$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa File: bfac7b22-b2ac-302d-aec1-af28620955f3.roa (raw, json) Hash identifier: g10AVFDrf54ddHkh68PBgNTuSpynmjNy2g/07jc+NH4= Subject key identifier: EA:BA:CB:22:FD:33:04:6A:9C:72:51:6B:3F:A2:4E:4C:46:05:AA:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE8C5EE7DD8F834F4A47D2700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa Signing time: Tue 19 Aug 2025 14:47:06 +0000 ROA not before: Tue 19 Aug 2025 14:47:06 +0000 ROA not after: Mon 17 Nov 2025 15:47:06 +0000 asID: 31898 IP address blocks: 140.204.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:c5:ee:7d:d8:f8:34:f4:a4:7d:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 14:47:06 2025 GMT Not After : Nov 17 15:47:06 2025 GMT Subject: CN=c2d4523c-da6b-4002-a09b-148a604dc664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:e2:c7:2f:a1:c4:2d:8e:02:54:40:c9:a1: d2:ca:80:b6:7c:75:0d:c1:a1:6b:1f:ef:31:d5:f5: 4d:b5:24:26:84:bf:44:96:1f:cd:83:da:3c:fd:96: 15:6e:75:fc:2d:0b:23:7d:e0:6e:51:92:da:3b:8f: c9:a0:89:37:b9:94:1a:bd:66:e3:eb:d4:84:09:8d: 05:ca:2e:98:13:6c:f3:ce:b2:e4:af:42:6b:49:d8: 47:dd:2e:52:5f:a7:8a:9f:21:10:76:08:de:23:aa: 14:2f:c0:d8:5a:08:9f:2e:1e:14:40:d6:3d:c3:1c: 3b:25:40:03:74:9e:cb:cc:24:d7:ac:87:2a:e3:44: b1:02:1c:f1:58:51:59:ce:27:58:83:e7:d6:a7:e8: fa:77:08:71:fb:90:6a:59:0d:2e:91:dd:ff:73:0d: 04:d4:d8:e8:73:97:13:d3:68:36:0b:1d:44:c5:d2: 1d:eb:94:dd:c2:0b:ce:52:61:8e:4b:b0:b5:da:c1: 3f:ff:60:82:0b:93:5f:6b:cd:f6:6b:b6:ba:a6:82: f3:bb:3e:4b:86:d4:7d:03:37:57:57:3d:11:17:b3: d4:a2:61:9c:e8:7d:16:d6:a7:44:41:5c:3f:83:0c: f8:22:f5:be:7e:a3:f3:ee:8b:fa:ac:f7:4a:09:14: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BA:CB:22:FD:33:04:6A:9C:72:51:6B:3F:A2:4E:4C:46:05:AA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e5:b2:58:ed:6f:14:3c:8a:7c:f3:1b:00:61:ba:d0:cf:81: 51:ec:9d:1b:8f:50:b2:df:ca:5c:ea:8d:39:f7:42:2c:e1:8e: 69:29:81:ef:d0:25:e1:df:dd:81:cd:a0:a8:26:7d:6a:51:1f: 70:13:c1:ae:68:d9:6c:22:b4:6c:22:8a:5d:83:fd:11:38:eb: 87:14:75:f0:5f:25:b7:99:5b:09:68:cf:12:d2:c7:07:b3:14: 2a:ce:e6:b4:dd:65:08:a0:fc:a8:df:28:36:0c:13:e7:d7:e0: 38:b3:11:81:11:5e:58:13:b9:5f:38:f5:3b:ca:8e:46:6c:3d: 48:d3:6d:01:a6:46:d3:a5:47:42:16:6a:a5:f2:fd:e0:26:ed: 2e:d7:6a:d0:62:60:b7:ba:8a:e2:2e:d1:44:d3:71:f6:94:82: 43:08:ac:ef:c8:d0:d7:3b:62:04:44:8f:f7:60:6d:00:69:d1: fd:bf:50:fa:4f:b9:03:c0:b1:92:df:26:f6:87:37:7c:7c:37: fc:cb:91:69:07:0a:fe:f3:45:f6:8b:85:96:5b:90:f3:5b:bc: 56:37:93:81:74:ac:75:49:d4:e5:50:ce:29:7d:1b:6e:98:fe: c7:d8:9a:e3:f0:c0:13:2d:38:c3:bd:ba:f0:80:f8:94:83:82: 1d:fa:3c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEroxe592Pg09KR9JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE0NDcwNloXDTI1MTExNzE1NDcwNlowLzEtMCsGA1UEAxMk YzJkNDUyM2MtZGE2Yi00MDAyLWEwOWItMTQ4YTYwNGRjNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT3ixy+hxC2OAlRAyaHSyoC2fHUNwaFrH+8x 1fVNtSQmhL9Elh/Ng9o8/ZYVbnX8LQsjfeBuUZLaO4/JoIk3uZQavWbj69SECY0F yi6YE2zzzrLkr0JrSdhH3S5SX6eKnyEQdgjeI6oUL8DYWgifLh4UQNY9wxw7JUAD dJ7LzCTXrIcq40SxAhzxWFFZzidYg+fWp+j6dwhx+5BqWQ0ukd3/cw0E1Njoc5cT 02g2Cx1ExdId65TdwgvOUmGOS7C12sE//2CCC5Nfa832a7a6poLzuz5LhtR9AzdX Vz0RF7PUomGc6H0W1qdEQVw/gwz4IvW+fqPz7ov6rPdKCRSKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq6yyL9MwRqnHJRaz+iTkxGBaryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhYzdiMjItYjJhYy0z MDJkLWFlYzEtYWYyODYyMDk1NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/lsljtbxQ8inzzGwBhutDPgVHsnRuPULLfylzqjTn3Qizhjmkpge/Q JeHf3YHNoKgmfWpRH3ATwa5o2WwitGwiil2D/RE464cUdfBfJbeZWwlozxLSxwez FCrO5rTdZQig/KjfKDYME+fX4DizEYERXlgTuV849TvKjkZsPUjTbQGmRtOlR0IW aqXy/eAm7S7XatBiYLe6iuIu0UTTcfaUgkMIrO/I0Nc7YgREj/dgbQBp0f2/UPpP uQPAsZLfJvaHN3x8N/zLkWkHCv7zRfaLhZZbkPNbvFY3k4F0rHVJ1OVQzil9G26Y /sfYmuPwwBMtOMO9uvCA+JSDgh36PMk= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:18 2025 by rpki-client