$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa File: cba13dc5-cfa9-376d-9faf-347489e5b71a.roa (raw, json) Hash identifier: SVVo1XGubflYukAQH4ybmdXVHkCA5DGZacwl4jY4yGs= Subject key identifier: DA:10:E9:ED:AC:7F:A7:99:B6:C9:28:71:82:17:66:59:C4:21:5F:19 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584B7F525F6CBAB6A5E37366A120 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 32135 IP address blocks: 140.235.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5f:6c:ba:b6:a5:e3:73:66:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=cad0f74c-be27-4549-a82e-e2f2c25915d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:6e:68:7e:1b:0c:dd:41:11:ff:5f:48:34: 45:a3:75:ff:b3:97:8e:0a:87:f1:09:52:d5:5d:09: 28:35:57:85:bf:95:ec:84:ba:cd:cc:af:5a:7b:5d: d6:72:cd:d5:5c:44:90:e8:25:33:cf:2e:c6:d7:c2: 07:5f:ed:e6:fa:8a:77:3d:44:bf:99:65:0e:49:ac: 44:43:e7:af:30:2d:0d:c7:a9:34:e9:fb:4d:25:e8: f0:cf:42:ac:30:7a:44:89:e3:c8:d1:8d:a3:a8:0d: 93:2b:17:5f:02:b1:2d:75:95:fb:de:6b:de:cd:ba: 85:f4:76:03:f8:d5:b2:4e:59:0e:f6:bd:73:47:43: d6:d9:d7:e5:c4:b9:04:8c:d5:7a:a8:12:86:60:d5: be:b7:4a:75:12:72:10:b7:0b:40:51:55:67:6d:d6: c4:03:34:a2:9a:b6:58:1b:e7:f1:54:2e:ed:48:5c: eb:49:e5:da:50:14:3a:c0:7c:cc:20:e6:b0:7b:74: 20:30:e8:4c:06:ea:e5:90:2d:33:82:4b:b5:5c:ca: a7:da:e7:2c:6b:fa:11:d2:97:a7:07:36:ec:9d:f8: 9e:2d:d5:bb:ef:d1:f1:3b:ce:51:b9:02:fe:23:87: 3b:ec:4b:f6:f1:6e:28:65:de:76:ce:6e:6c:33:0e: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:10:E9:ED:AC:7F:A7:99:B6:C9:28:71:82:17:66:59:C4:21:5F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7b:00:ed:9c:c7:a2:3d:0e:ab:0e:6a:78:f0:40:00:be:13: d3:7c:70:52:b8:78:19:6f:5c:ec:24:4e:86:ae:41:9a:cb:67: 92:53:02:88:61:1a:b5:4a:e8:b7:70:c6:43:8a:f0:2a:cd:1c: d7:9e:9a:dd:94:c9:48:ce:fc:84:a9:50:ec:d3:fe:0c:87:ce: c7:10:62:ff:d3:1d:02:c6:7c:c2:fd:f1:3a:47:45:7d:26:1f: 52:1e:85:d5:d4:48:03:64:bf:61:0d:44:e8:cd:1d:ce:f4:ad: 64:f7:91:54:de:79:ae:50:92:51:77:97:cf:c8:6f:f9:1a:f4: 33:6b:b3:3b:33:2c:84:2b:75:92:56:5d:50:22:f8:7f:c6:48: 90:4c:6d:8c:5b:19:0c:f0:a9:c9:c9:30:1a:0a:59:0a:8a:eb: e4:63:b6:4e:46:5b:f7:c5:30:b3:66:8a:31:f0:d3:97:3c:24: c2:02:a4:8d:8c:c0:fa:83:ce:2d:39:49:8f:79:14:2f:b5:6f: 1e:03:5f:3e:a8:2e:79:1b:24:50:2f:97:40:de:6f:7e:dd:ef: 12:91:f9:35:e8:89:c3:5a:cd:ff:37:4c:37:e0:de:d9:dd:26: 57:77:d9:a5:73:b9:8e:71:3e:16:d2:44:7f:cc:9d:76:74:a6: f7:ee:7d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul9sural43NmoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2FkMGY3NGMtYmUyNy00NTQ5LWE4MmUtZTJmMmMyNTkxNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt01uaH4bDN1BEf9fSDRFo3X/s5eOCofxCVLV XQkoNVeFv5XshLrNzK9ae13Wcs3VXESQ6CUzzy7G18IHX+3m+op3PUS/mWUOSaxE Q+evMC0Nx6k06ftNJejwz0KsMHpEiePI0Y2jqA2TKxdfArEtdZX73mvezbqF9HYD +NWyTlkO9r1zR0PW2dflxLkEjNV6qBKGYNW+t0p1EnIQtwtAUVVnbdbEAzSimrZY G+fxVC7tSFzrSeXaUBQ6wHzMIOawe3QgMOhMBurlkC0zgku1XMqn2ucsa/oR0pen BzbsnfieLdW779HxO85RuQL+I4c77Ev28W4oZd52zm5sMw66XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoQ6e2sf6eZtskocYIXZlnEIV8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvY2JhMTNkYzUtY2ZhOS0z NzZkLTlmYWYtMzQ3NDg5ZTViNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp7AO2cx6I9DqsOanjwQAC+E9N8cFK4eBlvXOwkToauQZrLZ5JTAohh GrVK6LdwxkOK8CrNHNeemt2UyUjO/ISpUOzT/gyHzscQYv/THQLGfML98TpHRX0m H1IehdXUSANkv2ENROjNHc70rWT3kVTeea5QklF3l8/Ib/ka9DNrszszLIQrdZJW XVAi+H/GSJBMbYxbGQzwqcnJMBoKWQqK6+Rjtk5GW/fFMLNmijHw05c8JMICpI2M wPqDzi05SY95FC+1bx4DXz6oLnkbJFAvl0Deb37d7xKR+TXoicNazf83TDfg3tnd Jld32aVzuY5xPhbSRH/MnXZ0pvfufd0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:03 2025 by rpki-client