$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa File: 30f13fa5-3c19-33b4-a5c2-10959685bacd.roa (raw, json) Hash identifier: TOifHKQSlXraAVt9zvn5RnQq4jwsYqLU0BLE68EzPGg= Subject key identifier: 81:40:19:5A:54:AF:70:84:A6:2B:44:D5:DB:B8:1E:28:ED:1E:29:D6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE4379658601B7D4FD754600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa Signing time: Fri 15 Aug 2025 20:26:10 +0000 ROA not before: Fri 15 Aug 2025 20:26:10 +0000 ROA not after: Thu 13 Nov 2025 21:26:10 +0000 asID: 31898 IP address blocks: 140.204.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:43:79:65:86:01:b7:d4:fd:75:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 20:26:10 2025 GMT Not After : Nov 13 21:26:10 2025 GMT Subject: CN=a2bfafc5-ae15-42d1-a878-f32c48433770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:07:67:db:0b:f9:1e:25:3b:ad:ff:f0:1b: db:60:f2:c1:b7:68:6e:a6:a7:02:2f:72:8b:16:a3: 80:11:7f:b0:61:cb:72:4d:63:b8:f3:da:08:0c:8c: 4f:86:a1:99:45:38:51:06:66:98:23:e2:f2:b7:e4: 7b:33:a6:e6:bf:e6:df:b7:1e:23:8f:fd:c0:d4:e4: 2d:bd:db:c2:6a:39:bf:a0:97:e0:88:43:f0:82:04: 50:0f:1d:7d:51:e9:55:77:a2:4d:91:1f:14:d3:0a: 99:31:8e:5f:70:26:c1:60:4e:35:7e:ce:77:d3:51: 62:a0:21:48:a1:39:7d:de:34:c6:12:77:66:c4:6a: 7b:a3:78:97:04:cf:3d:b0:79:9c:84:c1:72:a1:1b: a7:68:50:75:23:56:b1:b7:bf:d6:dd:30:ae:87:e1: a1:5e:70:5c:79:53:f7:a0:9e:95:5f:01:ac:a5:72: c6:1f:a2:54:1e:3d:a6:12:ce:7e:d3:42:db:64:2c: 16:6f:4b:12:ba:47:be:14:6a:c8:f7:41:6e:e2:04: 6d:07:e9:59:44:7b:b2:b4:33:fb:54:7c:65:7b:0e: a0:50:88:e2:44:a2:c9:24:d1:56:c0:1b:3b:5b:55: 32:51:29:de:5e:1b:fe:1e:4b:30:8b:16:79:f1:0f: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:19:5A:54:AF:70:84:A6:2B:44:D5:DB:B8:1E:28:ED:1E:29:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:83:7f:b9:71:f7:ad:9f:1e:37:f3:94:ac:e8:1f:62:67:f2: 2f:57:af:5a:8f:60:30:14:81:a5:17:c9:be:64:8c:59:af:a3: 25:36:ed:86:9c:4f:a5:64:a4:0e:9c:94:8e:19:f3:3f:39:01: f6:7a:b8:6c:21:eb:bc:a7:b9:3f:78:58:e6:66:8d:d9:b0:4e: b3:d3:d3:a7:19:c4:99:57:f6:e5:6a:6d:db:f3:16:74:89:dc: d9:80:b2:21:b2:50:fe:83:72:66:fa:c8:6c:38:3b:6b:57:c2: b6:3f:81:16:43:f7:03:ee:c0:07:bc:f1:ff:c7:fe:92:d4:b5: 53:c5:dc:94:7a:52:37:f9:d7:a6:f0:6a:0e:3a:6a:a0:2d:dc: 17:b1:f4:6a:b8:48:ea:35:62:fb:5e:4a:e3:e0:81:37:bd:51: 69:fe:ab:10:b9:3f:a7:82:82:58:9e:63:b9:1d:b3:90:aa:a2: ff:0b:4d:8e:07:7d:bb:bc:7b:90:11:9e:b6:94:02:f9:14:3f: d9:22:5c:7c:64:a3:97:d8:f3:8a:ad:bc:41:b7:f9:c6:d6:eb: eb:7d:de:23:57:a4:40:78:a0:ef:b7:5f:c6:a7:7b:48:e0:26: 72:63:19:bb:f2:68:c8:f1:4e:20:03:06:97:b3:22:35:63:8c: 1d:33:95:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreQ3llhgG31P11RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIwMjYxMFoXDTI1MTExMzIxMjYxMFowLzEtMCsGA1UEAxMk YTJiZmFmYzUtYWUxNS00MmQxLWE4NzgtZjMyYzQ4NDMzNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtooHZ9sL+R4lO63/8BvbYPLBt2hupqcCL3KL FqOAEX+wYctyTWO489oIDIxPhqGZRThRBmaYI+Lyt+R7M6bmv+bftx4jj/3A1OQt vdvCajm/oJfgiEPwggRQDx19UelVd6JNkR8U0wqZMY5fcCbBYE41fs5301FioCFI oTl93jTGEndmxGp7o3iXBM89sHmchMFyoRunaFB1I1axt7/W3TCuh+GhXnBceVP3 oJ6VXwGspXLGH6JUHj2mEs5+00LbZCwWb0sSuke+FGrI90Fu4gRtB+lZRHuytDP7 VHxlew6gUIjiRKLJJNFWwBs7W1UyUSneXhv+HkswixZ58Q9D/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFAGVpUr3CEpitE1du4HijtHinWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzBmMTNmYTUtM2MxOS0z M2I0LWE1YzItMTA5NTk2ODViYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKODf7lx962fHjfzlKzoH2Jn8i9Xr1qPYDAUgaUXyb5kjFmvoyU27Yac T6VkpA6clI4Z8z85AfZ6uGwh67ynuT94WOZmjdmwTrPT06cZxJlX9uVqbdvzFnSJ 3NmAsiGyUP6Dcmb6yGw4O2tXwrY/gRZD9wPuwAe88f/H/pLUtVPF3JR6Ujf516bw ag46aqAt3Bex9Gq4SOo1YvteSuPggTe9UWn+qxC5P6eCglieY7kds5Cqov8LTY4H fbu8e5ARnraUAvkUP9kiXHxko5fY84qtvEG3+cbW6+t93iNXpEB4oO+3X8ane0jg JnJjGbvyaMjxTiADBpezIjVjjB0zlWI= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:14 2025 by rpki-client