$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa File: 3e9187c0-23cd-379a-98c6-064fe0b32f16.roa (raw, json) Hash identifier: tZoCqG71Xc0cyNd2lJBUDX23gje+TrOKNw1GoH/f3Xg= Subject key identifier: FC:91:8D:9D:E7:F6:03:90:83:CC:22:CD:AB:1D:5B:DB:94:6A:90:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE596D191D52FF39A29DB780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa Signing time: Fri 15 Aug 2025 21:10:24 +0000 ROA not before: Fri 15 Aug 2025 21:10:24 +0000 ROA not after: Thu 13 Nov 2025 22:10:24 +0000 asID: 31898 IP address blocks: 140.204.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:6d:19:1d:52:ff:39:a2:9d:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:24 2025 GMT Not After : Nov 13 22:10:24 2025 GMT Subject: CN=abcc41f9-43bd-4911-8c58-5f3171300f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:25:b5:ae:6b:68:ee:49:21:4a:fa:4b:7d: b0:ee:d0:94:8f:2b:1a:95:18:d2:5a:37:3e:b5:21: 49:d7:9b:d4:73:dc:76:c1:b9:02:94:ce:d0:54:91: 07:b6:5a:de:22:14:65:56:d8:43:d6:65:69:68:d8: 6e:5b:9d:de:69:fe:3a:38:fb:ca:cd:8d:9d:d7:5a: a0:63:b0:4d:8f:c3:d2:1d:2f:df:80:f0:32:70:7a: 2d:90:56:22:85:1e:fb:09:f2:02:d6:f5:6c:cd:4c: 1b:8c:4f:e4:ce:5f:1a:1b:01:8d:2b:cb:be:9c:ac: 32:22:76:d1:f7:ba:60:ad:f3:47:c9:73:e4:e5:58: e0:7b:e4:a3:04:88:fe:83:d7:8a:d4:93:b8:9f:f0: a2:df:5e:15:fa:d0:25:f4:25:b2:46:4e:63:69:26: ae:a2:ed:06:b6:35:c3:ff:79:61:5c:e0:13:bc:20: 5e:b8:cb:96:ec:da:ea:b9:85:0d:02:1a:9c:18:54: a9:43:77:86:7c:1d:9f:7b:15:dc:44:6b:46:03:59: 91:13:3d:e3:67:aa:61:30:0b:ab:1c:e0:8b:67:43: 00:cf:dd:11:35:52:0e:75:4e:9c:af:a8:3d:7e:67: 10:ba:42:f1:b5:ed:77:d4:c9:8a:59:b2:a2:0c:64: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:91:8D:9D:E7:F6:03:90:83:CC:22:CD:AB:1D:5B:DB:94:6A:90:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f0:e9:7b:65:c7:fa:d8:26:50:d3:e7:b5:56:13:48:da:e9: 32:36:63:b7:57:f9:62:51:0c:38:b2:02:f0:b5:32:1e:14:a2: 05:db:d1:b2:a5:57:1e:2e:d8:1a:19:a9:34:9f:0a:8a:62:3d: b8:72:ef:73:b7:10:ea:11:9c:cb:34:07:9c:be:e4:f8:19:af: 41:de:ef:fc:d1:24:b8:c5:12:36:be:ca:0a:a8:fd:c8:bd:2c: 72:40:1b:6b:09:56:37:bd:13:3c:90:13:4b:18:b4:05:a8:7f: 35:9e:76:82:b8:d0:3e:9a:b2:24:fb:97:11:4c:ba:a8:de:40: ae:b4:c0:89:f1:13:83:c2:20:29:1b:e2:df:9a:9d:30:86:81: 1a:15:20:b8:4c:90:3c:e2:97:f2:1a:6d:16:dc:5e:ac:03:61: e7:d6:98:aa:29:6f:c4:82:c1:e2:98:3c:ba:28:e3:02:c6:3b: 49:a3:97:85:27:09:24:20:fc:4e:2f:77:81:f5:e1:2a:72:83: 3d:7e:fa:dd:50:5b:a6:3d:2b:6d:c4:9c:a2:ff:03:27:37:f2: 30:84:bd:86:3c:24:16:43:d3:4a:dd:b8:e3:3d:cd:0a:56:a2: e1:2c:cd:6f:47:b6:1d:e0:f3:1a:ab:64:44:0f:fe:6c:2f:56: d2:bc:bc:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWW0ZHVL/OaKdt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAyNFoXDTI1MTExMzIyMTAyNFowLzEtMCsGA1UEAxMk YWJjYzQxZjktNDNiZC00OTExLThjNTgtNWYzMTcxMzAwZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7slta5raO5JIUr6S32w7tCUjysalRjSWjc+ tSFJ15vUc9x2wbkClM7QVJEHtlreIhRlVthD1mVpaNhuW53eaf46OPvKzY2d11qg Y7BNj8PSHS/fgPAycHotkFYihR77CfIC1vVszUwbjE/kzl8aGwGNK8u+nKwyInbR 97pgrfNHyXPk5Vjge+SjBIj+g9eK1JO4n/Ci314V+tAl9CWyRk5jaSauou0GtjXD /3lhXOATvCBeuMuW7NrquYUNAhqcGFSpQ3eGfB2fexXcRGtGA1mREz3jZ6phMAur HOCLZ0MAz90RNVIOdU6cr6g9fmcQukLxte131MmKWbKiDGT0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyRjZ3n9gOQg8wizasdW9uUapB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U5MTg3YzAtMjNjZC0z NzlhLTk4YzYtMDY0ZmUwYjMyZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/w6Xtlx/rYJlDT57VWE0ja6TI2Y7dX+WJRDDiyAvC1Mh4UogXb0bKl Vx4u2BoZqTSfCopiPbhy73O3EOoRnMs0B5y+5PgZr0He7/zRJLjFEja+ygqo/ci9 LHJAG2sJVje9EzyQE0sYtAWofzWedoK40D6asiT7lxFMuqjeQK60wInxE4PCICkb 4t+anTCGgRoVILhMkDzil/IabRbcXqwDYefWmKopb8SCweKYPLoo4wLGO0mjl4Un CSQg/E4vd4H14Spygz1++t1QW6Y9K23EnKL/Ayc38jCEvYY8JBZD00rduOM9zQpW ouEszW9Hth3g8xqrZEQP/mwvVtK8vJc= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:11 2025 by rpki-client