$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e26aaf9e-935f-370c-9795-2cd1e5d49ea9.roa File: e26aaf9e-935f-370c-9795-2cd1e5d49ea9.roa (raw, json) Hash identifier: tDF8QTXbxA55KJAE9GG+cn0wqxPOLce/D0Z1qGE1Z9o= Subject key identifier: D2:2E:AF:BC:89:9E:50:1D:AF:B8:14:78:6B:6C:01:5A:D2:1D:FD:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE1AEB0CBB4F4375D0B4A900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e26aaf9e-935f-370c-9795-2cd1e5d49ea9.roa Signing time: Thu 21 Aug 2025 12:37:23 +0000 ROA not before: Thu 21 Aug 2025 12:37:23 +0000 ROA not after: Wed 19 Nov 2025 13:37:23 +0000 asID: 31898 IP address blocks: 140.91.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:1a:eb:0c:bb:4f:43:75:d0:b4:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 12:37:23 2025 GMT Not After : Nov 19 13:37:23 2025 GMT Subject: CN=a1d57d38-a72b-41da-9d79-aa84a7d744f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:20:33:c9:cd:e6:fa:68:ee:08:1f:67:92: 23:58:2f:61:ff:53:ad:b4:f0:55:0c:6f:51:7d:bd: dc:53:1c:50:cf:92:ee:75:95:66:48:ba:72:4a:b1: 0f:38:68:df:a0:f5:e8:a0:be:6c:fc:d8:32:98:af: e9:81:22:8b:f0:8c:94:88:a9:09:5c:c2:71:15:e3: 61:d8:9b:94:94:8c:4f:93:fa:0a:77:ea:3c:eb:e8: 6d:9d:11:a0:64:80:4d:8b:62:b4:51:64:c2:c4:c2: 14:36:27:52:fe:0e:4d:93:36:6b:0f:3a:74:58:0b: b5:41:da:e6:ed:b4:6c:99:be:08:16:f6:cb:e8:7d: cf:97:8d:94:d4:7f:2a:af:70:c1:93:5e:ca:8d:5f: be:38:44:41:0f:60:d7:c3:96:c7:a9:66:b0:b1:60: bc:7e:e2:91:cf:ae:59:ad:05:6a:08:12:64:67:ea: 81:ab:28:40:6f:af:bc:6e:5c:60:71:ae:b6:5a:fe: b1:33:f7:1e:1b:34:dd:14:0a:d0:7c:67:11:9b:8f: 80:83:4b:4b:ee:4a:68:44:26:76:f9:1f:a0:d7:7a: a9:66:61:5b:e5:1f:6c:06:5e:eb:c2:e3:7c:2e:93: 3f:55:4d:ad:c4:16:e7:00:43:71:33:97:bb:88:4c: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:AF:BC:89:9E:50:1D:AF:B8:14:78:6B:6C:01:5A:D2:1D:FD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e26aaf9e-935f-370c-9795-2cd1e5d49ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6c:71:8b:38:ea:57:d5:a7:9e:5c:35:29:49:7f:95:75:a0: e3:20:d9:ed:ef:22:93:a7:42:af:d7:72:72:e5:61:65:19:bc: 2e:66:e1:7a:c5:70:71:4c:50:ba:bc:7f:0a:5d:b5:57:e7:e4: f8:3e:94:86:29:77:31:15:fa:52:dd:6c:7c:7b:dd:c7:99:9b: 7c:0e:7a:21:f9:db:29:d6:cf:e8:09:10:1b:47:c1:6a:2b:7d: 15:b8:54:6d:65:44:8e:d2:ab:35:49:22:1e:d0:8a:9f:58:f5: 19:18:65:de:1e:ae:15:20:ae:61:c6:6e:42:cf:76:8c:b4:78: 50:20:80:9b:54:93:1c:d8:f5:ff:49:93:0e:c4:fc:5e:34:b1: 11:b3:22:6c:69:82:d2:9f:90:41:3a:94:22:2f:c8:9e:63:e3: a3:ce:e0:62:da:64:1f:1a:64:a9:13:72:93:c0:6b:ae:d9:78: b5:70:98:7a:bc:3f:2d:e0:a1:8e:bf:bb:27:7a:16:17:74:c5: 35:b8:b0:7f:63:82:a5:ce:e8:d5:ba:ca:fc:7d:48:3a:5c:41: 23:47:a2:34:70:89:40:91:b9:f1:ec:cf:d0:7e:3c:c0:ec:28: fd:04:c7:83:d2:15:37:e3:81:0f:5f:77:f0:26:49:f9:39:55: 39:82:d4:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruGusMu09DddC0qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEyMzcyM1oXDTI1MTExOTEzMzcyM1owLzEtMCsGA1UEAxMk YTFkNTdkMzgtYTcyYi00MWRhLTlkNzktYWE4NGE3ZDc0NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO8gM8nN5vpo7ggfZ5IjWC9h/1OttPBVDG9R fb3cUxxQz5LudZVmSLpySrEPOGjfoPXooL5s/NgymK/pgSKL8IyUiKkJXMJxFeNh 2JuUlIxPk/oKd+o86+htnRGgZIBNi2K0UWTCxMIUNidS/g5NkzZrDzp0WAu1Qdrm 7bRsmb4IFvbL6H3Pl42U1H8qr3DBk17KjV++OERBD2DXw5bHqWawsWC8fuKRz65Z rQVqCBJkZ+qBqyhAb6+8blxgca62Wv6xM/ceGzTdFArQfGcRm4+Ag0tL7kpoRCZ2 +R+g13qpZmFb5R9sBl7rwuN8LpM/VU2txBbnAENxM5e7iExG0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIur7yJnlAdr7gUeGtsAVrSHf2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTI2YWFmOWUtOTM1Zi0z NzBjLTk3OTUtMmNkMWU1ZDQ5ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5scYs46lfVp55cNSlJf5V1oOMg2e3vIpOnQq/XcnLlYWUZvC5m4XrF cHFMULq8fwpdtVfn5Pg+lIYpdzEV+lLdbHx73ceZm3wOeiH52ynWz+gJEBtHwWor fRW4VG1lRI7SqzVJIh7Qip9Y9RkYZd4erhUgrmHGbkLPdoy0eFAggJtUkxzY9f9J kw7E/F40sRGzImxpgtKfkEE6lCIvyJ5j46PO4GLaZB8aZKkTcpPAa67ZeLVwmHq8 Py3goY6/uyd6Fhd0xTW4sH9jgqXO6NW6yvx9SDpcQSNHojRwiUCRufHsz9B+PMDs KP0Ex4PSFTfjgQ9fd/AmSfk5VTmC1P4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:41 2025 by rpki-client