$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa File: 437b6827-f6c6-36e7-9996-79edb25578c9.roa (raw, json) Hash identifier: rcL5h66WATlNQrmoANAjwusZxXkpZV1W/i4yXvMtzkk= Subject key identifier: 4B:B8:AA:07:D1:53:3D:E3:71:E0:1B:E4:E6:AB:E4:33:FB:61:07:F7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C84567E3D0FDFE171A3C10 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa Signing time: Mon 25 Aug 2025 17:00:34 +0000 ROA not before: Mon 25 Aug 2025 17:00:34 +0000 ROA not after: Sun 23 Nov 2025 18:00:34 +0000 asID: 31898 IP address blocks: 140.204.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:45:67:e3:d0:fd:fe:17:1a:3c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:34 2025 GMT Not After : Nov 23 18:00:34 2025 GMT Subject: CN=be8ebe49-03e8-4aa7-9a1a-97a82d44d194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:f8:0e:ee:ec:be:a5:df:99:3b:00:73:73: 57:46:49:70:82:7a:42:bf:b5:58:40:42:bc:7d:d4: 96:cb:76:b5:bc:c3:08:cc:11:b4:81:ce:d9:5a:60: b4:83:c8:61:9e:62:63:d0:a3:76:e4:9f:ea:be:d2: 12:07:68:a5:82:01:56:80:b5:58:f8:df:92:9a:17: 2d:77:f4:eb:13:f5:b4:ee:a2:51:2e:df:da:c2:14: 9c:34:c7:48:a7:62:7c:77:8c:8e:03:9d:1a:86:b1: 97:3e:b2:35:1d:be:5f:bc:f9:2a:34:4e:01:3e:03: f5:28:6e:5b:bb:59:39:40:0e:3c:89:22:4d:bc:9e: 38:44:c0:a0:6e:27:08:55:3d:06:57:7e:5f:ab:de: 78:8b:5f:b0:a4:13:c3:58:51:2e:fe:da:23:40:46: 77:3d:cb:56:f1:82:cc:de:2a:9d:29:3f:ac:35:60: c7:24:ed:13:46:31:f8:8b:61:87:08:8f:41:4d:d2: f9:1c:d1:7d:3f:65:9d:8e:aa:ef:14:c2:48:16:25: e5:d2:ce:f5:21:c3:ac:7e:84:7c:88:e4:58:68:f4: ce:e5:ab:8d:2c:4c:b9:9d:f4:16:af:e3:10:90:bb: 5c:69:20:05:1c:07:45:5d:55:35:9e:63:e6:98:31: 5f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B8:AA:07:D1:53:3D:E3:71:E0:1B:E4:E6:AB:E4:33:FB:61:07:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ab:93:a7:8b:22:3d:20:c7:11:15:e7:88:24:72:79:8d:aa: 11:7e:09:6e:7e:77:3a:f2:ea:9d:2c:55:d8:49:f4:ba:9a:23: 1d:3d:4e:75:0f:ca:8b:f0:cc:9e:b6:7e:13:e8:ac:4f:37:9e: 75:91:e6:c0:06:b8:9b:34:98:01:fe:90:99:1d:8c:3b:32:c7: 7f:6d:06:f4:de:3b:2b:f2:4f:55:43:a8:3b:d7:32:40:f5:22: 30:bb:92:53:a2:f4:f9:58:f4:52:04:3c:2b:e6:16:a7:43:d7: 56:ca:3d:1a:25:7b:83:71:9d:69:0d:cb:f3:67:5a:d9:b9:6e: 91:8e:2d:31:d6:8a:23:8c:aa:1c:b7:8c:b6:ee:80:91:57:17: b3:cb:12:b7:15:a5:bc:fe:00:3e:6e:87:1a:78:24:8d:ce:b8: 18:8f:1a:84:e1:ec:3e:17:fe:20:de:84:2b:09:fc:04:87:0a: 14:88:e8:93:67:03:9a:75:40:c0:68:a2:fa:b4:f9:03:e3:62: 45:66:02:bd:79:74:41:bd:1f:18:02:06:16:63:ad:9c:62:cb: 76:1e:bc:bd:10:c5:0f:b3:7f:e0:5d:42:79:b5:59:44:1e:69: 0b:7b:26:ef:ed:a1:60:dd:2d:4c:d7:48:17:47:57:06:bb:7f: 4f:a8:3f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEVn49D9/hcaPBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzNFoXDTI1MTEyMzE4MDAzNFowLzEtMCsGA1UEAxMk YmU4ZWJlNDktMDNlOC00YWE3LTlhMWEtOTdhODJkNDRkMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhv4Du7svqXfmTsAc3NXRklwgnpCv7VYQEK8 fdSWy3a1vMMIzBG0gc7ZWmC0g8hhnmJj0KN25J/qvtISB2ilggFWgLVY+N+Smhct d/TrE/W07qJRLt/awhScNMdIp2J8d4yOA50ahrGXPrI1Hb5fvPkqNE4BPgP1KG5b u1k5QA48iSJNvJ44RMCgbicIVT0GV35fq954i1+wpBPDWFEu/tojQEZ3PctW8YLM 3iqdKT+sNWDHJO0TRjH4i2GHCI9BTdL5HNF9P2WdjqrvFMJIFiXl0s71IcOsfoR8 iORYaPTO5auNLEy5nfQWr+MQkLtcaSAFHAdFXVU1nmPmmDFf0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu4qgfRUz3jceAb5Oar5DP7YQf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3YjY4MjctZjZjNi0z NmU3LTk5OTYtNzllZGIyNTU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJerk6eLIj0gxxEV54gkcnmNqhF+CW5+dzry6p0sVdhJ9LqaIx09TnUP yovwzJ62fhPorE83nnWR5sAGuJs0mAH+kJkdjDsyx39tBvTeOyvyT1VDqDvXMkD1 IjC7klOi9PlY9FIEPCvmFqdD11bKPRole4NxnWkNy/NnWtm5bpGOLTHWiiOMqhy3 jLbugJFXF7PLErcVpbz+AD5uhxp4JI3OuBiPGoTh7D4X/iDehCsJ/ASHChSI6JNn A5p1QMBoovq0+QPjYkVmAr15dEG9HxgCBhZjrZxiy3YevL0QxQ+zf+BdQnm1WUQe aQt7Ju/toWDdLUzXSBdHVwa7f0+oPzs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:33 2025 by rpki-client