$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa File: 20c01e1b-7b2d-38c9-9e59-9998391566ac.roa (raw, json) Hash identifier: yF4M36y3d8Zx7Tb3dYz7g0vBLbkSCRYEx0zZj1NaEYg= Subject key identifier: EC:4C:C1:FB:D6:92:B8:35:DC:1F:31:DE:BC:C9:30:80:57:67:F8:31 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA80F6B15D5B728D77A400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa Signing time: Thu 21 Aug 2025 10:27:36 +0000 ROA not before: Thu 21 Aug 2025 10:27:36 +0000 ROA not after: Wed 19 Nov 2025 11:27:36 +0000 asID: 31898 IP address blocks: 140.238.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:80:f6:b1:5d:5b:72:8d:77:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:36 2025 GMT Not After : Nov 19 11:27:36 2025 GMT Subject: CN=0acdacbc-023e-4f17-a663-24cbfec6496a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:6e:f5:60:83:87:91:8e:f7:7a:43:57:4b: f9:37:dd:01:1d:1f:58:ea:b2:0c:d5:30:60:3a:01: 8b:c4:31:41:59:3f:a9:8b:9b:f4:17:07:a9:3b:be: f3:4e:47:1d:92:a7:78:4f:65:0a:2a:ac:42:93:d2: 47:46:bf:48:fc:df:46:81:99:d9:32:76:8d:64:8c: 36:5c:98:b0:fb:02:30:41:00:2c:4f:f6:82:3b:17: bd:17:d7:a1:cb:54:01:b7:37:2b:73:f7:9c:d0:2f: 4e:21:04:31:d0:38:30:d7:dd:da:4e:9d:64:b5:6f: 9b:c3:90:60:16:7d:de:e7:e2:6d:f7:82:77:93:83: 38:03:44:4a:93:14:c8:42:b6:c6:19:af:7b:ae:42: fc:36:8a:98:7b:26:6c:ea:37:17:8b:29:89:85:f3: 6c:c5:e1:74:37:14:4e:4d:d2:46:e2:45:9d:3e:01: 29:45:b1:ce:f2:91:4b:b3:27:83:39:ce:53:80:61: ca:a3:45:32:ac:a7:48:c3:74:77:85:91:4d:53:0e: f6:0e:39:00:13:93:91:ad:65:90:ad:6b:44:9f:3d: d2:eb:75:fa:13:84:ad:dd:c8:83:42:6c:7b:09:f9: 98:57:e2:8f:c4:de:3c:19:84:5f:95:5d:fb:cb:41: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:C1:FB:D6:92:B8:35:DC:1F:31:DE:BC:C9:30:80:57:67:F8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e5:d1:8c:da:ee:e7:e1:1e:34:d3:53:bb:e9:09:2f:02:a8: 0c:a4:69:89:71:6e:af:02:90:16:52:15:1d:20:83:5e:2f:b9: 8e:48:bb:4e:75:26:3c:b0:4c:b7:4f:d2:b2:ac:72:43:68:77: 2d:82:c7:b1:56:c6:13:ae:47:29:a9:9f:c9:ee:e0:84:7a:c1: 99:1d:9e:f8:4c:bc:ce:d1:09:54:c9:56:84:76:42:3a:cd:ae: dd:75:ef:52:8d:f6:66:78:ea:77:67:2a:4e:fd:e8:82:6f:06: a7:ab:9f:3e:f3:0a:6c:40:e3:ad:a4:f2:94:15:f6:91:77:f6: 91:f4:69:27:f4:e8:3c:d7:15:e6:6b:eb:9b:50:b2:b2:9e:b5: 52:26:eb:2b:00:a3:8a:e3:48:aa:4b:de:3f:90:a8:4f:fd:93: 13:20:4d:1d:a7:73:b8:bf:6c:ec:d8:a0:a4:4b:f4:f0:84:f2: 90:a1:91:ac:6f:88:15:bf:8a:50:aa:39:d0:04:4a:f4:33:3a: a2:c8:c3:a2:0d:b5:0b:22:18:26:44:5e:d4:6d:a4:03:ee:f7: fb:28:52:71:af:23:f9:ca:bb:36:7c:f2:40:5b:40:f3:c3:64: e6:e5:08:1f:dd:3a:f7:3d:50:87:9e:82:aa:ec:1e:a5:f2:66: 09:c9:8f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2oD2sV1bco13pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjczNloXDTI1MTExOTExMjczNlowLzEtMCsGA1UEAxMk MGFjZGFjYmMtMDIzZS00ZjE3LWE2NjMtMjRjYmZlYzY0OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMBu9WCDh5GO93pDV0v5N90BHR9Y6rIM1TBg OgGLxDFBWT+pi5v0FwepO77zTkcdkqd4T2UKKqxCk9JHRr9I/N9GgZnZMnaNZIw2 XJiw+wIwQQAsT/aCOxe9F9ehy1QBtzcrc/ec0C9OIQQx0Dgw193aTp1ktW+bw5Bg Fn3e5+Jt94J3k4M4A0RKkxTIQrbGGa97rkL8NoqYeyZs6jcXiymJhfNsxeF0NxRO TdJG4kWdPgEpRbHO8pFLsyeDOc5TgGHKo0UyrKdIw3R3hZFNUw72DjkAE5ORrWWQ rWtEnz3S63X6E4St3ciDQmx7CfmYV+KPxN48GYRflV37y0F3ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxMwfvWkrg13B8x3rzJMIBXZ/gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjBjMDFlMWItN2IyZC0z OGM5LTllNTktOTk5ODM5MTU2NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjO7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7l0Yza7ufhHjTTU7vpCS8CqAykaYlxbq8CkBZSFR0gg14vuY5Iu051 JjywTLdP0rKsckNody2Cx7FWxhOuRympn8nu4IR6wZkdnvhMvM7RCVTJVoR2QjrN rt1171KN9mZ46ndnKk796IJvBqernz7zCmxA462k8pQV9pF39pH0aSf06DzXFeZr 65tQsrKetVIm6ysAo4rjSKpL3j+QqE/9kxMgTR2nc7i/bOzYoKRL9PCE8pChkaxv iBW/ilCqOdAESvQzOqLIw6INtQsiGCZEXtRtpAPu9/soUnGvI/nKuzZ88kBbQPPD ZOblCB/dOvc9UIeegqrsHqXyZgnJj4c= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:03 2025 by rpki-client