$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa File: 2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa (raw, json) Hash identifier: bSr41FO8fzFpB4+U/yY4V8+prdctvVe9zEvM00qYi9Y= Subject key identifier: 76:3D:F8:28:70:5D:97:E5:40:76:4B:E5:17:47:AA:A8:C9:19:D3:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB441240AA4562A037314C60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa Signing time: Wed 20 Aug 2025 12:12:53 +0000 ROA not before: Wed 20 Aug 2025 12:12:53 +0000 ROA not after: Tue 18 Nov 2025 13:12:53 +0000 asID: 31898 IP address blocks: 140.91.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:12:40:aa:45:62:a0:37:31:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:53 2025 GMT Not After : Nov 18 13:12:53 2025 GMT Subject: CN=c44fa823-e491-41b3-baa5-f64a9641011f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:66:8b:c0:c0:10:86:d1:fe:ae:67:e0:2d: 4d:a6:57:47:0e:83:10:17:92:65:b0:7d:f0:1b:26: 65:59:3b:ea:d8:40:0a:53:97:41:97:41:e2:8d:70: 90:a3:e2:18:55:41:e4:92:66:22:e2:00:c0:5d:42: c1:6a:2e:f4:14:7b:bc:75:6b:78:65:1f:c0:65:7f: b0:5e:b4:ac:f0:8c:60:76:84:be:bc:2a:26:e0:23: 7c:f1:55:30:1a:98:22:17:4b:1b:42:4b:62:54:76: 40:51:af:79:03:83:da:d0:7f:35:a4:1c:13:cf:09: 9a:52:ae:46:bf:61:e7:49:d8:b0:ea:98:d7:c0:ca: 34:a6:b4:35:6f:92:f2:8b:5f:57:58:a1:ee:80:f0: 22:3c:25:e5:c4:41:1d:78:a1:1a:77:00:86:e8:93: c6:c8:b7:db:6f:69:2a:cc:36:b8:7d:5c:35:9e:3c: 8e:6d:89:e2:7f:88:1b:1b:0a:d8:14:52:37:ec:e3: be:96:92:9f:b0:ef:9d:37:d1:19:cf:76:6c:e1:d9: 33:2a:6a:07:65:29:ca:52:1d:ef:37:ff:29:98:0d: 9d:99:a8:46:b1:e1:44:d2:9e:82:a0:27:49:7c:03: eb:86:6c:8f:8f:38:e8:3c:ab:bf:b9:2c:73:01:51: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:F8:28:70:5D:97:E5:40:76:4B:E5:17:47:AA:A8:C9:19:D3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e7:e7:41:f8:9e:d3:47:f4:ab:5f:d0:72:16:cc:6a:b3:4b: dc:4f:da:da:f5:26:74:77:b9:05:5e:01:dc:61:5b:43:54:25: aa:04:f1:1c:59:e4:49:d5:b9:77:9e:3a:13:d1:f5:66:2e:a4: ac:5f:a2:46:8c:44:7c:f6:36:7a:0b:b0:b5:15:e6:23:ee:be: dc:2f:ce:72:d6:c9:7f:4a:0d:c1:c8:39:66:64:c8:63:c1:7f: 15:3b:98:a9:3f:b2:2a:51:b0:82:6f:12:df:f5:a8:5b:38:04: a0:8e:6f:62:c1:b5:ba:aa:23:bc:79:bb:c6:bc:96:fb:a4:d1: 79:c2:47:c7:f3:66:b9:d7:79:48:7b:b0:54:f7:07:85:e0:62: 31:9d:b9:d1:10:98:0d:8b:8b:72:47:41:e7:62:15:28:0a:f2: 9f:7d:08:88:18:32:f4:73:7e:32:79:34:ee:59:7a:cb:94:27: 4f:2d:17:dc:b2:ba:56:00:c8:5d:4a:a2:72:e8:e2:e9:ee:95: 3a:35:09:05:af:cb:b5:ff:30:cb:5c:0d:b0:6a:52:1e:52:d1: 8e:83:21:c0:c6:b2:74:20:28:7b:95:35:f3:55:58:f9:e2:13: d8:7d:58:61:24:be:d8:f4:25:2b:b3:f0:ba:fb:84:41:d7:7c: fa:cd:9c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrRBJAqkVioDcxTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1M1oXDTI1MTExODEzMTI1M1owLzEtMCsGA1UEAxMk YzQ0ZmE4MjMtZTQ5MS00MWIzLWJhYTUtZjY0YTk2NDEwMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rlmi8DAEIbR/q5n4C1NpldHDoMQF5JlsH3w GyZlWTvq2EAKU5dBl0HijXCQo+IYVUHkkmYi4gDAXULBai70FHu8dWt4ZR/AZX+w XrSs8IxgdoS+vCom4CN88VUwGpgiF0sbQktiVHZAUa95A4Pa0H81pBwTzwmaUq5G v2HnSdiw6pjXwMo0prQ1b5Lyi19XWKHugPAiPCXlxEEdeKEadwCG6JPGyLfbb2kq zDa4fVw1njyObYnif4gbGwrYFFI37OO+lpKfsO+dN9EZz3Zs4dkzKmoHZSnKUh3v N/8pmA2dmahGseFE0p6CoCdJfAPrhmyPjzjoPKu/uSxzAVE+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY9+ChwXZflQHZL5RdHqqjJGdMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjU5MWU4YWQtYjNjMi0z MmE3LTg5NjMtZjZhNWFhNmVhY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvn50H4ntNH9Ktf0HIWzGqzS9xP2tr1JnR3uQVeAdxhW0NUJaoE8RxZ 5EnVuXeeOhPR9WYupKxfokaMRHz2NnoLsLUV5iPuvtwvznLWyX9KDcHIOWZkyGPB fxU7mKk/sipRsIJvEt/1qFs4BKCOb2LBtbqqI7x5u8a8lvuk0XnCR8fzZrnXeUh7 sFT3B4XgYjGdudEQmA2Li3JHQediFSgK8p99CIgYMvRzfjJ5NO5ZesuUJ08tF9yy ulYAyF1KonLo4unulTo1CQWvy7X/MMtcDbBqUh5S0Y6DIcDGsnQgKHuVNfNVWPni E9h9WGEkvtj0JSuz8Lr7hEHXfPrNnEY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:12 2025 by rpki-client