$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/82af3102-23ba-3169-b4e5-1e59561203b8.roa File: 82af3102-23ba-3169-b4e5-1e59561203b8.roa (raw, json) Hash identifier: zKIiM5shHGJwUhrn2LlCSD6P8dM96Y16bCBSRvcoCFw= Subject key identifier: 22:F8:A2:EB:C1:9A:CF:E3:D4:F6:0F:D3:B9:DA:BF:E9:FD:21:ED:34 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEADD5494162326816ED5F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/82af3102-23ba-3169-b4e5-1e59561203b8.roa Signing time: Thu 21 Aug 2025 17:33:24 +0000 ROA not before: Thu 21 Aug 2025 17:33:24 +0000 ROA not after: Wed 19 Nov 2025 18:33:24 +0000 asID: 31898 IP address blocks: 140.91.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:d5:49:41:62:32:68:16:ed:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:24 2025 GMT Not After : Nov 19 18:33:24 2025 GMT Subject: CN=6d2e9abe-d4c1-4981-b98d-7623ac81dcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:a2:95:2c:15:49:b9:64:36:53:bd:9c:59: 3b:2b:73:89:4e:90:ee:c0:5d:04:ab:ae:7f:23:46: 0a:03:d9:5f:11:a6:de:4f:f3:6a:02:a8:72:26:58: 17:ee:d3:7f:06:1d:55:66:21:9e:fa:d9:af:bd:d4: ca:75:52:44:a8:cb:7d:81:54:a3:a3:a4:2c:8b:4b: 22:76:72:98:f6:40:a5:11:ea:47:37:0b:dd:40:fc: 54:7e:d6:17:38:4b:ce:e3:9f:95:cc:23:9c:d0:0a: 17:9c:00:96:92:dc:31:81:b2:a9:6d:79:68:81:f4: 89:96:0b:bc:a1:c4:80:36:8b:a0:73:0f:6e:fd:6f: ad:2f:1a:c7:93:66:30:10:2b:35:fa:ff:e8:54:05: bb:c5:47:dd:e4:65:c5:32:b7:9d:54:a6:47:28:8c: 29:f2:e7:11:d0:25:c9:a6:08:7c:38:2e:76:42:cf: d5:9b:62:51:a2:9f:14:a7:de:b4:9a:47:31:78:1d: 54:39:bc:97:0d:14:fd:5b:f0:f0:4b:b0:95:f0:d6: bc:af:cf:f0:15:b4:63:fb:67:9c:1c:0f:00:fc:87: da:92:a1:c3:e6:af:36:a4:39:b3:4a:e0:3c:02:a2: a7:2d:e6:3c:16:1d:ca:21:84:dc:07:58:eb:58:8d: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F8:A2:EB:C1:9A:CF:E3:D4:F6:0F:D3:B9:DA:BF:E9:FD:21:ED:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/82af3102-23ba-3169-b4e5-1e59561203b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d3:72:3b:21:35:7d:96:bf:77:43:f9:6c:48:ba:33:a6:d3: 87:8e:07:e7:93:fa:27:bb:98:00:db:c7:8a:68:b5:66:9a:92: 73:bf:ca:16:e8:6d:f0:f1:5d:ee:48:35:7e:48:10:d9:5a:bf: b4:76:29:92:22:db:fe:e9:f7:40:18:7d:ba:cc:e6:31:42:55: d1:82:6a:f0:ad:75:1a:a8:e3:64:48:ae:3a:50:5b:52:34:be: 22:61:f7:25:09:f4:9c:b5:c3:24:eb:73:1c:49:16:64:68:70: 41:37:c1:34:5c:bb:9f:bb:b3:b8:84:01:83:eb:52:4d:e6:df: 64:c6:03:d0:ab:e2:39:12:13:b4:69:12:e2:3c:ba:ef:b7:cd: 32:66:19:10:d1:b9:4b:02:cc:47:18:16:46:48:e1:a6:83:5e: aa:d7:d0:4e:22:ea:01:41:d3:54:e3:a1:6b:da:dc:cd:ea:84: 0b:4c:4d:73:f2:3f:8d:f4:c1:c7:34:28:cd:27:59:dd:34:29: bd:3d:30:56:ba:77:83:50:1c:e1:18:62:5b:40:a6:ac:d9:a6: 71:e9:6a:3e:e1:50:4a:81:20:ca:b7:7d:ea:8a:81:b9:97:bf: fa:e2:7b:ae:af:a7:b9:dd:78:3e:86:58:eb:a8:27:c5:b1:30: b7:87:4c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurdVJQWIyaBbtX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzMyNFoXDTI1MTExOTE4MzMyNFowLzEtMCsGA1UEAxMk NmQyZTlhYmUtZDRjMS00OTgxLWI5OGQtNzYyM2FjODFkY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ6ilSwVSblkNlO9nFk7K3OJTpDuwF0Eq65/ I0YKA9lfEabeT/NqAqhyJlgX7tN/Bh1VZiGe+tmvvdTKdVJEqMt9gVSjo6Qsi0si dnKY9kClEepHNwvdQPxUftYXOEvO45+VzCOc0AoXnACWktwxgbKpbXlogfSJlgu8 ocSANougcw9u/W+tLxrHk2YwECs1+v/oVAW7xUfd5GXFMredVKZHKIwp8ucR0CXJ pgh8OC52Qs/Vm2JRop8Up960mkcxeB1UObyXDRT9W/DwS7CV8Na8r8/wFbRj+2ec HA8A/IfakqHD5q82pDmzSuA8AqKnLeY8Fh3KIYTcB1jrWI3ZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL4ouvBms/j1PYP07nav+n9Ie00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODJhZjMxMDItMjNiYS0z MTY5LWI0ZTUtMWU1OTU2MTIwM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPTcjshNX2Wv3dD+WxIujOm04eOB+eT+ie7mADbx4potWaaknO/yhbo bfDxXe5INX5IENlav7R2KZIi2/7p90AYfbrM5jFCVdGCavCtdRqo42RIrjpQW1I0 viJh9yUJ9Jy1wyTrcxxJFmRocEE3wTRcu5+7s7iEAYPrUk3m32TGA9Cr4jkSE7Rp EuI8uu+3zTJmGRDRuUsCzEcYFkZI4aaDXqrX0E4i6gFB01TjoWva3M3qhAtMTXPy P430wcc0KM0nWd00Kb09MFa6d4NQHOEYYltApqzZpnHpaj7hUEqBIMq3feqKgbmX v/rie66vp7ndeD6GWOuoJ8WxMLeHTGg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:42 2025 by rpki-client