$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ba7a84-1887-329f-8eb9-1b4f93ce51ac.roa File: 81ba7a84-1887-329f-8eb9-1b4f93ce51ac.roa (raw, json) Hash identifier: kTjUXOLRXL+rF9Wi4NfaQOZbT0jrZbnLnRt8RVW9W8U= Subject key identifier: D0:68:75:1D:F6:6E:C7:41:9D:4E:AB:86:C2:4E:7C:E9:8F:24:B4:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C3BD1997DE60E9A1DDFA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ba7a84-1887-329f-8eb9-1b4f93ce51ac.roa Signing time: Mon 25 Aug 2025 08:15:37 +0000 ROA not before: Mon 25 Aug 2025 08:15:37 +0000 ROA not after: Sun 23 Nov 2025 09:15:37 +0000 asID: 31898 IP address blocks: 140.204.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c3:bd:19:97:de:60:e9:a1:dd:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:15:37 2025 GMT Not After : Nov 23 09:15:37 2025 GMT Subject: CN=f31d82aa-e26d-4c7c-8202-94794357c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:70:c4:0b:18:19:51:c1:a6:30:1c:48:a6: 29:81:84:08:e2:2d:dd:72:23:5d:34:04:5c:2a:17: 99:f5:58:cc:b7:58:9c:88:1e:87:ca:cb:73:39:0c: 83:2d:e6:94:58:dc:e8:bf:31:77:75:2b:38:b2:69: ee:c0:a0:2a:17:61:08:7d:a4:56:9c:82:47:43:1f: b0:00:bc:55:18:60:97:ff:c1:57:00:6a:3b:2a:ae: 1d:a9:5c:c6:a0:07:0b:f6:4e:0d:cd:89:71:11:8a: 1a:19:6f:4f:2c:09:c4:c4:22:7e:d8:29:f6:71:d8: 97:32:c0:28:c0:55:b3:96:ff:1a:4f:72:18:94:4e: 29:19:cc:bd:85:a0:5c:ad:23:1b:05:6b:fd:5e:b5: ec:8e:bb:32:bf:5d:0c:db:d0:1c:ee:c1:f5:36:94: 7f:c7:1b:2d:a5:53:09:50:39:85:da:71:1d:cc:11: d5:3f:f6:42:79:85:8c:ed:0d:b9:c3:11:5d:71:ef: db:83:82:22:14:c0:8a:80:a6:42:55:66:dc:c3:76: 70:b8:46:e0:d4:6c:5d:0e:fe:98:6e:f7:95:ed:1e: 52:d1:aa:65:90:ea:2c:d2:0f:10:ee:a4:15:3f:fa: 5a:40:9d:fc:c9:8e:ee:cd:1c:0e:3b:92:aa:59:1f: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:75:1D:F6:6E:C7:41:9D:4E:AB:86:C2:4E:7C:E9:8F:24:B4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ba7a84-1887-329f-8eb9-1b4f93ce51ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ad:2c:69:5e:08:38:86:6d:41:aa:6d:1a:c2:f1:ea:0a:a8: e1:60:d6:20:e3:83:d3:36:b7:b2:90:a5:f0:e0:eb:6a:3c:82: d8:17:f8:c3:1b:b8:92:6f:1c:0f:7f:81:bf:69:91:4b:19:59: 0d:6e:55:b1:c6:fc:e1:34:1d:2c:85:70:2b:a2:b1:f8:fa:fe: 8c:86:ae:c7:c3:db:4c:d9:6e:bf:dc:32:ae:c1:eb:86:21:46: 87:77:16:82:03:04:33:03:a2:da:af:07:72:48:22:48:66:14: f7:5c:60:dd:3c:07:47:87:86:ec:7f:40:bc:00:34:9d:6a:0a: 6d:07:67:8e:21:db:f8:60:c1:bb:85:ab:f4:e1:f2:65:48:5a: 6a:a8:0e:e4:b3:dd:e6:5e:16:67:b6:9b:48:e8:63:fc:bb:dc: 8f:f3:27:23:39:1f:f5:6b:db:4b:69:41:6a:eb:85:50:5a:59: f2:22:0b:3d:2e:aa:7a:94:b2:7e:ac:91:5a:74:63:ea:e3:a1: c9:3d:bb:24:ca:34:59:d9:c9:c1:86:9a:87:7e:7c:cb:90:cd: 28:51:b5:44:ac:c7:88:04:fd:17:90:38:a8:70:5f:db:27:13: 56:e9:64:6f:ce:85:82:c6:1d:af:82:d0:82:23:07:d3:cf:3a: 09:25:01:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4w70Zl95g6aHd+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTUzN1oXDTI1MTEyMzA5MTUzN1owLzEtMCsGA1UEAxMk ZjMxZDgyYWEtZTI2ZC00YzdjLTgyMDItOTQ3OTQzNTdjOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm5wxAsYGVHBpjAcSKYpgYQI4i3dciNdNARc KheZ9VjMt1iciB6HystzOQyDLeaUWNzovzF3dSs4smnuwKAqF2EIfaRWnIJHQx+w ALxVGGCX/8FXAGo7Kq4dqVzGoAcL9k4NzYlxEYoaGW9PLAnExCJ+2Cn2cdiXMsAo wFWzlv8aT3IYlE4pGcy9haBcrSMbBWv9XrXsjrsyv10M29Ac7sH1NpR/xxstpVMJ UDmF2nEdzBHVP/ZCeYWM7Q25wxFdce/bg4IiFMCKgKZCVWbcw3ZwuEbg1GxdDv6Y bveV7R5S0aplkOos0g8Q7qQVP/paQJ38yY7uzRwOO5KqWR949QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBodR32bsdBnU6rhsJOfOmPJLTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODFiYTdhODQtMTg4Ny0z MjlmLThlYjktMWI0ZjkzY2U1MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWtLGleCDiGbUGqbRrC8eoKqOFg1iDjg9M2t7KQpfDg62o8gtgX+MMb uJJvHA9/gb9pkUsZWQ1uVbHG/OE0HSyFcCuisfj6/oyGrsfD20zZbr/cMq7B64Yh Rod3FoIDBDMDotqvB3JIIkhmFPdcYN08B0eHhux/QLwANJ1qCm0HZ44h2/hgwbuF q/Th8mVIWmqoDuSz3eZeFme2m0joY/y73I/zJyM5H/Vr20tpQWrrhVBaWfIiCz0u qnqUsn6skVp0Y+rjock9uyTKNFnZycGGmod+fMuQzShRtUSsx4gE/ReQOKhwX9sn E1bpZG/OhYLGHa+C0IIjB9PPOgklAYY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:47 2025 by rpki-client