$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa File: 2e456295-34ec-3199-a545-40ae7c08e19e.roa (raw, json) Hash identifier: vIA0T2e0bq635KxQmlGuOn/Z7jiQ8NhA6VW6Wf0QMAA= Subject key identifier: AB:19:9C:FE:6D:58:23:B8:6C:F0:CB:95:EC:DF:64:A5:0F:A0:59:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBB75A5CCC7775C1773098180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 140.204.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a5:cc:c7:77:5c:17:73:09:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=2b13966a-cd78-46fc-8c6b-4f305842d0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:3a:0b:70:3c:ae:d5:8e:f6:ea:24:96:fa:4c: d8:27:13:8a:18:a1:ac:1f:0f:56:5e:88:ad:8c:86: 2a:22:e0:0c:6c:e1:f8:2b:d2:b6:26:e0:8e:d1:a9: b6:b1:29:bb:7c:bf:9a:4e:ab:90:07:b1:7c:09:bf: 3c:50:26:f7:66:15:56:ae:03:fc:f4:3e:1d:7f:0e: 80:dd:27:a1:d4:8a:52:d7:3b:b0:5f:d3:26:31:1d: 01:58:4b:99:a9:14:a5:67:db:a8:ad:a4:14:89:f1: f6:3d:7d:a3:2d:47:a8:0b:5b:0e:11:39:10:ea:35: d7:e1:74:ad:99:49:bc:85:53:e7:1a:28:41:ce:9f: 03:e2:66:ea:25:e8:c2:0c:2a:ee:f0:64:d5:4a:f1: 8a:8c:ec:1d:b6:e5:ab:73:08:0f:57:b5:88:e9:0c: a0:67:ff:3b:4e:a6:d7:be:d1:b1:80:a4:fa:7a:78: ae:00:5a:2c:26:e1:85:cf:a6:3d:a1:90:31:36:a2: 9d:e3:fd:d3:3e:a4:ac:59:21:74:21:d8:24:1f:80: 6e:d2:aa:2a:06:06:6b:09:95:3a:ed:c0:1e:4d:7b: d7:d3:eb:c4:1d:45:21:5c:27:b9:90:95:45:05:33: dd:67:6b:29:0f:cd:40:35:df:80:99:e7:69:bd:70: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:9C:FE:6D:58:23:B8:6C:F0:CB:95:EC:DF:64:A5:0F:A0:59:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f9:90:b4:0d:df:58:b1:22:ff:dc:ad:38:27:a2:09:9b:26: 46:d9:fe:f4:b5:00:e6:ae:65:1d:2d:a4:16:a1:c8:d3:b6:ce: c5:c3:b2:4f:61:5b:af:74:97:54:ee:7a:23:7f:3b:17:ed:b0: fb:e5:19:e6:8b:cf:98:0d:ed:0c:41:7e:46:00:05:45:09:ce: 2d:b4:63:81:37:29:81:3f:8c:14:c4:5e:e8:d9:9e:97:51:7f: a4:46:26:13:07:69:90:81:27:40:cc:51:b3:bc:dc:71:f3:85: 53:22:55:36:7e:c8:5b:ba:b1:1a:2b:88:59:38:2d:28:d2:b1: fe:97:cf:5e:49:89:9e:6f:7c:fd:1b:8b:bb:55:1b:10:8d:3f: a5:90:7e:0e:ab:7b:23:b4:4d:5f:3e:09:31:0d:29:a9:6e:22: 96:af:a0:a2:2f:d7:89:f1:c9:42:44:c1:78:f6:8d:da:ef:74: b8:27:4f:6a:a0:2e:2c:71:e7:cf:e9:17:40:07:5d:9a:2a:5e: b8:93:d7:40:9e:3b:f5:38:54:56:3b:2f:b8:d6:b6:23:ba:cc: 51:ad:fc:cb:f8:c9:a5:06:2a:dc:da:82:0e:0f:9a:45:31:a3: 24:f7:e8:7c:b4:ac:45:a4:11:49:e7:83:82:8c:67:fc:98:ae: e4:06:11:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daXMx3dcF3MJgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MmIxMzk2NmEtY2Q3OC00NmZjLThjNmItNGYzMDU4NDJkMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/joLcDyu1Y726iSW+kzYJxOKGKGsHw9WXoit jIYqIuAMbOH4K9K2JuCO0am2sSm7fL+aTquQB7F8Cb88UCb3ZhVWrgP89D4dfw6A 3Seh1IpS1zuwX9MmMR0BWEuZqRSlZ9uoraQUifH2PX2jLUeoC1sOETkQ6jXX4XSt mUm8hVPnGihBzp8D4mbqJejCDCru8GTVSvGKjOwdtuWrcwgPV7WI6QygZ/87TqbX vtGxgKT6eniuAFosJuGFz6Y9oZAxNqKd4/3TPqSsWSF0IdgkH4Bu0qoqBgZrCZU6 7cAeTXvX0+vEHUUhXCe5kJVFBTPdZ2spD81ANd+AmedpvXCxfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsZnP5tWCO4bPDLlezfZKUPoFmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU0NTYyOTUtMzRlYy0z MTk5LWE1NDUtNDBhZTdjMDhlMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb5kLQN31ixIv/crTgnogmbJkbZ/vS1AOauZR0tpBahyNO2zsXDsk9h W690l1TueiN/OxftsPvlGeaLz5gN7QxBfkYABUUJzi20Y4E3KYE/jBTEXujZnpdR f6RGJhMHaZCBJ0DMUbO83HHzhVMiVTZ+yFu6sRoriFk4LSjSsf6Xz15JiZ5vfP0b i7tVGxCNP6WQfg6reyO0TV8+CTENKaluIpavoKIv14nxyUJEwXj2jdrvdLgnT2qg Lixx58/pF0AHXZoqXriT10CeO/U4VFY7L7jWtiO6zFGt/Mv4yaUGKtzagg4PmkUx oyT36Hy0rEWkEUnng4KMZ/yYruQGEbI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:26 2025 by rpki-client