$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa File: eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa (raw, json) Hash identifier: tpYgfqKFzfSMKQlDyMur9/+1IqXQ1TJzdKWLPAf7YqQ= Subject key identifier: 52:68:7B:A9:41:52:36:5F:20:36:F3:DB:21:E9:38:D6:6F:C8:11:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B7BC355BD26F6E339BE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa Signing time: Tue 19 Aug 2025 17:39:29 +0000 ROA not before: Tue 19 Aug 2025 17:39:29 +0000 ROA not after: Mon 17 Nov 2025 18:39:29 +0000 asID: 31898 IP address blocks: 140.238.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:7b:c3:55:bd:26:f6:e3:39:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:29 2025 GMT Not After : Nov 17 18:39:29 2025 GMT Subject: CN=90a929f5-6b6a-457c-9e0c-6f8842e1ce6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:10:2a:9a:ad:f9:42:4a:85:e2:26:ec:0a: 12:93:29:01:38:31:a2:d5:ba:67:7d:d7:d5:0b:a2: f2:1f:a4:73:84:da:b7:59:40:9b:30:0f:ea:91:74: 6d:3a:9f:56:35:3f:ff:83:8b:b5:8e:b1:ef:cd:91: 34:7a:9a:6e:f6:de:9a:42:92:c4:97:1e:a8:bf:48: fc:e0:7f:ec:ca:b1:79:33:4c:00:73:ee:18:92:80: 82:9a:42:50:0e:37:e8:ac:b9:3f:78:ed:25:43:95: 39:f8:c3:68:f7:07:29:ce:1d:c3:e4:16:c2:8d:af: 35:cd:57:da:3e:2b:54:61:62:9e:eb:b5:d2:94:ea: 62:18:0e:67:07:70:c0:79:96:f7:44:54:78:f3:83: 50:ce:a2:d9:84:c9:df:b5:a1:f6:37:91:72:fa:c0: 5b:1e:b9:67:ec:0b:65:2e:94:8d:68:f8:db:a7:f6: a5:d4:52:32:5f:a8:a6:32:2c:ca:7f:92:2c:90:af: 9a:91:f3:e4:27:8f:8d:18:93:93:5a:91:0f:92:67: f1:50:08:80:2a:77:66:24:f6:e8:c3:bc:f4:97:bb: be:12:f0:1d:d4:ac:65:76:ba:60:ce:ce:45:7b:44: 79:c0:b5:24:3c:95:4d:4c:93:24:1c:54:77:e8:a4: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:68:7B:A9:41:52:36:5F:20:36:F3:DB:21:E9:38:D6:6F:C8:11:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2e:f9:05:02:4f:78:4a:65:78:67:a1:3b:3d:32:43:b5:f4: e3:6e:f3:b2:a0:f8:dd:11:3a:e7:4d:4c:97:aa:ae:66:0f:53: a5:ec:ea:e9:fc:95:da:71:b4:2d:ef:f8:5a:ee:c4:a2:3f:ad: c6:55:cd:14:57:e2:cf:29:27:ee:ed:52:ed:fb:0f:fd:05:17: 9b:48:0c:df:14:a1:f4:e1:7a:c1:1e:6a:51:81:7f:e7:79:01: c4:04:58:9e:98:a2:af:4e:51:06:c8:fb:21:fe:87:ab:31:90: 72:e9:f8:df:77:16:44:3b:92:f6:5b:52:aa:2b:3f:e3:3d:cf: 4f:0a:c4:9a:0b:49:5a:1c:fc:bb:45:4a:f1:88:e5:92:d6:75: f4:bf:0c:48:f3:f8:9b:b6:b5:fc:36:6a:f6:19:4c:0b:6b:1e: 5c:bd:8e:6f:c3:fd:7d:fd:fa:49:d3:d2:b8:38:d7:76:ce:a1: 56:14:ea:39:ad:08:ae:21:21:9b:cc:59:d6:22:76:a3:4d:53: db:8b:44:3a:36:c1:9d:72:b5:f9:3b:ad:6d:09:5b:5d:f4:48: 3a:67:16:2b:80:9f:d1:73:5f:43:4e:03:32:43:5a:c4:fe:c5: d4:81:64:51:15:83:97:f6:7d:a2:7e:3e:ce:98:e6:fd:24:12: 4a:78:89:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG3vDVb0m9uM5vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkyOVoXDTI1MTExNzE4MzkyOVowLzEtMCsGA1UEAxMk OTBhOTI5ZjUtNmI2YS00NTdjLTllMGMtNmY4ODQyZTFjZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6gQKpqt+UJKheIm7AoSkykBODGi1bpnfdfV C6LyH6RzhNq3WUCbMA/qkXRtOp9WNT//g4u1jrHvzZE0eppu9t6aQpLElx6ov0j8 4H/syrF5M0wAc+4YkoCCmkJQDjforLk/eO0lQ5U5+MNo9wcpzh3D5BbCja81zVfa PitUYWKe67XSlOpiGA5nB3DAeZb3RFR484NQzqLZhMnftaH2N5Fy+sBbHrln7Atl LpSNaPjbp/al1FIyX6imMizKf5IskK+akfPkJ4+NGJOTWpEPkmfxUAiAKndmJPbo w7z0l7u+EvAd1Kxldrpgzs5Fe0R5wLUkPJVNTJMkHFR36KS+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJoe6lBUjZfIDbz2yHpONZvyBECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNhMmNkNDItZjE4Mi0z NjljLWJmMzctNjRkOWE2ZDhlNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjO4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsu+QUCT3hKZXhnoTs9MkO19ONu87Kg+N0ROudNTJeqrmYPU6Xs6un8 ldpxtC3v+FruxKI/rcZVzRRX4s8pJ+7tUu37D/0FF5tIDN8UofThesEealGBf+d5 AcQEWJ6Yoq9OUQbI+yH+h6sxkHLp+N93FkQ7kvZbUqorP+M9z08KxJoLSVoc/LtF SvGI5ZLWdfS/DEjz+Ju2tfw2avYZTAtrHly9jm/D/X39+knT0rg413bOoVYU6jmt CK4hIZvMWdYidqNNU9uLRDo2wZ1ytfk7rW0JW130SDpnFiuAn9FzX0NOAzJDWsT+ xdSBZFEVg5f2faJ+Ps6Y5v0kEkp4iX4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:46 2025 by rpki-client