$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9703099e-450c-32a4-9b86-68fc23538082.roa File: 9703099e-450c-32a4-9b86-68fc23538082.roa (raw, json) Hash identifier: 5ecPTXyf3CKg4ADlZ5wXWhJ3nG1gTg9PGk+St0YTnf4= Subject key identifier: 1A:0A:79:FA:9F:C0:2D:67:EC:80:64:19:E6:AA:01:D3:19:21:1A:FA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B7602F35002BC79A8E910 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9703099e-450c-32a4-9b86-68fc23538082.roa Signing time: Tue 19 Aug 2025 17:39:26 +0000 ROA not before: Tue 19 Aug 2025 17:39:26 +0000 ROA not after: Mon 17 Nov 2025 18:39:26 +0000 asID: 31898 IP address blocks: 140.204.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:76:02:f3:50:02:bc:79:a8:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:26 2025 GMT Not After : Nov 17 18:39:26 2025 GMT Subject: CN=adf19d2a-7fc0-4567-90ab-9d9b54e2221b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:42:e8:22:7a:31:39:15:51:3e:24:c7:4a: 0a:26:de:e0:84:27:39:4a:09:93:54:92:78:de:4e: 67:f4:ad:74:fa:35:a6:0d:de:07:85:fd:4a:80:5e: 32:e5:7e:29:0c:13:75:0f:b1:6a:15:c3:fb:db:9c: da:3b:33:67:6e:08:07:d4:88:d4:71:f1:9a:62:c8: 2e:f2:e1:73:0c:19:ef:ca:4b:41:d3:11:5f:dc:cf: 57:01:29:ee:7f:80:c2:71:b0:45:17:41:3d:6c:61: 40:d1:12:65:0b:49:c6:9c:08:f7:1d:f2:f1:91:a4: e7:7c:e0:f0:b8:6c:19:02:b8:fd:5f:58:e2:21:c1: 2c:7d:63:36:2f:dd:48:aa:db:21:4b:d5:9a:e5:df: 48:f5:04:7d:41:03:ee:23:74:70:f6:84:b4:b6:fe: fd:6f:94:44:0d:7f:59:16:25:43:fd:c0:0f:16:f9: af:b4:4a:10:60:d8:0b:97:04:b5:f8:18:74:4b:cf: 17:77:39:04:2f:98:1b:c6:b3:7c:c2:54:f0:ff:1a: be:8e:2a:ea:de:f5:09:0c:76:1a:97:39:56:14:ef: 2d:b4:5d:ee:db:e9:55:ae:9c:c2:67:08:6b:64:06: 16:fd:03:30:2d:c2:2d:fa:3a:ab:a4:3f:6d:6c:40: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:79:FA:9F:C0:2D:67:EC:80:64:19:E6:AA:01:D3:19:21:1A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9703099e-450c-32a4-9b86-68fc23538082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:df:0a:b2:0f:52:97:b0:66:43:a9:4a:cc:af:ef:ba:6a:a1: b9:80:e7:f1:bf:c2:75:0f:17:e6:ae:dc:13:80:a0:e9:eb:e3: ec:57:bd:13:4a:27:2d:ad:de:18:bf:5e:8f:0d:da:7a:08:70: 09:19:dd:b0:0e:36:02:5f:65:eb:80:37:89:ec:85:92:b5:19: 5f:9e:14:74:00:c6:40:98:09:ef:49:84:2f:4d:f4:cd:2e:15: 19:9a:43:f1:60:0d:08:32:1f:cf:f9:f1:05:64:79:d1:de:c8: 8f:ea:71:06:94:e9:05:2c:b7:06:f1:81:2b:56:6c:f6:d8:a4: 83:84:3d:0d:c2:a5:16:e1:25:06:f1:60:f8:65:89:0a:3f:fb: 55:5f:81:46:61:70:38:74:37:6d:f1:d4:38:e8:9d:8f:2f:97: 03:09:bc:10:4d:a6:05:95:d7:7d:92:7c:66:2c:da:31:06:ea: e9:c7:c4:5d:10:db:ad:6e:c2:0a:0a:09:b4:cc:dd:00:6e:90: f1:00:4f:bb:4b:d0:b6:c5:ce:28:ee:b6:91:11:2a:8f:f5:d8: 65:58:80:ac:d2:29:d9:02:7c:f1:e1:fc:a8:c8:ae:07:94:00: c4:c8:1f:d6:8e:df:0a:f6:cc:e8:b9:bc:8a:cb:11:10:2a:e2: a6:be:8d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG3YC81ACvHmo6RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkyNloXDTI1MTExNzE4MzkyNlowLzEtMCsGA1UEAxMk YWRmMTlkMmEtN2ZjMC00NTY3LTkwYWItOWQ5YjU0ZTIyMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpJC6CJ6MTkVUT4kx0oKJt7ghCc5SgmTVJJ4 3k5n9K10+jWmDd4Hhf1KgF4y5X4pDBN1D7FqFcP725zaOzNnbggH1IjUcfGaYsgu 8uFzDBnvyktB0xFf3M9XASnuf4DCcbBFF0E9bGFA0RJlC0nGnAj3HfLxkaTnfODw uGwZArj9X1jiIcEsfWM2L91IqtshS9Wa5d9I9QR9QQPuI3Rw9oS0tv79b5REDX9Z FiVD/cAPFvmvtEoQYNgLlwS1+Bh0S88XdzkEL5gbxrN8wlTw/xq+jirq3vUJDHYa lzlWFO8ttF3u2+lVrpzCZwhrZAYW/QMwLcIt+jqrpD9tbEC1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoKefqfwC1n7IBkGeaqAdMZIRr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTcwMzA5OWUtNDUwYy0z MmE0LTliODYtNjhmYzIzNTM4MDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTfCrIPUpewZkOpSsyv77pqobmA5/G/wnUPF+au3BOAoOnr4+xXvRNK Jy2t3hi/Xo8N2noIcAkZ3bAONgJfZeuAN4nshZK1GV+eFHQAxkCYCe9JhC9N9M0u FRmaQ/FgDQgyH8/58QVkedHeyI/qcQaU6QUstwbxgStWbPbYpIOEPQ3CpRbhJQbx YPhliQo/+1VfgUZhcDh0N23x1DjonY8vlwMJvBBNpgWV132SfGYs2jEG6unHxF0Q 261uwgoKCbTM3QBukPEAT7tL0LbFzijutpERKo/12GVYgKzSKdkCfPHh/KjIrgeU AMTIH9aO3wr2zOi5vIrLERAq4qa+jbQ= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:19 2025 by rpki-client