$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa File: d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa (raw, json) Hash identifier: oeUt7nD8jL1GswcyI9WRmfAtaZz/8gkjhk6p3Qi/fPQ= Subject key identifier: DC:BD:9E:47:42:56:39:A2:F9:88:E1:54:4B:FC:48:C0:92:39:ED:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6616F6B83E8A0019201B9C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa Signing time: Mon 18 Aug 2025 18:13:00 +0000 ROA not before: Mon 18 Aug 2025 18:13:00 +0000 ROA not after: Sun 16 Nov 2025 19:13:00 +0000 asID: 31898 IP address blocks: 140.238.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:61:6f:6b:83:e8:a0:01:92:01:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:13:00 2025 GMT Not After : Nov 16 19:13:00 2025 GMT Subject: CN=179cc088-5d91-4244-8cff-cc9a39adcb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:85:1a:8e:cb:61:70:7b:48:0a:78:52:bb: f6:88:4a:51:bb:d0:db:71:2a:04:27:8f:08:d3:c9: 9a:24:bc:12:38:1e:1f:d7:fe:ab:f7:f4:09:12:59: bf:0a:3c:22:b8:91:4f:e7:46:40:0c:8d:46:9a:29: 7d:dc:b3:db:25:20:11:d5:dd:00:f5:e7:eb:4f:75: d1:9a:83:35:8a:0a:26:4b:06:16:21:cd:69:43:89: eb:ae:28:77:5f:64:a6:de:20:3b:0e:c5:d8:28:c2: 65:e7:c8:ab:3b:01:10:81:d9:7c:22:35:17:fe:14: 66:62:22:2b:a9:5c:01:a3:67:9b:84:af:a0:2f:c2: 3f:0c:d4:c6:7f:b1:e7:ea:11:1b:0f:14:32:f0:2f: 6a:2c:08:21:e2:29:79:a6:2b:59:b4:a0:27:8d:02: 03:ba:d5:aa:3f:b2:8c:62:8d:65:a2:b2:78:4b:10: 30:97:14:2f:30:4c:de:e5:b3:13:5a:46:cb:cd:34: 7f:87:8b:b7:a1:1a:cf:12:96:50:cd:5f:dd:1c:5c: ce:03:ae:97:e3:20:39:ca:13:47:a6:eb:72:e4:dc: a3:89:aa:be:15:b1:6e:c1:b5:13:2d:14:89:c4:5d: 93:f1:96:1e:b7:5e:6f:8e:28:b7:d0:89:46:48:d0: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:9E:47:42:56:39:A2:F9:88:E1:54:4B:FC:48:C0:92:39:ED:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3e:97:f1:5d:92:da:f1:59:ef:d7:c6:f9:29:86:25:ce:fb: 4a:e9:13:81:3c:ac:3e:07:a0:45:7b:45:ee:0d:63:a3:56:89: 12:8f:0d:c1:6a:83:4b:37:25:02:67:9e:f7:8a:c4:09:9b:65: 3e:e5:7e:c0:55:0a:93:fc:04:73:06:e5:af:4b:dd:12:11:a2: 8c:f9:1a:e1:c5:2f:94:de:31:36:bd:c7:df:58:a0:05:09:93: 19:e0:74:ec:a7:57:28:7a:d8:c6:35:34:aa:b1:88:44:4d:17: 79:4c:f1:96:e8:81:9a:4f:29:a7:b9:42:72:d3:02:57:3d:14: 03:9c:b0:ac:98:c9:13:b2:99:9d:68:bd:2c:c1:e6:fa:2a:ff: ff:f1:a1:b5:a1:c6:5b:c6:48:5d:fb:cf:b8:c4:9e:32:cd:ea: e4:54:8b:78:30:11:ef:d4:48:fd:23:c3:eb:08:f7:91:62:70: da:4d:0f:69:e8:a2:8b:b1:43:99:58:a9:c0:2f:35:0f:fc:e4: e3:1c:8e:a2:b6:94:65:27:0a:82:36:5a:fe:ae:7a:92:ff:f7: ba:4f:50:48:ff:7c:e7:22:ae:04:e0:cd:40:5a:0e:1a:64:40: d8:f2:3b:6f:5d:28:d3:de:e3:03:05:a4:4d:8d:24:ac:a9:5a: 4b:6d:76:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmYW9rg+igAZIBucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTMwMFoXDTI1MTExNjE5MTMwMFowLzEtMCsGA1UEAxMk MTc5Y2MwODgtNWQ5MS00MjQ0LThjZmYtY2M5YTM5YWRjYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn62FGo7LYXB7SAp4Urv2iEpRu9DbcSoEJ48I 08maJLwSOB4f1/6r9/QJElm/CjwiuJFP50ZADI1Gmil93LPbJSAR1d0A9efrT3XR moM1igomSwYWIc1pQ4nrrih3X2Sm3iA7DsXYKMJl58irOwEQgdl8IjUX/hRmYiIr qVwBo2ebhK+gL8I/DNTGf7Hn6hEbDxQy8C9qLAgh4il5pitZtKAnjQIDutWqP7KM Yo1lorJ4SxAwlxQvMEze5bMTWkbLzTR/h4u3oRrPEpZQzV/dHFzOA66X4yA5yhNH puty5Nyjiaq+FbFuwbUTLRSJxF2T8ZYet15vjii30IlGSNBjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNy9nkdCVjmi+YjhVEv8SMCSOe3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhZDM5YTctMTJjYS0z NjkyLTk4ZTYtOGU2ZmQyNzdhYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY+l/FdktrxWe/XxvkphiXO+0rpE4E8rD4HoEV7Re4NY6NWiRKPDcFq g0s3JQJnnveKxAmbZT7lfsBVCpP8BHMG5a9L3RIRooz5GuHFL5TeMTa9x99YoAUJ kxngdOynVyh62MY1NKqxiERNF3lM8ZbogZpPKae5QnLTAlc9FAOcsKyYyROymZ1o vSzB5voq///xobWhxlvGSF37z7jEnjLN6uRUi3gwEe/USP0jw+sI95FicNpND2no oouxQ5lYqcAvNQ/85OMcjqK2lGUnCoI2Wv6uepL/97pPUEj/fOcirgTgzUBaDhpk QNjyO29dKNPe4wMFpE2NJKypWkttdsg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:20 2025 by rpki-client