$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa File: 30f13fa5-3c19-33b4-a5c2-10959685bacd.roa (raw, json) Hash identifier: gA6nQ0JQmY7Wl9XCGPaII9ih+mn3uH5cQAfOfS2BgCI= Subject key identifier: 22:25:78:F5:15:EC:79:8B:D4:85:3A:A2:95:21:58:01:69:FE:D9:5A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE406238A27DEC81D8B58100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 140.204.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:62:38:a2:7d:ec:81:d8:b5:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=d98e29c8-77b8-4bba-9caf-d317c029d81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:b3:88:e2:9b:9b:a3:9e:b2:21:06:bb:31: 14:58:69:93:84:12:37:68:08:49:3d:aa:42:7f:d8: 0c:ab:f6:5c:7f:3c:84:1d:77:50:f1:fc:3a:77:41: 96:b8:f2:d2:43:f5:0f:65:dc:82:3f:a8:03:b6:a4: 55:7a:b9:82:56:6c:71:e3:49:38:86:6d:e3:30:63: 6c:dc:aa:d0:e0:8f:e3:49:5f:4d:de:7b:3e:81:e4: a5:3c:44:55:74:48:c1:bf:7d:09:a2:5b:ce:7a:37: cc:d2:e9:2c:4d:da:ec:f9:ea:22:07:a6:a9:03:8e: 51:f4:21:48:ec:28:c6:83:0b:7d:a8:86:f9:63:60: 40:33:df:54:dc:98:60:54:d7:64:05:c2:f6:45:d8: ea:03:e3:8b:01:f0:89:ee:6f:fb:a8:a1:ff:b8:dd: 99:fc:fd:db:40:d0:61:4e:9d:b1:bf:67:98:a0:ad: d2:6f:03:41:61:2a:9c:a5:3c:81:89:17:49:2e:7d: 5f:5c:b7:b5:1f:45:14:35:4a:b6:e0:36:6e:99:06: fd:b9:3e:95:5d:b9:26:81:ee:0b:60:13:33:01:7b: d2:12:34:74:ef:bf:4e:dc:af:bf:c9:1e:e3:63:d9: 27:e7:c8:34:6a:09:a4:01:a8:f9:e9:9e:f6:88:ff: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:78:F5:15:EC:79:8B:D4:85:3A:A2:95:21:58:01:69:FE:D9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30f13fa5-3c19-33b4-a5c2-10959685bacd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c9:49:4d:98:2e:58:64:96:e9:2b:41:1a:97:4a:f0:00:5d: 91:48:b0:bc:d2:b3:b4:26:8f:7a:46:13:ac:f4:b0:1a:b9:34: c3:96:c8:3f:ad:db:fd:87:0a:f3:bd:b9:71:4a:ad:6d:5c:57: cf:51:71:12:19:4d:15:9c:a6:1a:00:16:24:ed:52:47:0f:92: 52:9d:10:c4:2d:5c:4d:85:ad:8e:4f:ad:19:dd:99:f3:64:36: 56:d1:6d:c5:19:d8:b8:68:eb:2d:75:92:36:ad:64:60:ee:3a: d9:2a:5a:3f:39:23:b1:a1:76:7a:7d:14:a1:2e:65:a8:10:dc: 2d:18:75:3d:45:7b:f4:e5:1c:27:a1:13:8a:89:e5:e7:41:d6: 6e:6d:4b:0d:86:80:9a:73:14:cb:58:e1:a4:24:b6:fc:eb:fc: 58:70:54:ec:4f:c2:90:c7:6f:b4:c5:85:e7:cb:5a:ad:b8:8c: 66:18:e7:5e:2a:74:fe:4d:c3:82:78:be:2c:7d:13:34:ae:19: f5:19:58:c5:a7:ce:2c:8f:b7:4e:9a:3e:79:af:c9:7e:c2:50: d3:c7:4e:38:99:58:5b:29:63:c8:51:c0:4c:e0:00:ad:06:42: 71:78:cf:08:13:34:31:07:63:d6:5e:62:db:a7:0f:8a:e2:e1: 2d:2f:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGI4on3sgdi1gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDk4ZTI5YzgtNzdiOC00YmJhLTljYWYtZDMxN2MwMjlkODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqziOKbm6OesiEGuzEUWGmThBI3aAhJPapC f9gMq/ZcfzyEHXdQ8fw6d0GWuPLSQ/UPZdyCP6gDtqRVermCVmxx40k4hm3jMGNs 3KrQ4I/jSV9N3ns+geSlPERVdEjBv30JolvOejfM0uksTdrs+eoiB6apA45R9CFI 7CjGgwt9qIb5Y2BAM99U3JhgVNdkBcL2RdjqA+OLAfCJ7m/7qKH/uN2Z/P3bQNBh Tp2xv2eYoK3SbwNBYSqcpTyBiRdJLn1fXLe1H0UUNUq24DZumQb9uT6VXbkmge4L YBMzAXvSEjR0779O3K+/yR7jY9kn58g0agmkAaj56Z72iP//xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIlePUV7HmL1IU6opUhWAFp/tlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzBmMTNmYTUtM2MxOS0z M2I0LWE1YzItMTA5NTk2ODViYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbJSU2YLlhklukrQRqXSvAAXZFIsLzSs7Qmj3pGE6z0sBq5NMOWyD+t 2/2HCvO9uXFKrW1cV89RcRIZTRWcphoAFiTtUkcPklKdEMQtXE2FrY5PrRndmfNk NlbRbcUZ2Lho6y11kjatZGDuOtkqWj85I7Ghdnp9FKEuZagQ3C0YdT1Fe/TlHCeh E4qJ5edB1m5tSw2GgJpzFMtY4aQktvzr/FhwVOxPwpDHb7TFhefLWq24jGYY514q dP5Nw4J4vix9EzSuGfUZWMWnziyPt06aPnmvyX7CUNPHTjiZWFspY8hRwEzgAK0G QnF4zwgTNDEHY9ZeYtunD4ri4S0vJl8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:27 2025 by rpki-client