$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa File: d439a7f2-8439-3bbb-8cf3-52a351b70849.roa (raw, json) Hash identifier: CniZ8ZHhtmJlcFhSOH4EQtIOcDRSopekuPD8u6xNA5I= Subject key identifier: 07:59:1E:E6:87:FE:1E:FC:DA:E1:B6:30:86:CF:DE:46:40:30:78:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE97715EDEA0FECEF9BC38FC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa Signing time: Tue 19 Aug 2025 20:44:03 +0000 ROA not before: Tue 19 Aug 2025 20:44:03 +0000 ROA not after: Mon 17 Nov 2025 21:44:03 +0000 asID: 31898 IP address blocks: 140.204.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:15:ed:ea:0f:ec:ef:9b:c3:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:03 2025 GMT Not After : Nov 17 21:44:03 2025 GMT Subject: CN=848b1aa2-2988-43e0-842c-ecbd2ae62fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:35:d7:57:5b:21:3e:a1:1f:81:fd:4d:87: 48:01:55:77:5d:44:66:ec:cc:79:37:c3:f3:fe:78: 8a:de:d9:49:53:ea:f8:6e:6a:6a:79:38:d7:08:75: 95:04:e1:65:3f:25:f1:a0:ca:08:bf:a2:2d:ea:de: e5:a0:14:be:39:01:b2:fe:e0:12:f6:3f:2f:ea:40: 29:59:30:c1:89:7f:92:5c:2c:36:1f:4d:86:7d:45: d3:6d:55:f1:54:de:f8:03:ca:ea:67:90:1f:74:82: 77:97:38:56:3b:9e:a6:2d:9a:81:22:5c:ef:c0:f1: 2c:56:8d:40:f5:71:60:3f:71:87:bd:d8:f1:a9:0f: a4:f9:48:eb:27:e4:a2:89:e1:60:94:7b:d5:32:51: 32:d5:76:76:31:8a:d6:f0:6e:55:b4:3c:67:36:c6: b6:85:7b:28:30:cc:c8:e8:71:32:b3:5a:ca:5f:e1: f0:a9:4a:5d:84:19:57:8c:d5:a9:02:dd:a0:b5:fd: f4:39:86:a8:e7:50:8b:da:0c:4d:c2:1d:b2:45:48: f2:cf:b8:78:f1:54:ed:fe:1e:ab:c8:10:08:b3:a1: da:88:79:8a:e6:87:78:d7:43:5b:f4:8a:89:b2:53: bd:67:ce:e0:8d:95:7e:f2:33:09:ef:71:01:fd:ea: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:1E:E6:87:FE:1E:FC:DA:E1:B6:30:86:CF:DE:46:40:30:78:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a9:16:24:59:74:ae:55:5f:90:4e:3e:70:f5:a7:dc:7b:31: 2f:87:e1:be:cf:17:a0:61:e1:a1:c0:6b:8c:1e:b7:d4:63:e9: ff:bf:dc:41:d5:5a:54:f1:cd:a1:34:ad:b2:05:46:93:9c:ec: ab:24:9b:a7:5e:be:69:46:5c:0d:15:25:9e:43:61:23:f2:08: ab:ad:f2:27:4f:27:42:e5:2f:25:cf:56:38:1b:92:fd:37:78: 85:69:71:a1:a0:86:35:66:00:3c:5e:8c:b6:55:57:46:ae:99: 12:17:04:7c:73:43:4f:b9:7a:74:0a:60:61:1a:14:e1:82:79: b0:39:68:22:b0:92:9a:03:4e:1d:5b:47:25:f6:0c:c2:39:22: 28:08:5e:2d:0d:4e:48:de:13:8c:30:66:77:ed:51:d7:ae:46: f1:ec:17:08:34:e9:8d:45:9d:08:50:5d:92:8e:9a:b1:4c:19: 45:d1:df:d8:ca:59:80:fe:87:c7:93:20:29:0e:a1:5f:46:92: 1d:94:8a:61:4c:0e:bd:8b:dc:c2:f1:e7:fa:9b:80:d5:25:a7: 66:87:14:a5:1a:c7:ca:3e:5f:aa:8c:79:98:ea:ec:c9:9e:35: 7f:a8:5b:d2:a7:71:40:34:59:00:ec:9a:e2:bc:f1:aa:67:69: f3:06:20:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdxXt6g/s75vDj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQwM1oXDTI1MTExNzIxNDQwM1owLzEtMCsGA1UEAxMk ODQ4YjFhYTItMjk4OC00M2UwLTg0MmMtZWNiZDJhZTYyZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoug111dbIT6hH4H9TYdIAVV3XURm7Mx5N8Pz /niK3tlJU+r4bmpqeTjXCHWVBOFlPyXxoMoIv6It6t7loBS+OQGy/uAS9j8v6kAp WTDBiX+SXCw2H02GfUXTbVXxVN74A8rqZ5AfdIJ3lzhWO56mLZqBIlzvwPEsVo1A 9XFgP3GHvdjxqQ+k+UjrJ+SiieFglHvVMlEy1XZ2MYrW8G5VtDxnNsa2hXsoMMzI 6HEys1rKX+HwqUpdhBlXjNWpAt2gtf30OYao51CL2gxNwh2yRUjyz7h48VTt/h6r yBAIs6HaiHmK5od410Nb9IqJslO9Z87gjZV+8jMJ73EB/eql0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdZHuaH/h782uG2MIbP3kZAMHjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDQzOWE3ZjItODQzOS0z YmJiLThjZjMtNTJhMzUxYjcwODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIipFiRZdK5VX5BOPnD1p9x7MS+H4b7PF6Bh4aHAa4wet9Rj6f+/3EHV WlTxzaE0rbIFRpOc7Kskm6devmlGXA0VJZ5DYSPyCKut8idPJ0LlLyXPVjgbkv03 eIVpcaGghjVmADxejLZVV0aumRIXBHxzQ0+5enQKYGEaFOGCebA5aCKwkpoDTh1b RyX2DMI5IigIXi0NTkjeE4wwZnftUdeuRvHsFwg06Y1FnQhQXZKOmrFMGUXR39jK WYD+h8eTICkOoV9Gkh2UimFMDr2L3MLx5/qbgNUlp2aHFKUax8o+X6qMeZjq7Mme NX+oW9KncUA0WQDsmuK88apnafMGIH4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:28 2025 by rpki-client