$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa File: f12660d2-1f5c-3602-b7c6-695c022ef94d.roa (raw, json) Hash identifier: 3ytDdDxarUW7sJIt3Svy+IiuCYUv4778uO/OGgpK6Fs= Subject key identifier: 5E:B6:EF:52:30:B1:3A:21:E4:62:58:A6:F2:E0:ED:19:A7:10:56:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEBFAF19D064C982D31434F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa Signing time: Wed 20 Aug 2025 18:21:21 +0000 ROA not before: Wed 20 Aug 2025 18:21:21 +0000 ROA not after: Tue 18 Nov 2025 19:21:21 +0000 asID: 31898 IP address blocks: 140.91.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:fa:f1:9d:06:4c:98:2d:31:43:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:21:21 2025 GMT Not After : Nov 18 19:21:21 2025 GMT Subject: CN=c881f1a4-a69a-4257-bb84-5d2e9eea1e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:32:3f:a8:b0:93:24:f8:5a:24:e2:01:6c: c5:eb:7b:ed:e2:6d:a3:cb:d8:2c:23:f5:d5:30:5d: 5e:dd:34:58:7c:cb:18:44:03:ab:ba:2f:80:40:ab: b8:ab:61:ca:77:d5:3e:3c:42:0a:d3:ed:4d:c4:0e: e7:81:c1:de:d1:a5:f1:e6:a4:50:2e:93:7b:b5:06: 7a:22:b7:28:b2:02:83:48:39:b9:0c:47:4d:70:81: 30:97:38:8c:d2:98:ad:40:1a:6b:1e:00:02:51:1d: 63:b2:89:73:ba:1b:5e:48:d8:a9:ea:3a:bf:ce:e8: 21:2c:3f:c2:c8:29:0f:50:44:00:2a:19:fb:ea:5f: 9c:ff:52:6f:48:66:be:a5:60:a4:bd:12:46:47:e9: b8:ce:f6:c0:99:b8:30:ee:fe:52:e3:9a:42:83:39: a7:cd:51:cf:9b:48:97:c4:1d:98:13:da:cc:18:a7: b5:29:48:bc:e6:82:a0:93:e4:3e:92:1e:25:26:1b: 68:c7:67:0d:8e:a2:7e:d6:9d:22:04:36:99:dc:fb: 4b:08:b7:c5:23:c4:6b:ae:7c:67:8c:f1:89:f1:02: 4d:c4:be:e7:3a:55:3d:bd:17:ba:b5:c6:b7:5e:35: d9:70:d3:8d:f9:11:ec:60:b0:e1:15:52:9f:4d:14: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B6:EF:52:30:B1:3A:21:E4:62:58:A6:F2:E0:ED:19:A7:10:56:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:85:d6:05:10:49:fc:db:c2:95:37:d1:54:cf:dc:ad:25:a0: 35:a3:29:f2:cf:c0:a1:1c:d4:9d:c7:5a:01:58:58:8e:0e:af: ff:39:42:f2:9f:94:31:ec:80:52:c6:74:4b:83:50:86:07:f6: 5b:76:56:f0:be:30:dc:a4:a5:0f:0a:12:29:5c:cc:4c:55:3e: 7a:45:fb:5e:4a:7a:0c:a2:18:95:9a:67:c3:02:6c:c6:c4:0a: 23:a7:41:e6:6a:c6:04:5d:a2:3f:29:47:00:b1:57:ef:a7:11: 5f:d8:7a:65:47:42:ea:12:ea:32:cc:67:03:47:8c:1f:91:7c: 30:4c:25:15:53:58:ec:3b:d5:d4:2c:b9:d4:78:b8:c6:5d:8b: aa:1d:f9:96:46:d3:1f:1f:f7:27:91:59:8b:8c:b1:87:8b:94: 5b:d8:7c:3f:8c:d6:c0:71:93:62:52:ba:5a:bc:db:d8:b9:c5: 42:b4:33:c1:1b:c5:8e:cf:8d:de:04:cc:75:f8:0b:4f:e5:af: 24:ae:cd:83:4f:0a:64:72:66:34:ca:f7:ab:4e:1d:c3:78:57: b5:e3:3e:a7:71:06:4b:03:3e:7e:3b:5c:60:37:f2:be:ab:e4: 52:a3:ed:3b:e4:52:1a:23:ec:f6:79:c5:bb:d9:a2:36:75:d8: 66:61:f3:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErr+vGdBkyYLTFDTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MjEyMVoXDTI1MTExODE5MjEyMVowLzEtMCsGA1UEAxMk Yzg4MWYxYTQtYTY5YS00MjU3LWJiODQtNWQyZTllZWExZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCUyP6iwkyT4WiTiAWzF63vt4m2jy9gsI/XV MF1e3TRYfMsYRAOrui+AQKu4q2HKd9U+PEIK0+1NxA7ngcHe0aXx5qRQLpN7tQZ6 IrcosgKDSDm5DEdNcIEwlziM0pitQBprHgACUR1jsolzuhteSNip6jq/zughLD/C yCkPUEQAKhn76l+c/1JvSGa+pWCkvRJGR+m4zvbAmbgw7v5S45pCgzmnzVHPm0iX xB2YE9rMGKe1KUi85oKgk+Q+kh4lJhtox2cNjqJ+1p0iBDaZ3PtLCLfFI8Rrrnxn jPGJ8QJNxL7nOlU9vRe6tca3XjXZcNON+RHsYLDhFVKfTRR/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6271IwsToh5GJYpvLg7RmnEFaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjEyNjYwZDItMWY1Yy0z NjAyLWI3YzYtNjk1YzAyMmVmOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSF1gUQSfzbwpU30VTP3K0loDWjKfLPwKEc1J3HWgFYWI4Or/85QvKf lDHsgFLGdEuDUIYH9lt2VvC+MNykpQ8KEilczExVPnpF+15KegyiGJWaZ8MCbMbE CiOnQeZqxgRdoj8pRwCxV++nEV/YemVHQuoS6jLMZwNHjB+RfDBMJRVTWOw71dQs udR4uMZdi6od+ZZG0x8f9yeRWYuMsYeLlFvYfD+M1sBxk2JSulq829i5xUK0M8Eb xY7Pjd4EzHX4C0/lrySuzYNPCmRyZjTK96tOHcN4V7XjPqdxBksDPn47XGA38r6r 5FKj7TvkUhoj7PZ5xbvZojZ12GZh86c= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:17 2025 by rpki-client