$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa File: 5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa (raw, json) Hash identifier: 86fsyRHrIpifHShMmtMhoqmjyd3r+X2Vs+mUDcDiSGc= Subject key identifier: CF:E0:53:4F:DA:6A:91:65:32:CF:70:24:DA:C0:AD:2F:C7:9A:A7:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C8FA9B84E22A290236720 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa Signing time: Wed 20 Aug 2025 21:05:48 +0000 ROA not before: Wed 20 Aug 2025 21:05:48 +0000 ROA not after: Tue 18 Nov 2025 22:05:48 +0000 asID: 31898 IP address blocks: 140.91.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:8f:a9:b8:4e:22:a2:90:23:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:48 2025 GMT Not After : Nov 18 22:05:48 2025 GMT Subject: CN=b824a578-ba0f-411c-ab5d-3d696e7f630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:84:11:5a:8b:86:a4:56:da:ee:14:95:dd: 08:6e:a3:c8:14:8f:c3:da:45:b7:99:2f:31:be:a2: 5c:e0:0a:a0:7c:56:3e:91:2d:ef:ac:6e:49:12:d8: 8d:bc:fe:ff:ac:12:c7:61:11:72:f1:3f:c2:8e:72: 93:20:f5:c0:74:ed:15:81:97:61:a1:bd:da:c9:88: b2:10:a7:65:80:61:65:99:d5:9c:bb:9f:8a:76:8e: 28:b4:d5:17:ca:9b:a8:e4:5a:c2:ff:40:57:87:18: 0a:06:c1:a6:92:48:fc:19:b7:a4:78:6b:70:9a:2c: fb:87:62:ec:51:f2:dd:71:0e:be:a9:56:da:2d:af: 7f:73:63:87:28:18:2f:a5:02:0a:d7:25:e4:6a:0c: 30:b0:2e:b1:f2:44:b6:57:5e:54:a2:09:55:ca:6c: c8:5b:11:af:2d:98:96:39:65:76:c9:dc:bc:b3:75: 66:ac:26:ee:b4:bd:04:bf:1c:38:60:3d:9c:29:b7: 47:0d:5a:12:c2:a0:20:ac:7e:8a:06:1f:e4:84:dc: 65:33:d7:7f:f4:66:30:9a:3b:1a:1f:84:1d:8f:5c: a2:38:6f:13:17:ba:04:6f:d8:01:1a:c3:f4:0f:a7: 03:2b:fe:59:8a:3f:d9:c7:a9:1b:d1:a1:c3:3a:da: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:53:4F:DA:6A:91:65:32:CF:70:24:DA:C0:AD:2F:C7:9A:A7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f283e77-0b15-3532-a6e6-d224e3cb31ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:22:b2:3d:ac:9c:ee:16:34:9a:e4:9e:1f:77:36:0c:f2:85: ff:eb:55:84:13:f7:42:70:85:5b:e4:25:72:aa:52:7f:e9:d7: f1:a0:67:0e:8a:da:f4:1e:d2:2b:13:7c:23:97:d7:04:ee:9e: f2:08:73:29:e0:b4:7e:41:fa:74:35:e2:93:1e:8d:be:08:6a: c2:a7:86:2d:5f:8b:1c:78:d0:e1:a2:3c:00:4f:f6:ad:cf:37: ce:0c:4b:d4:f5:04:24:2a:25:57:89:2a:8d:db:0f:6a:7b:71: b8:21:26:b1:a1:87:42:5e:14:6e:a9:71:a6:d5:08:06:94:62: 65:83:5d:81:6f:c9:72:0d:e3:79:9d:bf:f0:16:b5:e4:d4:b3: 07:75:c0:53:a1:78:2d:ca:0b:09:f2:06:c1:50:bb:92:11:dd: 89:12:a7:59:8c:43:74:42:f2:1f:9b:62:f7:37:5d:53:76:f3: 18:dd:91:33:c4:2e:9e:a4:46:10:c3:bb:43:e6:04:9a:51:86: 32:99:ff:53:f1:c2:99:1b:bd:10:d2:97:26:07:40:89:a0:db: 21:bb:d7:fe:c1:58:bc:e2:e1:e4:ba:d3:f4:d9:1a:d9:e8:40: 21:d0:87:ee:45:25:59:bb:56:bb:a3:cf:04:83:1f:e3:0b:d6: 63:fa:0b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTI+puE4iopAjZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDU0OFoXDTI1MTExODIyMDU0OFowLzEtMCsGA1UEAxMk YjgyNGE1NzgtYmEwZi00MTFjLWFiNWQtM2Q2OTZlN2Y2MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1luEEVqLhqRW2u4Uld0IbqPIFI/D2kW3mS8x vqJc4AqgfFY+kS3vrG5JEtiNvP7/rBLHYRFy8T/CjnKTIPXAdO0VgZdhob3ayYiy EKdlgGFlmdWcu5+Kdo4otNUXypuo5FrC/0BXhxgKBsGmkkj8GbekeGtwmiz7h2Ls UfLdcQ6+qVbaLa9/c2OHKBgvpQIK1yXkagwwsC6x8kS2V15UoglVymzIWxGvLZiW OWV2ydy8s3VmrCbutL0Evxw4YD2cKbdHDVoSwqAgrH6KBh/khNxlM9d/9GYwmjsa H4Qdj1yiOG8TF7oEb9gBGsP0D6cDK/5Zij/Zx6kb0aHDOtoNCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/gU0/aapFlMs9wJNrArS/HmqeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYyODNlNzctMGIxNS0z NTMyLWE2ZTYtZDIyNGUzY2IzMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8isj2snO4WNJrknh93Ngzyhf/rVYQT90JwhVvkJXKqUn/p1/GgZw6K 2vQe0isTfCOX1wTunvIIcyngtH5B+nQ14pMejb4IasKnhi1fixx40OGiPABP9q3P N84MS9T1BCQqJVeJKo3bD2p7cbghJrGhh0JeFG6pcabVCAaUYmWDXYFvyXIN43md v/AWteTUswd1wFOheC3KCwnyBsFQu5IR3YkSp1mMQ3RC8h+bYvc3XVN28xjdkTPE Lp6kRhDDu0PmBJpRhjKZ/1PxwpkbvRDSlyYHQImg2yG71/7BWLzi4eS60/TZGtno QCHQh+5FJVm7VrujzwSDH+ML1mP6C0U= -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:53 2025 by rpki-client