 06:42:9f:e4:b9:fc:56:61:09:0c:83:87:3e:9e:4a: 98:ec:46:c4:f7:e6:04:35:4c:87:f0:f8:df:a0:8e: f9:40:27:f5:c4:b4:02:07:ab:b7:e4:55:0d:4c:e2: 4b:13:ad:b8:65:31:78:43:ec:2f:4f:8c:4f:b3:03: 1a:a0:42:46:76:f1:0f:52:30:31:b2:56:19:bd:72: 04:39:f2:8c:44:d3:bd:a8:fb:cf:1e:b5:8a:94:de: 9f:3b:0c:0b:f8:ad:ff:2f:e3:81:0b:ef:ea:83:7f: 7c:fd:b3:74:2d:13:23:1b:af:77:a7:7f:c8:f5:b5: 08:8d:f4:5a:11:35:03:66:63:53:8e:80:06:bf:f4: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:AC:05:32:F8:79:F6:32:6F:84:27:A4:1F:D7:30:5F:0E:DC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:b3:c0:2e:9b:a3:25:a0:f2:63:71:16:46:07:af:4d:68: c3:5c:36:47:f4:1f:7d:56:b2:7d:6f:fb:3f:f2:47:f2:d6:35: f1:f0:f8:85:5a:ca:ba:0a:e1:c4:f7:d0:d4:d6:37:f0:17:6d: 7c:15:4d:8f:3d:06:0f:72:cf:6a:8d:a0:d2:11:cd:cc:b1:24: 88:68:5d:0c:d6:35:99:67:08:1a:36:30:7b:bc:47:cc:3a:19: 20:76:87:4c:b1:96:e2:32:eb:29:b4:76:60:90:c9:64:fc:e9: e4:20:cf:71:9a:53:4b:33:1e:4d:6e:8c:75:8b:69:25:9a:55: da:c4:c2:7e:8e:a1:46:dd:09:ef:03:cd:39:89:fa:47:03:6f: 55:00:7c:3c:c1:c0:da:e2:e6:08:d4:f0:0a:4d:33:b7:d7:7c: fe:6a:85:40:b4:7b:e6:c4:77:52:99:8c:c7:e1:92:66:91:1d: 6c:6c:2b:07:ba:cc:a2:a5:70:cf:02:dc:c1:15:13:b3:e8:e8: b4:c6:c6:3a:2b:cf:62:da:76:0f:6d:ea:fc:b5:9c:bc:e5:72: df:b7:b2:25:55:de:2e:37:b6:fb:2d:ba:5c:36:48:a4:11:23: f4:a2:49:7c:43:b1:04:44:71:ac:ff:7e:aa:1a:28:0b:54:4e: 7c:7d:a0:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd9BmQV/dlyazNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDUzMVoXDTI1MTExNzIxNDUzMVowLzEtMCsGA1UEAxMk OTVmODY5ODctMGMwMy00N2JkLWFkYzYtNzBiMTQwNjM1MTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FrUQOaehMdGCrHndtbxTMb/kv3xTjKR/4HB ztueLi5tTNE+tdg37gJd/nKDXsrpIuSMn+djJpHk22L4kS5CsU6cHZGb3WHjMaF0 nnZDPmXHu66s9TDgWTdQQRMt1E8ULFEI/HFt1FPsXnaZ/X0d+EdvB9sH3VcGQp/k ufxWYQkMg4c+nkqY7EbE9+YENUyH8PjfoI75QCf1xLQCB6u35FUNTOJLE624ZTF4 Q+wvT4xPswMaoEJGdvEPUjAxslYZvXIEOfKMRNO9qPvPHrWKlN6fOwwL+K3/L+OB C+/qg398/bN0LRMjG693p3/I9bUIjfRaETUDZmNTjoAGv/QYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeerAUy+Hn2Mm+EJ6Qf1zBfDtyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTJlMDgyY2QtYmYxMC0z YmNiLWI3ZDktZWRlOTkwYmY0YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZs8Aum6MloPJjcRZGB69NaMNcNkf0H31Wsn1v+z/yR/LWNfHw+IVa yroK4cT30NTWN/AXbXwVTY89Bg9yz2qNoNIRzcyxJIhoXQzWNZlnCBo2MHu8R8w6 GSB2h0yxluIy6ym0dmCQyWT86eQgz3GaU0szHk1ujHWLaSWaVdrEwn6OoUbdCe8D zTmJ+kcDb1UAfDzBwNri5gjU8ApNM7fXfP5qhUC0e+bEd1KZjMfhkmaRHWxsKwe6 zKKlcM8C3MEVE7Po6LTGxjorz2Ladg9t6vy1nLzlct+3siVV3i43tvstulw2SKQR I/SiSXxDsQREcaz/fqoaKAtUTnx9oEo= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:52 2025 by rpki-client