$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa File: fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa (raw, json) Hash identifier: 08YN3VH6mzp8NIWbvNZLLb2G0XupXKGdreWhacLy1vY= Subject key identifier: F6:19:1A:E5:11:34:08:2B:4A:6A:E5:9A:B2:3D:41:61:1A:22:8F:31 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C84C75A6AC22A215466A40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa Signing time: Mon 25 Aug 2025 17:00:37 +0000 ROA not before: Mon 25 Aug 2025 17:00:37 +0000 ROA not after: Sun 23 Nov 2025 18:00:37 +0000 asID: 31898 IP address blocks: 140.204.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:4c:75:a6:ac:22:a2:15:46:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:37 2025 GMT Not After : Nov 23 18:00:37 2025 GMT Subject: CN=57877743-5cca-43f8-a60d-c623a959c5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:d2:88:ac:20:31:56:0d:fc:db:85:96:a1: 4b:42:a7:86:c4:be:53:c7:01:6a:80:9c:2f:25:a7: 95:6a:8b:12:f5:9d:3f:dd:67:03:ca:38:38:26:aa: 92:82:03:b9:25:cc:53:7a:29:61:7f:78:b7:03:ec: c0:ef:66:1c:da:88:8c:48:d4:7e:1e:ef:f9:dc:37: 4d:aa:d2:6c:c9:03:dc:fd:44:a4:0c:50:8d:17:80: 1c:4c:47:c1:eb:57:e8:78:52:ac:24:f4:2f:91:ea: ca:dd:03:75:a7:c5:89:60:2e:f3:85:fa:f3:18:6a: 95:c5:61:87:10:04:c8:0b:d7:e3:d7:fe:7a:ad:5b: bd:89:93:fa:8b:fc:b1:35:b1:47:7f:4b:22:b7:64: ab:bc:2e:33:f5:d1:fd:27:8e:33:5c:85:ce:fc:51: 25:2b:d0:bf:64:30:a3:bc:0e:25:fa:3a:72:79:4b: 72:b2:2f:16:5a:74:52:39:e5:98:d7:02:cd:a1:f2: b7:49:6e:29:ae:9c:a3:6d:0a:68:ee:f1:6a:7f:20: d8:f6:98:39:14:0f:5e:14:e5:c3:67:f2:2e:ef:6e: 1b:30:f5:2b:fc:f7:15:00:99:09:21:bc:be:0e:66: e7:07:a3:47:c4:e2:70:75:65:47:51:c7:c9:2a:29: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:1A:E5:11:34:08:2B:4A:6A:E5:9A:B2:3D:41:61:1A:22:8F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6a:72:25:86:6d:38:46:e3:ce:c1:cd:bb:c9:fe:75:dc:03: a3:80:a7:4f:a9:5d:11:62:67:bc:33:9a:f5:20:ba:89:65:aa: 50:a8:a2:b3:dc:79:95:89:f8:55:62:85:f4:70:15:04:0f:83: 9a:78:7f:db:7e:ae:d2:49:cb:90:ba:29:29:60:fa:85:95:5b: b9:2e:b0:c6:f3:16:45:89:fd:b9:7b:24:72:32:b5:62:10:4e: f9:e5:21:f9:09:26:35:f1:46:a5:28:26:3c:33:4f:3d:b0:32: db:0a:39:45:42:c7:2f:a6:0d:d5:a2:e1:7a:67:3e:4e:19:8a: 00:aa:3a:3a:e9:54:ce:5e:99:99:d3:85:4d:68:1f:28:fa:4d: d2:0c:03:7f:dd:67:38:0a:cb:d9:76:8d:15:3d:5a:93:e3:ff: 78:2e:91:86:22:a4:16:76:a0:44:1f:2f:b6:1b:a4:f6:b6:f3: f2:26:7a:1a:a0:36:6f:45:81:25:d9:d7:60:fb:3a:b1:25:81: d4:68:f9:52:54:09:24:3e:5f:d1:8b:ed:86:f3:75:f0:b1:15: 92:79:34:00:d5:b8:2f:95:88:f1:66:f2:30:90:86:b1:38:9a: e4:39:c5:fe:fc:15:12:f7:ad:7f:fb:91:93:7d:7c:f0:50:61: 45:27:33:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yEx1pqwiohVGakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzN1oXDTI1MTEyMzE4MDAzN1owLzEtMCsGA1UEAxMk NTc4Nzc3NDMtNWNjYS00M2Y4LWE2MGQtYzYyM2E5NTljNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVfSiKwgMVYN/NuFlqFLQqeGxL5TxwFqgJwv JaeVaosS9Z0/3WcDyjg4JqqSggO5JcxTeilhf3i3A+zA72Yc2oiMSNR+Hu/53DdN qtJsyQPc/USkDFCNF4AcTEfB61foeFKsJPQvkerK3QN1p8WJYC7zhfrzGGqVxWGH EATIC9fj1/56rVu9iZP6i/yxNbFHf0sit2SrvC4z9dH9J44zXIXO/FElK9C/ZDCj vA4l+jpyeUtysi8WWnRSOeWY1wLNofK3SW4prpyjbQpo7vFqfyDY9pg5FA9eFOXD Z/Iu724bMPUr/PcVAJkJIby+DmbnB6NHxOJwdWVHUcfJKim7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYZGuURNAgrSmrlmrI9QWEaIo8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRmYzQwODUtZGI4NS0z YjVlLThmYTAtNzJlNTZhNzg0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJqciWGbThG487BzbvJ/nXcA6OAp0+pXRFiZ7wzmvUguollqlCoorPc eZWJ+FVihfRwFQQPg5p4f9t+rtJJy5C6KSlg+oWVW7kusMbzFkWJ/bl7JHIytWIQ TvnlIfkJJjXxRqUoJjwzTz2wMtsKOUVCxy+mDdWi4XpnPk4ZigCqOjrpVM5emZnT hU1oHyj6TdIMA3/dZzgKy9l2jRU9WpPj/3gukYYipBZ2oEQfL7YbpPa28/Imehqg Nm9FgSXZ12D7OrElgdRo+VJUCSQ+X9GL7YbzdfCxFZJ5NADVuC+ViPFm8jCQhrE4 muQ5xf78FRL3rX/7kZN9fPBQYUUnM7M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:51 2025 by rpki-client