$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/208b2aa6-d20e-387e-bc7b-2e098a7f28c6.roa File: 208b2aa6-d20e-387e-bc7b-2e098a7f28c6.roa (raw, json) Hash identifier: JuAOLk5++wcLRLG9/aISu650Zy3fgN7NYk3BFityjA8= Subject key identifier: D5:85:11:70:28:42:C5:FD:67:35:B0:6A:C7:36:0A:8D:D8:DF:A5:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B789D30110A812E399608 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/208b2aa6-d20e-387e-bc7b-2e098a7f28c6.roa Signing time: Tue 19 Aug 2025 17:39:28 +0000 ROA not before: Tue 19 Aug 2025 17:39:28 +0000 ROA not after: Mon 17 Nov 2025 18:39:28 +0000 asID: 31898 IP address blocks: 140.204.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:78:9d:30:11:0a:81:2e:39:96:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:28 2025 GMT Not After : Nov 17 18:39:28 2025 GMT Subject: CN=02c82355-3f9d-498f-87f6-627d29ecb3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:d9:54:7d:7f:49:bb:9d:da:9e:a8:16:de: ca:86:0b:43:06:a8:7b:56:25:da:40:1c:18:19:29: ab:32:ca:81:a4:b3:ec:75:0d:09:18:e4:62:be:f9: 46:0d:7a:70:7e:d9:91:d1:fa:54:1f:74:36:02:47: 36:a5:25:5b:9d:87:4d:ad:4d:c3:a8:a0:28:e8:a9: d9:e2:77:8e:a6:e6:fd:e4:0e:5d:4f:e0:1d:c8:e3: 68:e3:1d:5e:58:b4:79:1f:09:6e:6a:cf:77:2e:6d: 3f:af:9a:4a:5a:4b:a1:1f:4c:f7:b4:71:73:4b:fe: 85:67:ed:66:3a:60:76:94:f7:b6:8c:78:72:d7:0b: 5e:80:e8:76:aa:8b:26:eb:82:6c:ca:bb:20:1a:e6: 6c:03:ab:87:2e:b5:55:ba:d6:05:93:fd:b6:08:ec: 6d:a0:a4:ea:ad:43:c6:93:d2:8d:92:c9:cd:9f:58: 2a:55:3f:fb:27:03:c5:c0:5d:fe:20:a7:4e:84:b2: 35:93:13:b9:bf:00:9a:14:47:45:9f:fa:0d:cf:27: 40:28:0b:4f:ba:e1:a4:c4:26:b8:f3:f8:e7:00:88: 58:92:c9:47:25:f7:23:f2:dc:60:0c:e6:5c:c1:dd: 04:9c:79:e6:01:9c:76:d8:54:16:f1:25:ae:f7:bc: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:11:70:28:42:C5:FD:67:35:B0:6A:C7:36:0A:8D:D8:DF:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/208b2aa6-d20e-387e-bc7b-2e098a7f28c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:33:72:83:38:dc:ac:e4:3d:0a:99:3a:c9:97:6f:07:1b:8f: b6:bd:e2:32:8f:bc:8f:9d:e3:d6:18:b6:67:d3:c0:90:68:65: f4:c0:64:9d:74:7d:9f:de:4a:92:ef:36:7c:ac:80:72:d1:62: f3:29:81:42:c5:e1:43:87:85:c1:e9:07:1d:29:57:7c:cd:af: ab:ea:ca:09:d1:f7:1d:cd:11:f9:fa:ec:f8:12:03:5c:40:f2: e7:c5:9c:67:a6:8f:8a:e4:28:20:d9:75:f4:bc:01:95:f5:0d: bc:55:47:ee:a9:9e:39:5a:dd:f8:b8:f7:57:81:b8:d7:c0:43: fa:75:6a:b5:f5:e8:f1:16:f8:bd:37:4a:0b:f7:a3:47:2c:51: d7:6f:34:d1:89:37:d7:39:68:57:39:dc:5c:35:ed:7b:83:3b: 63:3d:d3:10:44:03:c3:b2:03:a8:f9:15:cc:57:8e:ec:6a:3a: 3a:6c:a8:c8:cd:a3:41:23:b5:7e:ce:d6:1c:5c:f0:0b:e0:ea: a2:e2:e5:92:bb:b3:a1:02:4a:15:b8:d8:eb:62:8a:d8:de:0e: 99:cc:6a:c9:42:26:1f:88:eb:cb:90:c8:5d:67:d2:15:21:97: d3:fa:1a:98:d5:c5:22:2a:9b:ab:16:57:cf:73:dd:25:50:97: 1a:6f:de:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG3idMBEKgS45lggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkyOFoXDTI1MTExNzE4MzkyOFowLzEtMCsGA1UEAxMk MDJjODIzNTUtM2Y5ZC00OThmLTg3ZjYtNjI3ZDI5ZWNiM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U/ZVH1/Sbud2p6oFt7KhgtDBqh7ViXaQBwY GSmrMsqBpLPsdQ0JGORivvlGDXpwftmR0fpUH3Q2Akc2pSVbnYdNrU3DqKAo6KnZ 4neOpub95A5dT+AdyONo4x1eWLR5Hwluas93Lm0/r5pKWkuhH0z3tHFzS/6FZ+1m OmB2lPe2jHhy1wtegOh2qosm64JsyrsgGuZsA6uHLrVVutYFk/22COxtoKTqrUPG k9KNksnNn1gqVT/7JwPFwF3+IKdOhLI1kxO5vwCaFEdFn/oNzydAKAtPuuGkxCa4 8/jnAIhYkslHJfcj8txgDOZcwd0EnHnmAZx22FQW8SWu97xh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWFEXAoQsX9ZzWwasc2Co3Y36WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjA4YjJhYTYtZDIwZS0z ODdlLWJjN2ItMmUwOThhN2YyOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4zcoM43KzkPQqZOsmXbwcbj7a94jKPvI+d49YYtmfTwJBoZfTAZJ10 fZ/eSpLvNnysgHLRYvMpgULF4UOHhcHpBx0pV3zNr6vqygnR9x3NEfn67PgSA1xA 8ufFnGemj4rkKCDZdfS8AZX1DbxVR+6pnjla3fi491eBuNfAQ/p1arX16PEW+L03 Sgv3o0csUddvNNGJN9c5aFc53Fw17XuDO2M90xBEA8OyA6j5FcxXjuxqOjpsqMjN o0EjtX7O1hxc8Avg6qLi5ZK7s6ECShW42OtiitjeDpnMaslCJh+I68uQyF1n0hUh l9P6GpjVxSIqm6sWV89z3SVQlxpv3gM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:54 2025 by rpki-client