$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa File: 6790a335-83f3-3721-9670-94018063b0da.roa (raw, json) Hash identifier: LI3DDKYlsne8lEfTEbHeH7J6FpQ1TSyDu3RY7iTEZzM= Subject key identifier: 97:25:DC:1C:DE:60:A4:03:B9:99:B4:F4:68:C7:64:5D:31:08:1F:19 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF014F2E6965861E64DB99E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa Signing time: Fri 22 Aug 2025 05:36:59 +0000 ROA not before: Fri 22 Aug 2025 05:36:59 +0000 ROA not after: Thu 20 Nov 2025 06:36:59 +0000 asID: 31898 IP address blocks: 140.91.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:f2:e6:96:58:61:e6:4d:b9:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:36:59 2025 GMT Not After : Nov 20 06:36:59 2025 GMT Subject: CN=0dedf434-3c6e-44d2-8b5d-40c2bb3e07cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:82:8e:94:cc:32:66:21:e3:05:51:65:6e: fd:8d:e2:83:dc:a0:31:ab:fb:57:96:37:a4:b9:0e: 6a:e5:89:71:6f:4e:a3:53:f3:d4:d5:43:76:7e:19: 4f:2d:8c:d9:83:9c:c4:7a:00:e9:19:d3:b9:84:f7: 7c:0d:eb:45:da:88:78:0a:37:b7:25:09:6a:95:3e: c4:37:08:94:81:c7:91:05:f0:8e:ec:d2:79:6f:b0: 67:1d:b8:25:6b:ef:17:a6:10:d5:8b:65:0e:01:a1: 75:54:c5:de:3d:de:d5:3b:5c:f6:ab:07:33:87:4a: b8:1f:62:87:f7:ae:0d:08:08:78:32:a9:17:dd:b9: dc:21:6f:c5:90:03:ea:4a:ad:45:2c:55:01:d1:99: 54:d0:f2:dd:04:a2:4b:d8:b8:35:4c:bb:14:2c:a0: 79:36:7f:bf:1f:fd:d7:22:ac:ef:2f:82:d9:4b:64: 15:bd:ad:a5:3f:cb:61:b0:a4:1e:df:a4:0e:08:6a: 8b:2a:3d:52:79:7a:66:47:55:a8:37:b1:45:20:04: ef:cb:77:95:2e:da:dd:d2:5f:4e:79:48:cd:b1:b3: 8c:6a:88:9a:2e:dc:e5:6b:fd:29:f8:8e:a5:ef:f4: ce:6a:02:95:0a:a9:c3:79:71:34:1e:f5:b2:7f:b0: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:DC:1C:DE:60:A4:03:B9:99:B4:F4:68:C7:64:5D:31:08:1F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2a:0c:80:be:41:e5:3a:39:09:24:db:33:44:e6:eb:e8:eb: f5:c1:f5:c0:f8:5a:f5:24:be:f7:7b:87:4d:93:ae:95:f4:1b: 66:f1:6f:c0:83:d6:9f:3c:28:13:5b:1d:99:32:ab:ce:2d:ad: 3d:74:24:48:8d:b5:59:cb:e3:24:cf:19:f1:38:53:2d:26:79: 6c:f2:9a:5c:3b:2d:2f:df:0e:c1:c8:30:b2:61:a7:29:e5:96: 16:06:5c:8c:5a:45:bd:82:3f:85:d6:7d:3a:2c:9a:ed:cb:92: aa:ff:42:27:af:89:b8:d0:b8:40:29:24:e7:ac:0e:e1:9a:1e: a8:d1:8d:b9:bf:96:6a:76:49:8a:d2:ee:bb:a9:03:4c:11:1f: 1b:97:d6:7f:0d:9f:99:4d:07:ba:f6:a4:b4:18:22:ed:84:5f: a4:7d:12:f9:8c:2c:33:e1:60:44:f8:f9:28:30:a8:04:f2:5d: 04:b5:e3:10:c6:d3:94:c5:62:4a:e4:54:ee:b5:68:79:b3:27: fe:9c:e0:03:ae:4a:f9:ca:c3:14:04:83:45:a8:75:48:4d:ae: df:35:bd:fe:f4:82:15:99:51:c0:91:24:df:f1:06:fc:9d:b4: 68:6a:ac:35:3d:49:ba:4a:7a:ea:60:43:ec:e9:24:68:d8:47: b4:1e:b2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFPLmllhh5k25ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzY1OVoXDTI1MTEyMDA2MzY1OVowLzEtMCsGA1UEAxMk MGRlZGY0MzQtM2M2ZS00NGQyLThiNWQtNDBjMmJiM2UwN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz+CjpTMMmYh4wVRZW79jeKD3KAxq/tXljek uQ5q5Ylxb06jU/PU1UN2fhlPLYzZg5zEegDpGdO5hPd8DetF2oh4Cje3JQlqlT7E NwiUgceRBfCO7NJ5b7BnHbgla+8XphDVi2UOAaF1VMXePd7VO1z2qwczh0q4H2KH 964NCAh4MqkX3bncIW/FkAPqSq1FLFUB0ZlU0PLdBKJL2Lg1TLsULKB5Nn+/H/3X IqzvL4LZS2QVva2lP8thsKQe36QOCGqLKj1SeXpmR1WoN7FFIATvy3eVLtrd0l9O eUjNsbOMaoiaLtzla/0p+I6l7/TOagKVCqnDeXE0HvWyf7CirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcl3BzeYKQDuZm09GjHZF0xCB8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjc5MGEzMzUtODNmMy0z NzIxLTk2NzAtOTQwMTgwNjNiMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcqDIC+QeU6OQkk2zNE5uvo6/XB9cD4WvUkvvd7h02TrpX0G2bxb8CD 1p88KBNbHZkyq84trT10JEiNtVnL4yTPGfE4Uy0meWzymlw7LS/fDsHIMLJhpynl lhYGXIxaRb2CP4XWfTosmu3Lkqr/QievibjQuEApJOesDuGaHqjRjbm/lmp2SYrS 7rupA0wRHxuX1n8Nn5lNB7r2pLQYIu2EX6R9EvmMLDPhYET4+SgwqATyXQS14xDG 05TFYkrkVO61aHmzJ/6c4AOuSvnKwxQEg0WodUhNrt81vf70ghWZUcCRJN/xBvyd tGhqrDU9SbpKeupgQ+zpJGjYR7QesmE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:27 2025 by rpki-client