$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa File: d4a5841e-1125-300e-a883-2ae9d79385d3.roa (raw, json) Hash identifier: 0ihy4zke6X9vSgvSLrqnvNLasDPbHt6ZiWb8nVa+9vg= Subject key identifier: 11:51:46:99:B4:8A:64:97:1F:CE:38:EB:90:1C:F4:32:B5:12:C1:9D Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584B20968021E2F42FCEA16FB180 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa Signing time: Mon 08 Sep 2025 14:36:48 +0000 ROA not before: Mon 08 Sep 2025 14:36:48 +0000 ROA not after: Sun 07 Dec 2025 15:36:48 +0000 asID: 32346 IP address blocks: 140.235.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:96:80:21:e2:f4:2f:ce:a1:6f:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Sep 8 14:36:48 2025 GMT Not After : Dec 7 15:36:48 2025 GMT Subject: CN=210d8f8d-8539-4738-a2be-78bc5ad5437c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:da:cd:c5:b5:19:22:f1:6c:6e:27:79:ab: 14:7d:78:5c:bd:1f:c6:17:25:e2:c2:18:68:22:28: e1:2b:ab:ca:7e:95:9a:d4:13:6b:76:f6:e2:75:97: b0:82:e3:c8:df:37:8f:49:aa:0d:a7:9a:73:2f:1d: a6:bb:65:0e:d7:32:8b:b3:36:3d:ed:65:1f:d0:68: 08:ff:46:de:69:01:dc:31:48:57:0f:20:a8:03:ac: dc:5c:be:c1:60:47:95:41:4e:07:0a:d6:e1:53:7b: be:eb:8c:7f:a9:ed:d1:2f:d0:87:64:bc:33:07:d8: 7f:9b:74:65:c5:53:90:33:9e:46:c7:81:45:81:52: 41:31:12:c4:07:02:05:57:08:fe:e3:95:5a:60:ff: d8:22:74:18:76:6f:05:61:b3:de:0f:1d:b0:bb:ea: 92:2c:3c:f6:1e:1d:8c:3f:ed:8b:56:63:d7:db:0f: 06:00:d7:69:0f:a6:8e:d2:4f:d8:bd:1d:1b:43:de: 04:e2:d8:43:1c:d4:63:cd:b8:35:69:a2:a9:1d:08: 80:a4:5e:97:6c:24:61:c7:bc:f3:ba:76:28:80:b8: 58:a4:03:09:7e:a9:13:8c:85:74:eb:10:2f:27:6a: 29:75:d1:47:d8:f9:94:fd:50:75:ad:c4:f7:ec:08: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:46:99:B4:8A:64:97:1F:CE:38:EB:90:1C:F4:32:B5:12:C1:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:48:b2:73:eb:ec:b0:0e:55:af:89:ad:b3:bd:62:43:4e:5e: 23:1c:24:11:4b:da:e8:0b:83:77:20:b1:c3:10:7e:db:46:5d: ff:83:93:76:52:81:f7:1a:b1:67:8b:6f:28:8b:0f:6f:47:b1: a2:f8:4e:ca:cc:b1:d5:9f:72:d7:ed:e4:a1:62:cd:a9:de:32: d9:84:02:97:0e:58:e1:3c:dd:3f:a8:82:70:b5:58:dd:56:68: 85:06:58:b0:6e:4e:93:02:e0:6d:28:f2:51:f3:8b:b1:5f:a3: f0:c6:37:54:42:0a:a9:cd:b5:20:1b:60:22:46:bf:2b:bd:7f: 64:2b:72:3a:c4:c2:e0:90:a1:95:a5:ea:07:47:5d:29:ab:e1: af:82:28:ed:4e:8b:11:b2:b3:83:15:cd:6e:6d:18:68:87:39: 79:a1:51:63:06:f9:83:c8:53:0f:2d:04:47:db:04:54:87:d7: eb:2f:17:cc:b2:5c:74:ef:7a:1d:4d:b2:e7:6f:80:b8:f9:36: dc:07:3c:1b:7c:34:8f:b3:0a:e2:20:14:b6:39:b4:48:0e:13: e4:18:9a:a2:74:52:79:25:21:2e:6b:23:34:47:f0:73:81:ea: 14:9e:d9:11:0f:c7:65:d0:41:ba:dd:45:1b:31:95:82:ae:87: af:16:45:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgloAh4vQvzqFvsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MDkwODE0MzY0OFoXDTI1MTIwNzE1MzY0OFowLzEtMCsGA1UEAxMk MjEwZDhmOGQtODUzOS00NzM4LWEyYmUtNzhiYzVhZDU0MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKnazcW1GSLxbG4neasUfXhcvR/GFyXiwhho IijhK6vKfpWa1BNrdvbidZewguPI3zePSaoNp5pzLx2mu2UO1zKLszY97WUf0GgI /0beaQHcMUhXDyCoA6zcXL7BYEeVQU4HCtbhU3u+64x/qe3RL9CHZLwzB9h/m3Rl xVOQM55Gx4FFgVJBMRLEBwIFVwj+45VaYP/YInQYdm8FYbPeDx2wu+qSLDz2Hh2M P+2LVmPX2w8GANdpD6aO0k/YvR0bQ94E4thDHNRjzbg1aaKpHQiApF6XbCRhx7zz unYogLhYpAMJfqkTjIV06xAvJ2opddFH2PmU/VB1rcT37Ah60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFRRpm0imSXH84465Ac9DK1EsGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvZDRhNTg0MWUtMTEyNS0z MDBlLWE4ODMtMmFlOWQ3OTM4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1IsnPr7LAOVa+JrbO9YkNOXiMcJBFL2ugLg3cgscMQfttGXf+Dk3ZS gfcasWeLbyiLD29HsaL4TsrMsdWfctft5KFizaneMtmEApcOWOE83T+ognC1WN1W aIUGWLBuTpMC4G0o8lHzi7Ffo/DGN1RCCqnNtSAbYCJGvyu9f2QrcjrEwuCQoZWl 6gdHXSmr4a+CKO1OixGys4MVzW5tGGiHOXmhUWMG+YPIUw8tBEfbBFSH1+svF8yy XHTveh1NsudvgLj5NtwHPBt8NI+zCuIgFLY5tEgOE+QYmqJ0UnklIS5rIzRH8HOB 6hSe2REPx2XQQbrdRRsxlYKuh68WRQc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:21:21 2025 by rpki-client