$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa File: 4b862b71-d3d0-36db-b16c-8690ee9df696.roa (raw, json) Hash identifier: 9GjBdeSOE4uUSCTmiRMG302WyNgfEjI208Ughnm6qa0= Subject key identifier: 42:78:DC:E8:36:44:05:07:C1:DE:9D:07:A6:99:22:5A:28:96:F6:7E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C8CE8FD605D9871A83C40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa Signing time: Wed 20 Aug 2025 21:05:46 +0000 ROA not before: Wed 20 Aug 2025 21:05:46 +0000 ROA not after: Tue 18 Nov 2025 22:05:46 +0000 asID: 31898 IP address blocks: 140.91.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:8c:e8:fd:60:5d:98:71:a8:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:46 2025 GMT Not After : Nov 18 22:05:46 2025 GMT Subject: CN=6d39afaa-7285-491b-a1a1-4c9c7e373c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:aa:5b:06:9d:60:fe:97:f4:15:b1:ac:1f: e4:08:63:06:8c:a7:61:a6:b1:85:2c:e4:90:60:a6: 03:fe:65:fd:7a:92:d3:d1:e7:06:db:ef:93:5c:65: 71:7e:1b:f7:73:77:38:80:e1:ad:f7:76:44:f7:87: 91:f2:05:8c:69:0d:7f:df:30:23:88:51:01:99:0a: 3a:24:6b:0f:84:8a:36:10:26:20:bd:80:c6:e3:c7: 0b:31:86:72:fc:14:89:5e:40:49:93:56:83:08:0f: d6:30:32:6b:0e:9a:f7:81:16:03:75:57:3e:1a:4b: b6:3c:e8:79:3d:ef:0b:d8:d1:4a:cc:ef:d4:0e:cb: 2c:21:d4:03:7b:ef:89:73:68:01:74:43:ed:75:06: 01:62:4e:e9:69:ad:6c:f0:33:07:81:30:1e:6a:06: 3a:1f:97:b7:32:8e:e0:2a:07:b2:ed:49:6c:bc:ab: 98:fa:a3:8d:35:a9:63:2c:4e:3f:23:90:98:c7:5b: e0:51:60:ae:36:11:a4:0f:4d:20:3f:c2:b9:b2:e8: a5:1b:69:15:7d:ab:91:a6:72:84:ad:7c:54:d9:69: 30:f7:2e:02:80:4b:7e:e5:85:d2:6c:36:85:26:ce: c3:06:04:f9:e5:65:36:a8:2f:30:b6:3d:01:48:e3: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:DC:E8:36:44:05:07:C1:DE:9D:07:A6:99:22:5A:28:96:F6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:91:79:70:f8:6e:93:29:25:7b:c6:db:f5:89:c4:69:78:39: 87:8c:34:59:2d:ba:9e:20:ba:fa:db:bc:7f:5d:e4:68:56:f2: 63:34:17:7d:0b:56:f3:50:15:47:d6:69:04:77:d2:59:e1:f0: 53:2e:46:d7:9a:30:a1:8d:5d:97:d7:77:01:7a:72:2a:8b:78: 47:fa:7a:b8:af:1b:98:80:7c:8f:a6:e6:1f:01:11:db:ad:35: d6:25:56:17:4f:a9:47:11:f8:29:da:af:65:17:94:c2:76:61: 61:e4:4c:6a:2e:0b:09:05:1a:f0:21:55:1d:9e:db:0b:eb:9f: d2:41:f3:62:e9:f4:c1:db:a1:49:77:6f:e7:9e:a3:9d:d4:a1: 43:43:73:34:6e:53:12:a9:64:6f:71:5e:ae:5e:be:61:20:f6: 28:b9:56:d5:16:b5:c5:b8:6d:72:ee:bd:94:d5:bf:91:be:c8: 75:41:7b:01:00:c4:33:e2:09:e5:d7:63:88:df:43:e3:26:2a: e5:a7:9d:7f:27:f6:18:fe:a1:09:73:06:e4:5f:22:d6:7e:ee: 73:4c:a4:44:bc:9d:d9:c2:93:be:bb:9f:0b:04:72:87:72:75: 8d:71:03:6c:66:e3:64:ae:d5:f6:90:db:49:67:37:56:c9:9a: 78:aa:77:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTIzo/WBdmHGoPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU0NloXDTI1MTExODIyMDU0NlowLzEtMCsGA1UEAxMk NmQzOWFmYWEtNzI4NS00OTFiLWExYTEtNGM5YzdlMzczYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLaqWwadYP6X9BWxrB/kCGMGjKdhprGFLOSQ YKYD/mX9epLT0ecG2++TXGVxfhv3c3c4gOGt93ZE94eR8gWMaQ1/3zAjiFEBmQo6 JGsPhIo2ECYgvYDG48cLMYZy/BSJXkBJk1aDCA/WMDJrDpr3gRYDdVc+Gku2POh5 Pe8L2NFKzO/UDsssIdQDe++Jc2gBdEPtdQYBYk7paa1s8DMHgTAeagY6H5e3Mo7g Kgey7UlsvKuY+qONNaljLE4/I5CYx1vgUWCuNhGkD00gP8K5suilG2kVfauRpnKE rXxU2Wkw9y4CgEt+5YXSbDaFJs7DBgT55WU2qC8wtj0BSONZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ43Og2RAUHwd6dB6aZIloolvZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGI4NjJiNzEtZDNkMC0z NmRiLWIxNmMtODY5MGVlOWRmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeReXD4bpMpJXvG2/WJxGl4OYeMNFktup4guvrbvH9d5GhW8mM0F30L VvNQFUfWaQR30lnh8FMuRteaMKGNXZfXdwF6ciqLeEf6erivG5iAfI+m5h8BEdut NdYlVhdPqUcR+Cnar2UXlMJ2YWHkTGouCwkFGvAhVR2e2wvrn9JB82Lp9MHboUl3 b+eeo53UoUNDczRuUxKpZG9xXq5evmEg9ii5VtUWtcW4bXLuvZTVv5G+yHVBewEA xDPiCeXXY4jfQ+MmKuWnnX8n9hj+oQlzBuRfItZ+7nNMpES8ndnCk767nwsEcody dY1xA2xm42Su1faQ20lnN1bJmniqd4I= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:49 2025 by rpki-client