$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81c5f2d1-9345-3288-8e69-bf691629464d.roa File: 81c5f2d1-9345-3288-8e69-bf691629464d.roa (raw, json) Hash identifier: 5RwwQ3wRi0252g4u4eglxfE30h5b24JWWhNO5vPwi+o= Subject key identifier: 26:C1:A7:29:62:08:9B:79:0C:38:8C:7C:F2:EE:C3:F6:D0:27:69:63 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628C1112CA4D24BAEDA580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81c5f2d1-9345-3288-8e69-bf691629464d.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 140.238.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8c:11:12:ca:4d:24:ba:ed:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=42f636ec-2531-4af2-8c08-56d18c480ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4f:bc:33:76:e9:3c:9a:97:c3:4b:1b:0b:fc: 06:10:c4:55:af:1d:26:d0:35:6a:84:68:f8:cd:62: 81:0f:43:69:9d:6f:d1:41:e6:f1:18:eb:c1:7c:a5: f8:89:d5:97:9e:ac:a7:c6:2d:f4:78:d9:bf:2e:6f: 97:f9:6f:c5:2a:2c:74:f0:82:59:3e:22:97:46:0d: 96:61:98:87:1e:a6:d3:22:d7:ad:04:4a:f4:6c:6e: c2:ac:66:60:8c:5f:79:16:ed:bf:85:bb:bd:27:4a: 9e:25:60:90:44:b6:2c:da:ea:7f:df:e4:b7:b9:9e: b6:b2:39:6c:ba:a6:80:7c:e1:42:d9:d7:0c:58:02: b4:66:8e:64:90:2a:87:0e:93:e8:ac:60:f2:09:40: 60:d3:1e:9c:f8:5e:20:0d:41:dd:2c:13:cc:d2:4d: 88:40:3b:b6:c3:16:a6:a9:5a:63:16:47:15:c2:25: 11:b2:ba:ea:68:99:52:ea:44:b7:f5:e6:51:7c:59: 76:42:d1:d8:d5:ca:7a:31:75:61:b3:c8:3f:4d:29: dd:44:3b:a3:1b:fa:30:cf:02:26:0e:1a:ca:16:0f: 8d:21:ae:dd:16:0e:98:95:df:43:f6:18:31:75:f7: a8:5a:59:97:fb:ed:ec:26:9b:94:37:3d:2c:d7:de: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C1:A7:29:62:08:9B:79:0C:38:8C:7C:F2:EE:C3:F6:D0:27:69:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81c5f2d1-9345-3288-8e69-bf691629464d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b2:d2:96:cb:df:7f:d6:da:c2:fd:3f:20:cb:0c:aa:e5:c7: 2c:eb:cc:07:01:e2:3a:db:fe:e2:27:c2:69:f7:aa:de:4a:6f: 63:67:c7:32:68:d4:2b:6e:dc:6f:62:0a:e4:78:66:fa:90:4c: 8f:fb:f1:f9:1e:7e:91:6a:d7:13:1e:f3:12:4e:4e:38:48:dc: 33:39:a4:df:7e:b4:76:b3:ec:1b:43:02:f1:83:21:d1:d1:36: fa:ab:c1:20:6d:9f:f9:cd:14:28:c0:cf:a3:a4:71:50:00:15: b6:a8:06:9e:0d:5e:db:c5:ba:6d:54:83:08:12:fe:a9:22:8a: d1:bd:e2:9e:cd:b1:f3:79:b4:9d:1d:1f:cd:86:fd:20:29:88: a1:4b:53:f9:c2:91:9f:e9:f5:3c:02:c3:6b:21:9c:92:a2:7f: 74:28:0a:da:76:ee:0a:eb:af:f7:7a:a1:fc:17:e7:1d:eb:76: 85:71:00:a9:aa:56:f0:01:ba:ad:e3:90:65:38:83:01:60:69: d3:9e:d8:77:ec:c8:b8:eb:ca:d9:62:69:57:3c:88:fc:74:cb: d5:b6:29:0a:60:48:0c:a6:68:a8:fd:bd:72:46:c6:8c:4a:2a: 45:67:80:20:64:b7:0e:6e:8e:47:bb:42:a4:4b:09:51:74:25: 21:c6:5c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYowREspNJLrtpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NDJmNjM2ZWMtMjUzMS00YWYyLThjMDgtNTZkMThjNDgwY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU+8M3bpPJqXw0sbC/wGEMRVrx0m0DVqhGj4 zWKBD0NpnW/RQebxGOvBfKX4idWXnqynxi30eNm/Lm+X+W/FKix08IJZPiKXRg2W YZiHHqbTItetBEr0bG7CrGZgjF95Fu2/hbu9J0qeJWCQRLYs2up/3+S3uZ62sjls uqaAfOFC2dcMWAK0Zo5kkCqHDpPorGDyCUBg0x6c+F4gDUHdLBPM0k2IQDu2wxam qVpjFkcVwiURsrrqaJlS6kS39eZRfFl2QtHY1cp6MXVhs8g/TSndRDujG/owzwIm DhrKFg+NIa7dFg6Yld9D9hgxdfeoWlmX++3sJpuUNz0s194u1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbBpyliCJt5DDiMfPLuw/bQJ2ljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODFjNWYyZDEtOTM0NS0z Mjg4LThlNjktYmY2OTE2Mjk0NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWy0pbL33/W2sL9PyDLDKrlxyzrzAcB4jrb/uInwmn3qt5Kb2NnxzJo 1Ctu3G9iCuR4ZvqQTI/78fkefpFq1xMe8xJOTjhI3DM5pN9+tHaz7BtDAvGDIdHR NvqrwSBtn/nNFCjAz6OkcVAAFbaoBp4NXtvFum1UgwgS/qkiitG94p7NsfN5tJ0d H82G/SApiKFLU/nCkZ/p9TwCw2shnJKif3QoCtp27grrr/d6ofwX5x3rdoVxAKmq VvABuq3jkGU4gwFgadOe2HfsyLjrytliaVc8iPx0y9W2KQpgSAymaKj9vXJGxoxK KkVngCBktw5ujke7QqRLCVF0JSHGXOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:44 2025 by rpki-client