$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa File: b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa (raw, json) Hash identifier: 7D+nSVs6VoxZAXn8F2hBHXtI6sMT/SsglU4Qe96oAcg= Subject key identifier: 4F:4A:50:0B:CE:D7:DA:90:F9:C6:F5:69:DE:87:A2:35:EB:D8:DD:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA89BF53BE45584506B680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa Signing time: Thu 21 Aug 2025 10:27:40 +0000 ROA not before: Thu 21 Aug 2025 10:27:40 +0000 ROA not after: Wed 19 Nov 2025 11:27:40 +0000 asID: 31898 IP address blocks: 140.91.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:89:bf:53:be:45:58:45:06:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:40 2025 GMT Not After : Nov 19 11:27:40 2025 GMT Subject: CN=b8f92d14-08eb-469a-8a0b-7bf71527d90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:b7:ce:9f:1e:65:8c:32:f6:a7:00:26:8c: 83:c7:1e:83:45:7b:0f:b6:a0:99:c2:2f:26:59:07: 00:75:b4:a7:07:5c:39:f5:75:76:84:21:c7:8b:de: 5b:c8:48:95:aa:4b:65:a4:bb:4a:5c:c4:2b:0c:9b: 7d:10:46:58:cd:ee:ec:dc:3b:8f:97:12:aa:5a:fe: cf:21:bd:c5:fa:a2:36:84:af:54:1a:4f:39:d5:49: c5:f4:82:c1:ca:e2:fb:31:9b:8c:3b:81:fe:76:34: fd:31:d7:52:67:88:e9:6f:c8:9d:d0:8f:0d:1d:76: 8c:fa:ad:2b:5d:16:f5:50:f4:1a:df:4b:8e:65:3f: 35:cd:8c:e9:22:4e:c8:37:9e:00:b8:1d:dc:b2:98: 20:49:7c:54:a5:4a:30:75:58:b9:80:3a:37:d8:bc: 6d:3e:4e:d4:87:d7:8c:eb:f4:1b:54:08:2a:39:c7: 16:02:ca:38:5b:4b:db:cb:02:b7:49:f9:8b:8d:7c: 99:00:4e:53:4c:fc:29:88:13:6d:94:fc:94:08:8e: e9:06:26:84:47:6d:65:d4:a3:f6:36:86:a5:6b:19: 3f:2e:0e:ae:09:95:eb:f2:b3:12:63:6b:ce:8b:93: 41:a7:c6:42:1c:54:fa:64:23:27:08:0d:0e:4d:40: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4A:50:0B:CE:D7:DA:90:F9:C6:F5:69:DE:87:A2:35:EB:D8:DD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0b:39:32:87:e1:56:5d:12:d6:bc:cb:b4:c2:3a:4a:84:10: 8d:7c:c0:87:ab:20:d9:40:f5:fb:63:5f:18:de:4b:79:0c:5f: a7:b1:3b:77:25:64:50:2c:04:7c:a5:2c:3b:ff:67:32:e3:7f: fc:6b:ba:c3:36:1f:c8:35:54:13:6a:37:26:9e:a7:9e:bb:db: 47:5b:c4:ea:01:8a:26:cb:c0:af:e3:21:e2:0d:cc:29:e8:29: 0e:aa:c8:38:e0:96:82:bb:83:37:20:45:4c:72:d7:25:fb:a4: 4e:f2:7b:10:73:cc:b1:32:7a:d4:c6:bb:3f:77:f3:2c:bc:b7: 8d:b9:41:97:0a:c1:d4:b4:ed:50:f9:af:82:1b:e1:67:93:44: 66:86:33:cb:ac:a7:3c:96:0b:5a:3b:3a:aa:eb:8c:e5:56:45: fa:01:ff:7a:df:94:16:a5:8e:c9:c2:06:bc:f1:48:47:65:6c: 84:2d:7e:ee:d4:d1:23:f7:27:90:de:0a:64:fd:2c:3e:bc:ef: af:c0:02:0c:dd:d4:1c:52:85:48:df:86:87:ef:1b:2b:c5:36: fa:0c:23:97:0b:ad:3d:73:a7:c3:e8:71:84:c4:41:5d:aa:ae: 0a:e6:e1:39:1c:f4:2a:36:81:b1:af:fc:c9:c5:a9:2b:1b:95: 06:1a:ca:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2om/U75FWEUGtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjc0MFoXDTI1MTExOTExMjc0MFowLzEtMCsGA1UEAxMk YjhmOTJkMTQtMDhlYi00NjlhLThhMGItN2JmNzE1MjdkOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1O3zp8eZYwy9qcAJoyDxx6DRXsPtqCZwi8m WQcAdbSnB1w59XV2hCHHi95byEiVqktlpLtKXMQrDJt9EEZYze7s3DuPlxKqWv7P Ib3F+qI2hK9UGk851UnF9ILByuL7MZuMO4H+djT9MddSZ4jpb8id0I8NHXaM+q0r XRb1UPQa30uOZT81zYzpIk7IN54AuB3cspggSXxUpUowdVi5gDo32LxtPk7Uh9eM 6/QbVAgqOccWAso4W0vbywK3SfmLjXyZAE5TTPwpiBNtlPyUCI7pBiaER21l1KP2 Noalaxk/Lg6uCZXr8rMSY2vOi5NBp8ZCHFT6ZCMnCA0OTUC+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9KUAvO19qQ+cb1ad6HojXr2N2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjBmOTE2MGUtMmMwYy0z ODIyLWFjNTctNGNlZDVkMDhkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHILOTKH4VZdEta8y7TCOkqEEI18wIerINlA9ftjXxjeS3kMX6exO3cl ZFAsBHylLDv/ZzLjf/xrusM2H8g1VBNqNyaep56720dbxOoBiibLwK/jIeINzCno KQ6qyDjgloK7gzcgRUxy1yX7pE7yexBzzLEyetTGuz938yy8t425QZcKwdS07VD5 r4Ib4WeTRGaGM8uspzyWC1o7OqrrjOVWRfoB/3rflBaljsnCBrzxSEdlbIQtfu7U 0SP3J5DeCmT9LD6876/AAgzd1BxShUjfhofvGyvFNvoMI5cLrT1zp8PocYTEQV2q rgrm4Tkc9Co2gbGv/MnFqSsblQYayp0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:41 2025 by rpki-client