$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa File: 0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa (raw, json) Hash identifier: /IteDeFpZTQWhTVRPk9TvkroMuNFYi9zPXcXahTslMQ= Subject key identifier: 09:73:FF:5E:AB:9C:C2:ED:8B:51:84:93:E5:CB:6A:1B:B7:F9:A4:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF55F2B2A2FAD83848816100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa Signing time: Thu 21 Aug 2025 23:12:08 +0000 ROA not before: Thu 21 Aug 2025 23:12:08 +0000 ROA not after: Thu 20 Nov 2025 00:12:08 +0000 asID: 31898 IP address blocks: 140.91.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:f2:b2:a2:fa:d8:38:48:81:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:12:08 2025 GMT Not After : Nov 20 00:12:08 2025 GMT Subject: CN=c8957f8c-10c3-4096-9366-32392df3eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:64:16:65:a8:da:ce:d3:18:50:92:27:5c: 33:32:80:62:27:22:65:45:37:6a:89:78:aa:90:d6: 62:84:86:68:ce:ce:14:3c:23:87:0e:82:21:7a:f6: c3:f7:b1:2f:1a:76:e4:99:9f:56:e8:57:bd:ff:e1: 88:d4:6c:1b:d0:55:bf:df:12:c7:64:12:2c:8a:09: d6:45:13:7b:63:30:45:88:30:d0:45:9f:82:e5:32: af:2b:1f:71:eb:c7:1d:65:50:00:50:4d:3d:f3:dd: 27:4c:f1:4f:6a:40:34:60:88:5a:48:dc:70:5e:ad: aa:1c:a2:35:6f:dd:d8:53:ea:cd:db:89:01:1a:21: aa:60:0b:58:04:0d:2c:11:d3:7a:32:4f:06:3c:86: a3:cb:db:04:b3:31:76:5e:95:4a:5c:55:26:46:8c: 9e:c7:51:5c:68:f6:f2:21:09:32:5a:07:02:27:4b: 4b:2c:03:39:da:8a:02:e1:d5:08:43:d4:77:10:c2: 0b:de:81:d5:13:b9:c7:af:d8:21:47:8a:52:58:6c: 57:e3:86:2e:87:c5:da:46:fa:f9:5c:09:54:c9:f9: db:d5:bc:9d:07:d1:d7:b7:8b:ba:ab:52:cb:ab:f3: 3c:1a:ef:43:7e:3f:b4:80:7b:15:21:16:e6:f1:10: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:73:FF:5E:AB:9C:C2:ED:8B:51:84:93:E5:CB:6A:1B:B7:F9:A4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c3:06:c6:14:2a:47:e8:bb:71:08:c2:3f:a7:92:e2:c3:a1: 40:fa:00:29:b5:fa:65:b9:a9:2e:a1:99:1f:fe:d1:b4:58:a8: 63:ab:43:df:44:42:13:de:8a:3e:10:d6:d6:e7:35:7e:7a:d5: 59:99:27:7e:0c:90:c1:11:1d:85:90:83:27:cd:87:a6:29:d2: bd:ab:36:23:51:ff:cd:54:3a:46:77:1a:8c:1d:bc:b6:0c:bb: 50:b3:6f:33:54:ec:84:49:eb:dc:8e:6e:00:ce:f7:6a:c1:07: aa:3d:84:d2:6f:4d:34:22:62:f7:46:21:d4:7e:70:a8:db:9e: ed:49:f0:2d:9d:44:d0:62:f9:72:64:a4:08:27:bd:4f:1b:fc: 76:73:88:85:7c:25:a3:f1:fd:35:bf:e1:6d:e1:61:f6:26:e5: 93:33:76:f1:0f:ca:96:31:95:1c:1e:61:2e:52:5b:3f:07:dd: eb:14:ce:1c:67:ba:8c:76:f6:62:24:09:20:b0:39:82:7e:e7: 06:a3:38:52:75:88:af:14:dd:4b:d3:65:f2:d6:a1:ad:6b:86: b1:a0:92:b5:7a:a3:84:be:a3:c1:e8:31:62:79:12:eb:0b:ee: 0c:49:4a:93:fd:36:8c:b9:70:3d:75:a8:a7:09:77:28:d4:50: 33:72:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVfKyovrYOEiBYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTIwOFoXDTI1MTEyMDAwMTIwOFowLzEtMCsGA1UEAxMk Yzg5NTdmOGMtMTBjMy00MDk2LTkzNjYtMzIzOTJkZjNlYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuRkFmWo2s7TGFCSJ1wzMoBiJyJlRTdqiXiq kNZihIZozs4UPCOHDoIhevbD97EvGnbkmZ9W6Fe9/+GI1Gwb0FW/3xLHZBIsignW RRN7YzBFiDDQRZ+C5TKvKx9x68cdZVAAUE09890nTPFPakA0YIhaSNxwXq2qHKI1 b93YU+rN24kBGiGqYAtYBA0sEdN6Mk8GPIajy9sEszF2XpVKXFUmRoyex1FcaPby IQkyWgcCJ0tLLAM52ooC4dUIQ9R3EMIL3oHVE7nHr9ghR4pSWGxX44Yuh8XaRvr5 XAlUyfnb1bydB9HXt4u6q1LLq/M8Gu9Dfj+0gHsVIRbm8RBA8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlz/16rnMLti1GEk+XLahu3+aSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGVlOWRmZjEtZjFjOS0z ZjY3LTg2YzEtZmZiODljZmIxYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrDBsYUKkfou3EIwj+nkuLDoUD6ACm1+mW5qS6hmR/+0bRYqGOrQ99E QhPeij4Q1tbnNX561VmZJ34MkMERHYWQgyfNh6Yp0r2rNiNR/81UOkZ3GowdvLYM u1CzbzNU7IRJ69yObgDO92rBB6o9hNJvTTQiYvdGIdR+cKjbnu1J8C2dRNBi+XJk pAgnvU8b/HZziIV8JaPx/TW/4W3hYfYm5ZMzdvEPypYxlRweYS5SWz8H3esUzhxn uox29mIkCSCwOYJ+5wajOFJ1iK8U3UvTZfLWoa1rhrGgkrV6o4S+o8HoMWJ5EusL 7gxJSpP9Noy5cD11qKcJdyjUUDNyX/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:27 2025 by rpki-client