$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa File: 1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa (raw, json) Hash identifier: xIR2yV0lP4l6vuiGLHG2z0kn2Q/24rg6mQ+HzzOKLr8= Subject key identifier: FE:EB:DC:C8:47:23:A7:0A:1A:24:65:29:95:E4:2E:DD:97:02:BC:4E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C876B58DC9438B47B7680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa Signing time: Wed 20 Aug 2025 21:05:44 +0000 ROA not before: Wed 20 Aug 2025 21:05:44 +0000 ROA not after: Tue 18 Nov 2025 22:05:44 +0000 asID: 31898 IP address blocks: 140.204.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:87:6b:58:dc:94:38:b4:7b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:44 2025 GMT Not After : Nov 18 22:05:44 2025 GMT Subject: CN=e9203916-5a80-4ecf-ade2-7c44e37c6312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:92:cf:d6:84:fe:03:3c:68:da:19:9f:fb: a4:b3:4e:4d:b6:ac:fe:0f:53:39:08:45:aa:1d:9d: b5:96:b4:85:f8:0c:c4:f3:58:1e:51:25:64:7a:93: 6e:25:10:61:e8:34:9a:d4:39:89:48:74:21:04:b3: c3:22:1f:ac:78:96:9c:e5:70:a7:18:67:dd:fb:82: 5c:4b:22:80:cd:72:df:00:d9:f6:9e:29:99:b5:0a: 96:98:8f:c7:23:1c:2a:7c:fc:03:22:af:fc:f0:ab: 1c:4d:1a:96:de:3e:89:6b:56:1d:15:5e:1f:6d:f6: 54:2f:20:15:7b:3a:4c:d4:38:99:36:01:61:42:da: 3d:c9:49:8a:28:6a:3e:2e:0b:f2:1b:e8:17:8c:ce: fe:83:bd:c1:83:24:ae:2a:8d:d3:94:c8:ab:ca:9e: 06:18:6d:16:f4:66:ab:f4:3e:d2:46:38:97:15:91: ec:67:63:d8:15:e1:d9:91:72:8d:1d:85:40:7e:c4: a3:ac:67:c1:68:81:48:7a:c5:0a:ad:0f:93:1c:35: 4e:e3:bd:69:25:8b:1c:92:d1:9a:c8:97:6d:00:e2: 26:31:a3:0e:9a:26:d3:57:c2:2b:56:20:5e:d2:66: a7:87:43:b4:fb:a1:68:4f:61:6b:ad:1e:4c:d7:5d: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EB:DC:C8:47:23:A7:0A:1A:24:65:29:95:E4:2E:DD:97:02:BC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ba:e2:24:8c:06:73:3b:1a:87:fe:ad:b2:ef:09:81:32:05: 9d:b2:91:cc:46:e6:bc:02:51:40:58:f0:e2:1c:42:16:a2:20: 7c:d4:11:36:9a:a0:8a:d3:4e:bc:a7:7d:0d:9d:35:49:04:8a: b0:1c:95:93:c6:98:dd:1b:07:d5:05:4d:46:a9:fd:2c:eb:33: ad:ea:6c:28:5e:ac:41:19:49:3a:6b:4b:ef:1f:28:86:91:1b: 88:be:a8:8e:56:18:10:4d:58:2a:d0:54:75:35:cc:cb:c1:65: 8a:ec:ee:6b:a9:8e:c9:6a:ab:00:52:13:dd:5d:59:89:0f:3d: 96:3d:ed:7f:57:ec:8d:e7:4a:5c:d6:64:2d:a8:8c:da:64:6c: 5f:ef:1e:0c:3a:ac:c6:c4:d6:31:24:8a:10:2f:e4:7e:f6:dd: 08:a1:c4:46:2a:c9:ef:b1:7a:6a:21:87:11:b6:9f:a9:69:9d: c9:80:a2:f7:ab:4d:ba:a5:ed:56:07:4d:4b:34:51:ab:f6:9e: 27:a9:af:a1:c1:e0:71:ae:ef:56:e5:ed:79:5d:4d:d2:21:8f: b2:cd:55:cb:97:0d:23:98:91:c1:d1:a6:7c:ba:bc:94:b1:fc: 25:c9:77:bf:1a:33:bd:56:52:4c:35:23:21:21:dd:c2:70:32: d8:69:58:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTIdrWNyUOLR7doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU0NFoXDTI1MTExODIyMDU0NFowLzEtMCsGA1UEAxMk ZTkyMDM5MTYtNWE4MC00ZWNmLWFkZTItN2M0NGUzN2M2MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdqSz9aE/gM8aNoZn/uks05Ntqz+D1M5CEWq HZ21lrSF+AzE81geUSVkepNuJRBh6DSa1DmJSHQhBLPDIh+seJac5XCnGGfd+4Jc SyKAzXLfANn2nimZtQqWmI/HIxwqfPwDIq/88KscTRqW3j6Ja1YdFV4fbfZULyAV ezpM1DiZNgFhQto9yUmKKGo+LgvyG+gXjM7+g73BgySuKo3TlMiryp4GGG0W9Gar 9D7SRjiXFZHsZ2PYFeHZkXKNHYVAfsSjrGfBaIFIesUKrQ+THDVO471pJYscktGa yJdtAOImMaMOmibTV8IrViBe0manh0O0+6FoT2FrrR5M111TJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7r3MhHI6cKGiRlKZXkLt2XArxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWE0Y2JhYjEtZGZjYi0z YmVlLTgxOTctM2UyNmNmMjg4OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi64iSMBnM7Gof+rbLvCYEyBZ2ykcxG5rwCUUBY8OIcQhaiIHzUETaa oIrTTrynfQ2dNUkEirAclZPGmN0bB9UFTUap/SzrM63qbCherEEZSTprS+8fKIaR G4i+qI5WGBBNWCrQVHU1zMvBZYrs7mupjslqqwBSE91dWYkPPZY97X9X7I3nSlzW ZC2ojNpkbF/vHgw6rMbE1jEkihAv5H723QihxEYqye+xemohhxG2n6lpncmAover Tbql7VYHTUs0Uav2niepr6HB4HGu71bl7XldTdIhj7LNVcuXDSOYkcHRpny6vJSx /CXJd78aM71WUkw1IyEh3cJwMthpWBg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:36 2025 by rpki-client