$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/714960d2-0700-3792-a4c1-46a905a93adc.roa File: 714960d2-0700-3792-a4c1-46a905a93adc.roa (raw, json) Hash identifier: o8X3JXy8QsiTMYBu/tYAriU5tw/vb92h3+U7dHCvhFc= Subject key identifier: 3A:3E:04:0A:45:8F:1F:43:A9:C7:D9:8C:44:A9:E8:D0:A8:B2:75:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6FD124E5C84C12767B32600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/714960d2-0700-3792-a4c1-46a905a93adc.roa Signing time: Mon 18 Aug 2025 23:26:35 +0000 ROA not before: Mon 18 Aug 2025 23:26:35 +0000 ROA not after: Mon 17 Nov 2025 00:26:35 +0000 asID: 31898 IP address blocks: 140.204.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:fd:12:4e:5c:84:c1:27:67:b3:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 23:26:35 2025 GMT Not After : Nov 17 00:26:35 2025 GMT Subject: CN=6a37e1be-764d-4049-8ece-b22e2677938e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:12:66:00:2a:ad:4a:c1:20:8b:f2:bc:ac: 50:8f:3f:f4:3c:f1:f6:29:d4:99:ec:7b:11:a3:dd: bf:e1:93:a3:b5:52:62:f7:44:88:f8:12:de:24:c9: 36:f8:84:85:f7:8a:3a:96:22:23:c4:d3:2c:04:0f: ac:66:ea:83:e2:52:b0:32:65:a0:00:1e:30:68:56: 69:c6:cd:02:e0:fb:f3:b0:3c:22:da:30:42:55:66: 10:f3:58:4c:20:2c:74:f7:5a:cc:49:90:34:e4:cb: d3:c8:0d:9f:59:f2:2f:49:ce:ce:a5:13:e4:9d:c6: b5:82:9f:48:20:a7:1e:38:c5:bc:72:dc:4c:c2:f8: b0:87:9c:ef:70:36:84:0c:3f:63:17:b1:c1:29:96: 3e:3b:65:aa:29:d3:82:45:ce:fa:c8:ce:e6:29:2e: 17:e6:54:da:ee:d6:66:90:af:30:e1:ad:cc:8d:6b: 03:93:67:12:9e:29:8b:6e:67:70:62:53:25:5b:f2: 54:5f:0a:fa:f0:c0:27:2c:5c:a0:d2:71:63:ad:e3: c4:1e:02:ab:ec:1f:d7:4e:f6:96:f8:a6:fa:8b:55: 6f:2f:a3:3c:61:8b:96:10:0f:43:32:d0:28:81:8e: a7:41:ff:d8:a9:c0:30:d1:8c:d0:a5:14:2b:d9:2e: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:04:0A:45:8F:1F:43:A9:C7:D9:8C:44:A9:E8:D0:A8:B2:75:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/714960d2-0700-3792-a4c1-46a905a93adc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:05:30:2a:2b:31:2f:c7:04:1a:3a:82:24:21:25:da:97:01: 87:f6:ac:a3:45:db:c7:99:14:2f:4b:e3:0e:f0:a0:e8:c6:17: 22:c3:11:27:96:a6:ec:69:9d:bd:a4:ca:fa:98:19:7b:e7:6b: c4:91:af:4a:53:d6:60:99:32:b6:15:d4:3f:52:28:6b:83:e5: b8:f7:93:b5:9a:7d:f8:d9:ef:03:5d:bc:8d:e2:40:48:16:79: a6:d6:b8:ec:90:19:cf:44:65:81:1d:9e:d9:e8:08:0a:0f:d3: 57:be:3a:51:bb:28:44:5e:64:37:5d:a5:fd:d8:37:2a:43:15: d8:bc:51:79:23:c5:47:71:75:2f:74:5b:0e:2c:de:89:92:9f: 60:a0:d3:d6:20:0d:02:3f:8a:60:34:3c:9e:1f:16:5e:de:61: d9:b8:c0:03:72:ea:65:c2:5f:48:04:91:a1:9e:dd:b0:9d:8f: 8a:9d:66:61:5d:42:42:96:58:a0:57:fd:ec:2f:aa:ad:0f:6f: af:6d:d7:4a:f2:0c:91:36:07:d9:a9:02:33:3b:0a:97:1b:69: 7a:bb:eb:de:ed:36:d2:86:8e:60:e9:9b:d5:9d:28:65:3e:4c: 3d:62:fe:d8:0f:8c:20:42:71:34:31:2a:d8:92:56:08:da:cf: 27:91:3d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErm/RJOXITBJ2ezJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIzMjYzNVoXDTI1MTExNzAwMjYzNVowLzEtMCsGA1UEAxMk NmEzN2UxYmUtNzY0ZC00MDQ5LThlY2UtYjIyZTI2Nzc5MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWcSZgAqrUrBIIvyvKxQjz/0PPH2KdSZ7HsR o92/4ZOjtVJi90SI+BLeJMk2+ISF94o6liIjxNMsBA+sZuqD4lKwMmWgAB4waFZp xs0C4PvzsDwi2jBCVWYQ81hMICx091rMSZA05MvTyA2fWfIvSc7OpRPknca1gp9I IKceOMW8ctxMwviwh5zvcDaEDD9jF7HBKZY+O2WqKdOCRc76yM7mKS4X5lTa7tZm kK8w4a3MjWsDk2cSnimLbmdwYlMlW/JUXwr68MAnLFyg0nFjrePEHgKr7B/XTvaW +Kb6i1VvL6M8YYuWEA9DMtAogY6nQf/YqcAw0YzQpRQr2S5xFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo+BApFjx9DqcfZjESp6NCosnW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzE0OTYwZDItMDcwMC0z NzkyLWE0YzEtNDZhOTA1YTkzYWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUFMCorMS/HBBo6giQhJdqXAYf2rKNF28eZFC9L4w7woOjGFyLDESeW puxpnb2kyvqYGXvna8SRr0pT1mCZMrYV1D9SKGuD5bj3k7WaffjZ7wNdvI3iQEgW eabWuOyQGc9EZYEdntnoCAoP01e+OlG7KEReZDddpf3YNypDFdi8UXkjxUdxdS90 Ww4s3omSn2Cg09YgDQI/imA0PJ4fFl7eYdm4wANy6mXCX0gEkaGe3bCdj4qdZmFd QkKWWKBX/ewvqq0Pb69t10ryDJE2B9mpAjM7CpcbaXq7697tNtKGjmDpm9WdKGU+ TD1i/tgPjCBCcTQxKtiSVgjazyeRPaA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:09 2025 by rpki-client