$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa File: 3d12fc45-534a-3178-b3f6-07feab5954d1.roa (raw, json) Hash identifier: lvTWm1uE00BIzUlIWfsP3xVXgQqPWdnG6q74E7eLt/w= Subject key identifier: 7A:E8:32:21:47:82:EE:87:C4:28:35:B4:DE:E0:0C:B2:5B:AB:21:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C76C6E18CC857427A15E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa Signing time: Tue 19 Aug 2025 17:41:28 +0000 ROA not before: Tue 19 Aug 2025 17:41:28 +0000 ROA not after: Mon 17 Nov 2025 18:41:28 +0000 asID: 31898 IP address blocks: 140.204.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:76:c6:e1:8c:c8:57:42:7a:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:28 2025 GMT Not After : Nov 17 18:41:28 2025 GMT Subject: CN=6befabeb-2695-4501-a2d6-dc8b67c008f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:fc:bf:f7:7b:18:92:72:00:ec:16:24:4d: 86:27:5a:b3:d4:0e:9b:30:00:a4:c1:2c:f6:62:54: f4:2e:35:b5:17:9a:c8:ca:2d:4c:18:5e:25:b5:0e: 7a:f8:a1:e3:c4:10:2d:5a:6a:08:d4:4f:89:7e:cb: 74:1a:fa:d3:89:92:57:12:fb:85:76:5d:36:b3:6b: 69:7d:99:ab:85:71:55:79:1d:94:e4:22:9c:9a:ce: 6e:99:d0:42:f6:b9:d3:31:82:2b:09:74:cd:01:22: 02:a6:3b:95:fc:ee:a2:f1:aa:fc:f6:ed:07:6e:1c: 1a:f5:e1:04:a0:35:0f:89:b9:ec:55:9e:ac:c3:b2: b7:da:b5:14:b7:88:f6:83:7c:df:ea:22:6f:c9:f9: 8e:0a:21:0e:6f:39:b5:87:8c:43:7d:0d:b0:fd:14: b6:16:c5:47:81:cc:c8:f4:ee:47:a5:eb:50:59:ab: 75:eb:80:d9:e1:a6:10:dc:73:72:19:ae:7b:47:b8: e6:ff:cd:b6:d5:a3:f1:98:e2:e0:01:8e:77:3a:e2: 69:dc:0e:da:79:ea:dc:6a:57:66:eb:f5:9d:a9:d0: 40:76:4e:dc:28:ba:ca:d5:67:b8:ed:a6:0c:a4:c0: a1:73:5f:1b:b9:27:19:d9:8f:34:da:87:b2:ba:04: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E8:32:21:47:82:EE:87:C4:28:35:B4:DE:E0:0C:B2:5B:AB:21:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:60:ca:7b:10:5d:2a:6a:a8:da:62:29:04:ca:2d:02:ba:c1: ed:0d:7f:ee:81:38:1e:a2:84:cb:5b:46:78:97:80:ae:a4:7a: 09:6e:a9:73:33:7d:f2:27:26:86:ab:3e:48:9b:49:4a:9b:f7: 70:5b:df:2d:fd:6f:97:66:d9:44:9f:8e:c7:e5:f6:85:cd:02: 5f:50:a7:ef:5c:fa:bc:56:78:c2:70:82:52:7d:cf:f5:2b:5b: 5a:98:f5:cb:bb:16:4e:5e:dc:68:97:5f:7c:36:ea:f3:1b:27: ab:18:d1:62:c6:9d:a0:d8:f1:df:9f:70:b2:0b:a9:33:ca:b8: 90:8e:f6:91:af:8c:7a:5c:01:e4:50:b4:13:34:f5:0a:fe:f2: 92:c7:c4:b9:93:4d:a6:df:a9:f1:ed:31:99:83:9e:be:5a:c0: 2c:65:08:52:46:bf:5d:2b:ce:71:50:94:9e:a3:1c:c8:63:b2: fd:13:77:76:25:eb:e1:08:73:2f:c7:34:73:a6:b3:32:d7:4e: d6:0b:9b:1e:80:68:96:52:80:57:22:7d:17:49:4a:1b:64:fa: 82:c9:e0:db:f8:3e:36:0d:1c:88:dd:2d:65:c7:28:33:48:b9: 27:43:c2:6f:36:6c:f4:73:67:ac:80:ae:ee:75:cd:82:da:ab: ee:4f:5b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHHbG4YzIV0J6FeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDEyOFoXDTI1MTExNzE4NDEyOFowLzEtMCsGA1UEAxMk NmJlZmFiZWItMjY5NS00NTAxLWEyZDYtZGM4YjY3YzAwOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvz8v/d7GJJyAOwWJE2GJ1qz1A6bMACkwSz2 YlT0LjW1F5rIyi1MGF4ltQ56+KHjxBAtWmoI1E+Jfst0GvrTiZJXEvuFdl02s2tp fZmrhXFVeR2U5CKcms5umdBC9rnTMYIrCXTNASICpjuV/O6i8ar89u0Hbhwa9eEE oDUPibnsVZ6sw7K32rUUt4j2g3zf6iJvyfmOCiEObzm1h4xDfQ2w/RS2FsVHgczI 9O5HpetQWat164DZ4aYQ3HNyGa57R7jm/8221aPxmOLgAY53OuJp3A7aeercaldm 6/WdqdBAdk7cKLrK1We47aYMpMChc18buScZ2Y802oeyugT2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHroMiFHgu6HxCg1tN7gDLJbqyGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2QxMmZjNDUtNTM0YS0z MTc4LWIzZjYtMDdmZWFiNTk1NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtgynsQXSpqqNpiKQTKLQK6we0Nf+6BOB6ihMtbRniXgK6kegluqXMz ffInJoarPkibSUqb93Bb3y39b5dm2USfjsfl9oXNAl9Qp+9c+rxWeMJwglJ9z/Ur W1qY9cu7Fk5e3GiXX3w26vMbJ6sY0WLGnaDY8d+fcLILqTPKuJCO9pGvjHpcAeRQ tBM09Qr+8pLHxLmTTabfqfHtMZmDnr5awCxlCFJGv10rznFQlJ6jHMhjsv0Td3Yl 6+EIcy/HNHOmszLXTtYLmx6AaJZSgFcifRdJShtk+oLJ4Nv4PjYNHIjdLWXHKDNI uSdDwm82bPRzZ6yAru51zYLaq+5PWyI= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:18 2025 by rpki-client