$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36f6c697-f33e-364e-a8f6-d737c4370c23.roa File: 36f6c697-f33e-364e-a8f6-d737c4370c23.roa (raw, json) Hash identifier: sOmH1n3rg4dk+AxFel5NO7iVsjfmRrs6rexN7gvU6Ds= Subject key identifier: C6:C5:62:4E:45:98:51:9B:12:A5:EE:16:A0:5E:14:6F:B4:B9:5A:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD6105D0AEDAD9451216FDE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36f6c697-f33e-364e-a8f6-d737c4370c23.roa Signing time: Sat 09 Aug 2025 19:16:58 +0000 ROA not before: Sat 09 Aug 2025 19:16:58 +0000 ROA not after: Fri 07 Nov 2025 20:16:58 +0000 asID: 31898 IP address blocks: 140.238.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:05:d0:ae:da:d9:45:12:16:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:16:58 2025 GMT Not After : Nov 7 20:16:58 2025 GMT Subject: CN=8421c2e6-49ef-47e9-a096-76d1686e2fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:09:3c:93:67:0d:b4:a8:8f:05:d0:45:90: 65:63:e0:bb:71:1f:ad:31:01:36:8b:39:7b:f9:60: 32:02:17:5b:1d:54:c9:7e:07:aa:ba:dd:9e:31:ec: da:f7:f4:21:aa:18:7c:47:b4:bb:09:d5:01:e2:63: 4c:57:72:a9:a2:97:82:26:1b:7e:84:17:59:c0:88: 35:09:37:6d:75:ad:69:90:c2:7b:0a:24:2a:74:c4: 5d:12:cb:5e:2e:f5:64:eb:f6:7d:36:ea:e2:ce:0e: 40:88:0b:85:60:69:db:6c:5e:b2:94:4c:e7:32:53: 6e:c9:ef:fb:f7:bd:fa:e6:54:c1:bb:d4:5b:f9:41: 49:4e:5c:15:43:46:04:0c:93:01:0b:12:2f:0d:0f: 23:b4:86:fd:bc:ef:c2:54:8a:94:4a:63:8f:cc:c7: 91:b6:7d:4d:5b:07:5f:b9:17:1e:59:32:ab:d3:7d: 26:7e:a2:68:e6:4e:56:d9:97:4e:01:59:5c:a1:f4: e7:1a:c0:f3:aa:1e:58:3a:7a:32:1b:a4:93:63:9b: 73:3e:72:2b:3e:c4:94:ec:6d:a3:32:2b:17:af:d9: 87:fa:14:68:4d:c0:c4:59:9a:42:a7:3a:9e:f5:6f: 34:ba:5d:8a:14:e4:20:e0:f9:33:0d:13:58:1f:ac: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:62:4E:45:98:51:9B:12:A5:EE:16:A0:5E:14:6F:B4:B9:5A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36f6c697-f33e-364e-a8f6-d737c4370c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:06:70:05:45:58:05:17:ff:06:b7:8e:97:b3:84:57:86:dd: ce:11:8d:a6:73:75:d6:71:5b:de:24:06:fa:c0:0b:af:b8:d3: 53:96:fe:77:44:c9:45:4d:c1:10:8e:c0:5c:f8:f9:84:f5:40: d1:b8:49:11:97:83:2e:2c:c0:16:00:d7:0f:da:47:c5:da:93: 20:17:4c:ab:43:0d:40:9b:27:bb:fa:50:97:4a:96:17:5f:1d: 05:26:b1:ac:4a:2b:df:51:6d:92:5e:3b:6b:55:32:2c:52:cb: 43:18:ce:44:34:a8:50:91:d3:ab:db:9e:70:79:ba:90:47:3a: 03:cf:14:80:22:eb:9c:d4:a3:13:11:ed:31:4d:e5:20:00:6f: 34:33:67:50:7b:5c:f9:fe:f6:54:ad:ab:4e:ef:3e:fc:81:6a: 77:84:48:a8:ce:52:f9:46:94:dc:34:74:fe:55:7b:da:d5:c6: ad:03:3f:2b:5c:fa:a1:24:2a:1b:22:f0:5f:33:19:26:ee:b5: de:27:1d:d8:cc:f3:65:0a:20:4b:b3:9e:78:4b:5d:61:7a:a7: 2d:70:d0:86:69:a9:71:99:77:b9:ac:38:ba:65:8f:bb:9b:6c: 69:b4:4d:ea:e4:25:fd:2c:10:9f:d4:f2:50:e1:7c:5a:83:09: b7:42:f2:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYQXQrtrZRRIW/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTY1OFoXDTI1MTEwNzIwMTY1OFowLzEtMCsGA1UEAxMk ODQyMWMyZTYtNDllZi00N2U5LWEwOTYtNzZkMTY4NmUyZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEJPJNnDbSojwXQRZBlY+C7cR+tMQE2izl7 +WAyAhdbHVTJfgequt2eMeza9/Qhqhh8R7S7CdUB4mNMV3KpopeCJht+hBdZwIg1 CTdtda1pkMJ7CiQqdMRdEsteLvVk6/Z9Nurizg5AiAuFYGnbbF6ylEznMlNuye/7 97365lTBu9Rb+UFJTlwVQ0YEDJMBCxIvDQ8jtIb9vO/CVIqUSmOPzMeRtn1NWwdf uRceWTKr030mfqJo5k5W2ZdOAVlcofTnGsDzqh5YOnoyG6STY5tzPnIrPsSU7G2j MisXr9mH+hRoTcDEWZpCpzqe9W80ul2KFOQg4PkzDRNYH6x3EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbFYk5FmFGbEqXuFqBeFG+0uVoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzZmNmM2OTctZjMzZS0z NjRlLWE4ZjYtZDczN2M0MzcwYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsGcAVFWAUX/wa3jpezhFeG3c4RjaZzddZxW94kBvrAC6+401OW/ndE yUVNwRCOwFz4+YT1QNG4SRGXgy4swBYA1w/aR8XakyAXTKtDDUCbJ7v6UJdKlhdf HQUmsaxKK99RbZJeO2tVMixSy0MYzkQ0qFCR06vbnnB5upBHOgPPFIAi65zUoxMR 7TFN5SAAbzQzZ1B7XPn+9lStq07vPvyBaneESKjOUvlGlNw0dP5Ve9rVxq0DPytc +qEkKhsi8F8zGSbutd4nHdjM82UKIEuznnhLXWF6py1w0IZpqXGZd7msOLplj7ub bGm0TerkJf0sEJ/U8lDhfFqDCbdC8rw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:21 2025 by rpki-client