$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e78e82b-77a1-32b3-b39e-f8718d9f6695.roa File: 3e78e82b-77a1-32b3-b39e-f8718d9f6695.roa (raw, json) Hash identifier: OVtcmcOWlwKtnW2FNyPD2v85nwpRzgSF6vaWlYovX+w= Subject key identifier: 9D:F0:2D:56:D9:3B:78:EC:CC:4F:46:8E:20:05:FA:AF:BD:0E:D6:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF55F56429FB07C525A948C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e78e82b-77a1-32b3-b39e-f8718d9f6695.roa Signing time: Thu 21 Aug 2025 23:12:09 +0000 ROA not before: Thu 21 Aug 2025 23:12:09 +0000 ROA not after: Thu 20 Nov 2025 00:12:09 +0000 asID: 31898 IP address blocks: 140.91.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:f5:64:29:fb:07:c5:25:a9:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:12:09 2025 GMT Not After : Nov 20 00:12:09 2025 GMT Subject: CN=be2d7288-4cc2-49fa-ae63-5602eec9e999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:2f:43:e8:59:24:90:bc:f1:60:ab:36:c7: c9:d5:5d:8d:96:f4:e1:d2:d4:29:32:94:74:c2:83: 5c:6a:f7:ea:7a:ca:9b:15:3d:93:dd:44:e8:c0:66: 31:db:96:a1:51:54:00:63:57:06:1b:23:b2:55:f0: df:a5:c4:d2:8e:97:b9:51:7c:ba:fa:cb:29:ba:89: e1:45:1f:28:36:3d:85:37:7e:8c:93:bf:b5:68:ed: 56:c0:3b:79:2c:82:a0:5e:db:26:ab:6f:88:c8:89: cf:66:dc:d2:cd:ac:6b:16:44:57:94:65:88:46:bd: 92:e3:d6:0b:67:12:38:fe:25:b9:58:96:5d:49:5a: 35:5f:82:92:88:2f:c0:01:d4:42:dc:40:d3:58:ca: 18:9d:ac:10:1d:55:2e:6d:84:f0:bb:9a:be:2b:f9: 24:36:a7:38:19:1c:21:30:0c:57:5d:1c:d2:c5:02: 3b:06:d2:4a:73:f3:d9:0f:1b:da:96:d6:75:e6:4b: 2a:09:74:d5:f3:f8:68:ce:b4:e6:c2:a1:1c:11:59: 2d:b7:c3:84:78:11:6c:47:6b:14:5b:17:17:0e:20: 28:39:a9:a5:2b:e5:ff:84:74:58:50:34:e5:3b:da: b2:19:d7:2d:f2:1a:e1:58:ea:50:04:bd:57:e1:26: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F0:2D:56:D9:3B:78:EC:CC:4F:46:8E:20:05:FA:AF:BD:0E:D6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e78e82b-77a1-32b3-b39e-f8718d9f6695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:20:fa:d2:3f:a0:e1:8c:04:2d:dc:9d:8a:56:46:fb:f5:7a: 77:2a:db:06:cc:ef:f5:88:a6:67:f0:21:10:f2:d0:63:0d:ed: b5:03:90:ed:a3:5e:99:e9:0d:4d:b7:e5:73:0c:1e:a7:a3:51: a2:87:4e:5d:f3:41:96:68:f6:d7:7e:41:41:ed:e2:64:f0:c0: a6:3d:37:72:d8:29:f8:dc:5e:ce:16:c6:5a:a2:ed:26:b8:2d: 8d:b2:73:aa:a1:33:e4:39:b1:50:bc:a0:7f:8f:a6:ba:72:67: d5:d9:4c:ec:43:f9:d1:d8:03:71:84:c1:2f:e2:82:9a:21:9f: 2e:52:20:24:e9:2f:4e:72:db:cc:de:24:e5:a1:07:be:3e:56: 09:5b:72:09:6a:d1:81:08:95:d4:d5:bd:01:3f:5b:b3:90:d3: c0:2d:01:3f:af:ef:f2:87:3b:d9:dd:36:3c:81:09:f3:3a:88: c6:fa:6d:c5:52:4c:4e:ed:cf:60:4b:b5:6b:e3:c1:69:50:6d: ad:78:3c:4a:91:58:cf:9e:cf:05:c3:1e:34:c2:2a:79:7f:a7: 2c:63:0d:36:e3:87:3b:0f:c3:25:83:79:ce:c9:93:52:f1:3c: a0:cb:37:15:9f:1b:9e:94:dd:42:90:7d:b7:65:07:c4:94:0f: a0:11:7a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVfVkKfsHxSWpSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTIwOVoXDTI1MTEyMDAwMTIwOVowLzEtMCsGA1UEAxMk YmUyZDcyODgtNGNjMi00OWZhLWFlNjMtNTYwMmVlYzllOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tIvQ+hZJJC88WCrNsfJ1V2NlvTh0tQpMpR0 woNcavfqesqbFT2T3UTowGYx25ahUVQAY1cGGyOyVfDfpcTSjpe5UXy6+sspuonh RR8oNj2FN36Mk7+1aO1WwDt5LIKgXtsmq2+IyInPZtzSzaxrFkRXlGWIRr2S49YL ZxI4/iW5WJZdSVo1X4KSiC/AAdRC3EDTWMoYnawQHVUubYTwu5q+K/kkNqc4GRwh MAxXXRzSxQI7BtJKc/PZDxvaltZ15ksqCXTV8/hozrTmwqEcEVktt8OEeBFsR2sU WxcXDiAoOamlK+X/hHRYUDTlO9qyGdct8hrhWOpQBL1X4Saf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3wLVbZO3jszE9GjiAF+q+9DtawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U3OGU4MmItNzdhMS0z MmIzLWIzOWUtZjg3MThkOWY2Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEg+tI/oOGMBC3cnYpWRvv1encq2wbM7/WIpmfwIRDy0GMN7bUDkO2j XpnpDU235XMMHqejUaKHTl3zQZZo9td+QUHt4mTwwKY9N3LYKfjcXs4Wxlqi7Sa4 LY2yc6qhM+Q5sVC8oH+PprpyZ9XZTOxD+dHYA3GEwS/igpohny5SICTpL05y28ze JOWhB74+Vglbcglq0YEIldTVvQE/W7OQ08AtAT+v7/KHO9ndNjyBCfM6iMb6bcVS TE7tz2BLtWvjwWlQba14PEqRWM+ezwXDHjTCKnl/pyxjDTbjhzsPwyWDec7Jk1Lx PKDLNxWfG56U3UKQfbdlB8SUD6ARejE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:25 2025 by rpki-client