$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa File: 1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa (raw, json) Hash identifier: nti9oAjWhnSexqcEc1/kmgsh0lJjYOIPXZ8anYvMgLI= Subject key identifier: DC:66:54:6F:3B:7B:D4:12:24:97:95:B2:F9:09:D8:AD:2A:A7:F4:AE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE977DB6C6D230527E7909840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa Signing time: Tue 19 Aug 2025 20:45:36 +0000 ROA not before: Tue 19 Aug 2025 20:45:36 +0000 ROA not after: Mon 17 Nov 2025 21:45:36 +0000 asID: 31898 IP address blocks: 140.238.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:db:6c:6d:23:05:27:e7:90:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:36 2025 GMT Not After : Nov 17 21:45:36 2025 GMT Subject: CN=c4ac05e5-ff87-4c3b-a4c5-363c1d9a4b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:15:39:07:06:2a:7c:db:ba:dc:33:d6:b6: a1:5f:ef:1b:99:1e:58:9d:02:30:1e:c9:95:56:f3: fc:46:ed:4d:33:02:04:63:47:02:83:b3:05:28:b5: 9e:2d:2b:eb:14:f8:a0:09:2d:ee:77:a8:83:04:a6: c7:f6:e2:8c:1f:b8:82:04:d0:bf:bf:d6:ab:32:45: 39:a1:62:56:3e:97:05:95:bd:33:9a:e7:7b:cc:50: 9c:fd:04:b0:0f:60:ac:9b:a1:69:61:db:ac:1e:0f: cd:7f:f1:6a:02:ef:b7:c3:e0:96:3a:f9:d2:a0:43: a4:54:3d:fd:4b:97:2d:52:0e:2e:e7:6a:b1:69:49: db:2b:5c:f3:91:c3:ff:a3:b0:1e:d7:7f:79:10:c9: 2e:4a:67:eb:28:43:d9:f6:9e:b6:77:9c:2a:db:6b: 64:7e:42:94:f4:b4:7c:90:30:83:01:c8:1b:9a:aa: aa:30:f9:5b:21:d7:79:a7:25:02:d4:2f:fc:a4:d4: 33:55:b8:83:c3:16:87:cb:13:94:8c:7c:66:3a:b6: 38:0e:76:2d:84:3b:90:3f:7f:f2:ce:6b:99:dd:6b: 91:4a:46:ff:97:cc:f9:34:05:e5:66:3a:83:8d:12: 98:be:06:f0:11:de:a2:38:9a:81:ae:60:1a:2f:28: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:54:6F:3B:7B:D4:12:24:97:95:B2:F9:09:D8:AD:2A:A7:F4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ae4f172-deb7-366a-8aaa-2db4b9b8049d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:49:d0:4e:60:8c:e6:30:ba:08:52:0e:ae:75:1b:36:35:29: 02:9f:10:58:c7:64:f0:6c:ed:9b:ff:45:63:bb:23:22:7f:7b: 6c:e9:89:c5:48:72:18:b6:7b:27:b4:e6:aa:e7:32:ae:60:bc: 4e:ec:11:9e:31:4d:d0:7d:29:6f:e6:5e:4d:b7:4a:af:8b:bb: 1c:c4:5f:b8:77:e2:4b:e6:cb:cc:d1:cb:47:83:34:7d:e2:2c: fc:e5:81:9e:1e:42:52:5c:19:0e:52:f8:e3:00:23:3c:f0:c6: bf:a4:62:2f:c6:a2:75:b9:d9:96:e3:3c:6b:98:da:12:41:fd: 4e:80:4f:93:f7:bc:59:d1:79:0f:b9:e9:a3:b0:09:99:ff:ce: e2:95:b6:85:d3:6a:bc:30:0a:18:6d:99:5f:e7:40:bb:59:b8: 83:d0:99:76:fd:53:c6:e8:5c:9d:85:95:82:9f:0b:0f:a9:73: 0a:d7:7c:30:ba:a1:62:03:2e:3a:0d:e2:e6:5b:6f:b2:88:9a: 16:67:d4:bd:3f:b4:71:3f:f5:78:2f:d8:cc:69:7a:5e:a4:a6: 30:33:10:c6:b3:7a:23:b9:a0:ef:57:b7:a2:e1:c1:22:58:59: be:1e:d9:56:e7:4f:3d:8a:10:ca:37:04:8e:6f:92:66:8b:5f: 8b:e3:28:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd9tsbSMFJ+eQmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDUzNloXDTI1MTExNzIxNDUzNlowLzEtMCsGA1UEAxMk YzRhYzA1ZTUtZmY4Ny00YzNiLWE0YzUtMzYzYzFkOWE0YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnYVOQcGKnzbutwz1rahX+8bmR5YnQIwHsmV VvP8Ru1NMwIEY0cCg7MFKLWeLSvrFPigCS3ud6iDBKbH9uKMH7iCBNC/v9arMkU5 oWJWPpcFlb0zmud7zFCc/QSwD2Csm6FpYdusHg/Nf/FqAu+3w+CWOvnSoEOkVD39 S5ctUg4u52qxaUnbK1zzkcP/o7Ae1395EMkuSmfrKEPZ9p62d5wq22tkfkKU9LR8 kDCDAcgbmqqqMPlbIdd5pyUC1C/8pNQzVbiDwxaHyxOUjHxmOrY4DnYthDuQP3/y zmuZ3WuRSkb/l8z5NAXlZjqDjRKYvgbwEd6iOJqBrmAaLyhdQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxmVG87e9QSJJeVsvkJ2K0qp/SuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWFlNGYxNzItZGViNy0z NjZhLThhYWEtMmRiNGI5YjgwNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjO7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFJ0E5gjOYwughSDq51GzY1KQKfEFjHZPBs7Zv/RWO7IyJ/e2zpicVI chi2eye05qrnMq5gvE7sEZ4xTdB9KW/mXk23Sq+LuxzEX7h34kvmy8zRy0eDNH3i LPzlgZ4eQlJcGQ5S+OMAIzzwxr+kYi/GonW52ZbjPGuY2hJB/U6AT5P3vFnReQ+5 6aOwCZn/zuKVtoXTarwwChhtmV/nQLtZuIPQmXb9U8boXJ2FlYKfCw+pcwrXfDC6 oWIDLjoN4uZbb7KImhZn1L0/tHE/9Xgv2Mxpel6kpjAzEMazeiO5oO9Xt6LhwSJY Wb4e2VbnTz2KEMo3BI5vkmaLX4vjKFA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:49 2025 by rpki-client