$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa File: 875e3249-ea3a-314c-828a-d5a876662717.roa (raw, json) Hash identifier: wparK1md7O3RGsg+aZtOeO085MeTJG2BnX0NqMKXV80= Subject key identifier: AF:82:10:7B:8E:30:E7:02:0F:33:65:88:11:E8:B3:EA:F2:75:22:3A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A6A909406E17BBAEE7A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa Signing time: Thu 21 Aug 2025 13:08:37 +0000 ROA not before: Thu 21 Aug 2025 13:08:37 +0000 ROA not after: Wed 19 Nov 2025 14:08:37 +0000 asID: 31898 IP address blocks: 140.91.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:6a:90:94:06:e1:7b:ba:ee:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:37 2025 GMT Not After : Nov 19 14:08:37 2025 GMT Subject: CN=12c0dce4-44a9-43e2-b411-186d767f9db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:11:71:5c:64:5f:4f:d8:cd:30:cc:37:b8: b1:4e:85:79:9c:66:0e:e6:05:b0:56:d6:98:e8:13: c0:e6:fa:28:68:77:b8:92:29:59:d9:16:64:a5:fc: 4f:7a:fc:7e:e1:db:db:7a:11:a6:d1:8b:56:57:46: ee:6e:70:16:65:85:d7:71:ab:b6:3b:46:58:4d:dd: 98:7e:e2:38:18:1d:5e:b4:36:b1:99:13:18:7d:ff: aa:38:c0:f6:ae:e7:ce:cf:d7:31:92:3f:87:46:c7: 59:21:0e:e6:b3:f0:0b:48:48:e5:be:89:c6:09:64: e8:1c:0b:5c:93:ca:5f:a2:d8:e0:cc:cc:5b:b1:6e: 05:90:98:60:47:a6:40:23:dd:c6:b1:e3:73:dd:f0: ae:8e:24:b3:fb:ef:bb:f8:09:c5:c7:39:9e:2c:25: 40:15:c9:ef:74:27:ac:c3:d6:38:af:89:04:63:f2: f9:b0:11:2f:1d:af:2b:3a:70:f9:81:ed:0e:81:9f: bd:63:42:0b:ab:8b:47:7e:a8:8c:52:4e:ec:5b:68: ad:28:64:85:bb:18:33:08:63:b8:4f:a3:60:1c:cf: 98:63:a9:7d:ee:cf:79:f2:09:b6:32:6f:83:20:78: ca:cd:1e:b9:2f:32:97:f1:ca:de:7e:88:89:3e:04: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:10:7B:8E:30:E7:02:0F:33:65:88:11:E8:B3:EA:F2:75:22:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1b:d4:93:65:09:8b:ef:6e:e8:d6:f2:bf:6c:8a:60:d7:f8: 9f:95:4f:59:bc:9e:b9:be:29:fc:71:4a:5c:82:c3:0e:29:dc: fb:22:85:1d:af:91:ef:37:a1:d6:bc:e3:11:22:11:be:3b:fe: 78:05:41:57:b2:d5:70:12:d8:c6:16:aa:a9:f5:70:64:c1:c6: c5:1a:f6:9b:76:13:75:37:05:4f:3e:71:70:39:4c:96:d5:da: 49:8d:cd:a3:c0:26:3f:7f:22:3f:25:c0:8f:c0:b8:aa:33:a4: f5:b2:c6:0d:15:c4:a4:e3:12:2c:72:eb:e0:5b:9e:cc:12:b6: 17:ad:3c:30:ff:d7:f4:dc:4b:4b:29:03:51:ed:db:42:2a:de: e9:98:0d:5b:95:fb:83:76:64:56:11:61:41:d9:99:0b:9e:c2: 7d:bf:0c:ba:d3:5c:1e:31:90:5a:60:27:86:bd:d5:bd:28:34: 93:20:ec:98:93:50:68:b7:86:52:5f:0b:79:c9:e2:6c:ec:55: ba:b3:73:5b:4c:c9:d8:c6:93:bc:ea:6f:d9:1c:af:3f:2a:6e: 2e:d9:da:35:8c:57:1c:0f:0d:e7:79:06:55:51:a3:a0:9c:b2: ee:f3:82:0c:b5:89:0c:ff:d7:e0:a5:86:fa:6a:3a:fc:25:c2: 51:d4:ca:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmqQlAbhe7ruegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzN1oXDTI1MTExOTE0MDgzN1owLzEtMCsGA1UEAxMk MTJjMGRjZTQtNDRhOS00M2UyLWI0MTEtMTg2ZDc2N2Y5ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygURcVxkX0/YzTDMN7ixToV5nGYO5gWwVtaY 6BPA5vooaHe4kilZ2RZkpfxPevx+4dvbehGm0YtWV0bubnAWZYXXcau2O0ZYTd2Y fuI4GB1etDaxmRMYff+qOMD2rufOz9cxkj+HRsdZIQ7ms/ALSEjlvonGCWToHAtc k8pfotjgzMxbsW4FkJhgR6ZAI93GseNz3fCujiSz+++7+AnFxzmeLCVAFcnvdCes w9Y4r4kEY/L5sBEvHa8rOnD5ge0OgZ+9Y0ILq4tHfqiMUk7sW2itKGSFuxgzCGO4 T6NgHM+YY6l97s958gm2Mm+DIHjKzR65LzKX8crefoiJPgRnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+CEHuOMOcCDzNliBHos+rydSI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODc1ZTMyNDktZWEzYS0z MTRjLTgyOGEtZDVhODc2NjYyNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYb1JNlCYvvbujW8r9simDX+J+VT1m8nrm+KfxxSlyCww4p3PsihR2v ke83oda84xEiEb47/ngFQVey1XAS2MYWqqn1cGTBxsUa9pt2E3U3BU8+cXA5TJbV 2kmNzaPAJj9/Ij8lwI/AuKozpPWyxg0VxKTjEixy6+BbnswSthetPDD/1/TcS0sp A1Ht20Iq3umYDVuV+4N2ZFYRYUHZmQuewn2/DLrTXB4xkFpgJ4a91b0oNJMg7JiT UGi3hlJfC3nJ4mzsVbqzc1tMydjGk7zqb9kcrz8qbi7Z2jWMVxwPDed5BlVRo6Cc su7zggy1iQz/1+ClhvpqOvwlwlHUyl0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:23 2025 by rpki-client