$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e49c9d25-d2be-34f7-8774-0bbc2df6fcb1.roa File: e49c9d25-d2be-34f7-8774-0bbc2df6fcb1.roa (raw, json) Hash identifier: PgVPkdIxfMRMWGhEcrWqN5JuVF+bM6l0CMDNSGGczcY= Subject key identifier: 92:E0:29:72:08:F9:BD:6A:A5:39:FA:CC:35:D0:79:8A:B7:B5:CA:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE664346748B1E4846A0CD780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e49c9d25-d2be-34f7-8774-0bbc2df6fcb1.roa Signing time: Mon 18 Aug 2025 18:18:35 +0000 ROA not before: Mon 18 Aug 2025 18:18:35 +0000 ROA not after: Sun 16 Nov 2025 19:18:35 +0000 asID: 31898 IP address blocks: 140.204.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:64:34:67:48:b1:e4:84:6a:0c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 18:18:35 2025 GMT Not After : Nov 16 19:18:35 2025 GMT Subject: CN=9c523a60-602f-4395-b7ae-46cb0fba86ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:0f:3b:ad:e5:92:c2:43:69:d4:be:99:19: e6:a5:d2:58:74:da:51:b0:da:8a:e3:e5:44:f5:24: e2:f2:7b:c3:40:d8:f5:d6:f5:25:1e:5f:f5:16:84: 2f:da:a2:dd:cf:a1:66:fc:5e:c6:a8:30:6f:b0:59: 1a:25:95:7a:29:9f:79:c5:99:04:cd:3b:7b:3c:f3: 08:19:d0:79:d6:a1:fc:cf:08:cc:2d:3d:15:9c:34: ff:fe:83:56:03:3f:c0:11:94:1d:9b:5e:af:d8:8f: 64:a0:1a:d8:a7:c7:2f:9f:18:38:3d:ac:05:90:44: ce:1a:35:e0:69:b2:73:78:d0:70:2c:6d:c6:b7:7b: ab:57:2a:9b:c1:3c:f9:1e:36:c5:18:ba:8e:45:4b: 68:ef:dc:b2:00:26:ce:11:a8:01:79:4c:26:3f:40: ab:1f:ce:55:48:d7:2a:c7:42:c6:aa:8a:32:60:f9: fc:de:d2:13:b0:bb:27:ea:5e:84:7d:ea:58:59:64: 92:7c:f7:91:e8:80:32:ef:be:39:23:82:92:ac:89: 93:ed:a7:c3:45:db:35:85:19:3c:df:f1:eb:23:29: 07:04:ab:ba:10:4c:b2:a2:c2:16:ca:a9:f7:b5:3e: c8:ce:01:b6:c6:d5:b8:f4:25:7f:3d:17:2b:7c:0a: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:29:72:08:F9:BD:6A:A5:39:FA:CC:35:D0:79:8A:B7:B5:CA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e49c9d25-d2be-34f7-8774-0bbc2df6fcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:04:d4:82:f0:11:71:d6:45:8f:a6:58:ce:d5:c6:b7:1f:e9: a1:90:0e:eb:0e:f1:10:2f:0d:87:8f:6f:77:14:db:87:47:73: 1d:d7:b3:ad:22:3b:dc:b4:08:29:31:9e:16:98:46:6a:94:28: 36:a4:f5:bc:96:11:da:d7:10:37:bf:b4:02:98:f8:66:6d:82: f9:8a:0e:2a:6f:23:f5:a0:cf:fa:63:65:24:31:03:ca:27:7c: 08:20:4d:00:fe:58:c2:23:1e:76:14:04:48:54:b7:c6:9e:04: 6b:51:14:8e:b8:c5:7a:5a:f2:b2:7d:bf:74:73:c5:c1:a3:b7: 1a:66:d5:d0:80:1b:5b:b6:81:ea:5c:6a:d6:07:ea:c7:7e:bb: 5a:18:24:67:c9:91:43:42:8d:ae:14:a8:65:8e:40:4d:da:0d: 08:b1:2a:ac:d2:77:b5:d5:61:a9:64:fa:b8:d0:01:c6:6e:2d: 23:51:11:d7:03:41:e0:91:2e:cd:e5:d1:53:4a:1e:54:fa:dc: 72:d7:f4:0e:3c:43:08:d6:b6:c9:90:d1:6f:e8:67:b3:ae:6f: eb:95:ce:f4:cf:35:e2:48:71:7e:98:a2:4f:34:e8:88:04:81: 85:5e:c9:a9:27:5b:c5:bf:ea:dd:62:47:fc:53:55:f4:5d:7f: 3d:0a:e5:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmZDRnSLHkhGoM14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE4MTgzNVoXDTI1MTExNjE5MTgzNVowLzEtMCsGA1UEAxMk OWM1MjNhNjAtNjAyZi00Mzk1LWI3YWUtNDZjYjBmYmE4NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZQPO63lksJDadS+mRnmpdJYdNpRsNqK4+VE 9STi8nvDQNj11vUlHl/1FoQv2qLdz6Fm/F7GqDBvsFkaJZV6KZ95xZkEzTt7PPMI GdB51qH8zwjMLT0VnDT//oNWAz/AEZQdm16v2I9koBrYp8cvnxg4PawFkETOGjXg abJzeNBwLG3Gt3urVyqbwTz5HjbFGLqORUto79yyACbOEagBeUwmP0CrH85VSNcq x0LGqooyYPn83tITsLsn6l6EfepYWWSSfPeR6IAy7745I4KSrImT7afDRds1hRk8 3/HrIykHBKu6EEyyosIWyqn3tT7IzgG2xtW49CV/PRcrfAp7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLgKXII+b1qpTn6zDXQeYq3tcqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTQ5YzlkMjUtZDJiZS0z NGY3LTg3NzQtMGJiYzJkZjZmY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEE1ILwEXHWRY+mWM7Vxrcf6aGQDusO8RAvDYePb3cU24dHcx3Xs60i O9y0CCkxnhaYRmqUKDak9byWEdrXEDe/tAKY+GZtgvmKDipvI/Wgz/pjZSQxA8on fAggTQD+WMIjHnYUBEhUt8aeBGtRFI64xXpa8rJ9v3RzxcGjtxpm1dCAG1u2gepc atYH6sd+u1oYJGfJkUNCja4UqGWOQE3aDQixKqzSd7XVYalk+rjQAcZuLSNREdcD QeCRLs3l0VNKHlT63HLX9A48QwjWtsmQ0W/oZ7Oub+uVzvTPNeJIcX6Yok806IgE gYVeyaknW8W/6t1iR/xTVfRdfz0K5d8= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:16 2025 by rpki-client