$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa File: 9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa (raw, json) Hash identifier: KGs50Z9CpkxsEks+3ZfwsQL3qsSPLMOrDUq+UvrTNgE= Subject key identifier: C0:48:4C:63:E7:88:72:85:29:13:F9:37:62:89:02:24:75:13:76:2F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6FD0F8AE759B79DBD65E0F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa Signing time: Mon 18 Aug 2025 23:26:34 +0000 ROA not before: Mon 18 Aug 2025 23:26:34 +0000 ROA not after: Mon 17 Nov 2025 00:26:34 +0000 asID: 31898 IP address blocks: 140.204.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:fd:0f:8a:e7:59:b7:9d:bd:65:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 23:26:34 2025 GMT Not After : Nov 17 00:26:34 2025 GMT Subject: CN=05d73066-8a77-4e5a-a35c-0e5cc880d5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:32:61:b0:b8:88:44:83:bf:73:7e:71:ff: 08:75:b7:44:7f:5f:59:05:1d:af:4a:2f:bd:06:f6: 44:76:f1:f8:2d:bc:ee:26:1e:6a:f0:b5:17:89:45: 42:96:b4:fa:e4:cf:7f:6a:13:c6:cf:ab:80:ea:44: e0:77:1a:2d:61:ea:d9:62:8c:fc:75:ba:2e:1b:f6: cc:c6:48:1b:25:06:11:50:4e:ea:26:7a:39:d5:90: ea:f6:b3:c9:17:67:5b:8b:22:0d:c9:ed:e4:2e:41: 28:81:f9:9d:61:78:86:1b:73:a9:50:c4:4d:e0:2a: 12:1d:3a:b0:3f:78:24:a4:82:2d:99:b6:e9:c5:0b: 8f:ae:80:05:b0:e3:a1:df:aa:cd:a6:49:34:f4:3f: 5c:5f:0b:49:2d:fb:28:fd:8a:ee:a8:e8:91:af:6c: 4c:bf:3a:bc:ea:81:58:9b:8a:86:e0:bf:60:9a:48: 1a:04:c3:18:6d:f7:82:94:13:3e:3e:a1:ec:3a:6f: df:db:69:c5:b4:e2:4e:d7:e6:9a:06:59:fe:dd:09: 2a:cf:df:1a:6f:8b:dc:04:32:4b:8f:c4:6b:7c:6e: 17:35:54:05:7b:c5:b2:a7:0a:a3:c1:4b:c0:44:10: 0e:e1:e2:3a:6e:32:35:b6:2d:29:20:54:86:6a:f1: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:48:4C:63:E7:88:72:85:29:13:F9:37:62:89:02:24:75:13:76:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e8:89:ba:71:5f:97:d5:37:1a:cc:ee:cb:8c:23:b4:af:c5: fd:6d:d8:03:ac:ff:56:7d:a6:16:4e:4b:6e:ab:d7:f2:e5:d1: 89:53:e3:e8:c1:fe:85:3c:f4:6e:58:0b:64:88:f7:eb:0e:f9: c0:8a:b2:b4:bd:86:f0:0a:19:ae:61:1b:51:ed:f2:01:93:b8: 3f:2f:86:f2:ab:07:d5:eb:70:9a:ee:9e:a2:4c:b3:9b:6c:ac: 01:e8:c4:b4:6a:1f:08:9f:c5:c6:20:68:9a:98:da:42:6c:30: 69:1f:94:22:9c:20:a9:98:74:b5:9f:fd:ea:8e:a3:13:05:55: dd:f4:c2:ed:c5:15:41:ae:0d:90:3d:75:c4:5c:13:58:4a:76: fa:51:27:38:45:50:87:cd:a8:db:8e:ae:7f:60:a7:b8:b3:a1: ee:b0:82:52:d4:15:b5:d1:23:41:35:b3:0b:8b:6d:e4:13:e3: 34:6b:27:fa:7d:51:c7:b9:47:89:75:3f:f3:7b:38:3f:00:11: ca:8f:28:c2:6c:ac:11:b4:36:01:d2:de:03:59:56:ce:da:b2: b2:31:e6:0f:b4:a5:e8:f9:90:20:20:b1:71:b3:4e:46:34:79: 42:be:7b:c7:5d:25:76:be:e3:bd:64:d5:bd:ae:15:83:27:6b: a7:f2:56:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErm/Q+K51m3nb1l4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIzMjYzNFoXDTI1MTExNzAwMjYzNFowLzEtMCsGA1UEAxMk MDVkNzMwNjYtOGE3Ny00ZTVhLWEzNWMtMGU1Y2M4ODBkNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMyYbC4iESDv3N+cf8IdbdEf19ZBR2vSi+9 BvZEdvH4LbzuJh5q8LUXiUVClrT65M9/ahPGz6uA6kTgdxotYerZYoz8dbouG/bM xkgbJQYRUE7qJno51ZDq9rPJF2dbiyINye3kLkEogfmdYXiGG3OpUMRN4CoSHTqw P3gkpIItmbbpxQuProAFsOOh36rNpkk09D9cXwtJLfso/YruqOiRr2xMvzq86oFY m4qG4L9gmkgaBMMYbfeClBM+PqHsOm/f22nFtOJO1+aaBln+3Qkqz98ab4vcBDJL j8RrfG4XNVQFe8WypwqjwUvARBAO4eI6bjI1ti0pIFSGavFjvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBITGPniHKFKRP5N2KJAiR1E3YvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWExODY3ZmQtODQxOS0z ODQwLWJjM2EtYzNlMWM4YTMzZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7oibpxX5fVNxrM7suMI7Svxf1t2AOs/1Z9phZOS26r1/Ll0YlT4+jB /oU89G5YC2SI9+sO+cCKsrS9hvAKGa5hG1Ht8gGTuD8vhvKrB9XrcJrunqJMs5ts rAHoxLRqHwifxcYgaJqY2kJsMGkflCKcIKmYdLWf/eqOoxMFVd30wu3FFUGuDZA9 dcRcE1hKdvpRJzhFUIfNqNuOrn9gp7izoe6wglLUFbXRI0E1swuLbeQT4zRrJ/p9 Uce5R4l1P/N7OD8AEcqPKMJsrBG0NgHS3gNZVs7asrIx5g+0pej5kCAgsXGzTkY0 eUK+e8ddJXa+471k1b2uFYMna6fyVrM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:18 2025 by rpki-client