$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1235fa39-c93e-34e1-a93a-5f50f60c6d42.roa File: 1235fa39-c93e-34e1-a93a-5f50f60c6d42.roa (raw, json) Hash identifier: XcaoOXNqFC+EU4/+Mztwis5mvtTD1BF3bUiMjLK8Jxo= Subject key identifier: 60:C3:EC:DC:29:14:85:37:DA:A3:CD:3C:4C:CA:21:F8:45:E5:FA:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B9F6CDDE79525351A728A5100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1235fa39-c93e-34e1-a93a-5f50f60c6d42.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 46558 IP address blocks: 140.91.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:dd:e7:95:25:35:1a:72:8a:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=c0b36e4e-d030-4b95-b031-c7eebcc9e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:ee:2b:c5:7c:7e:e6:c1:6f:37:57:03:e9: 8f:0c:fc:77:9a:ab:05:48:ae:b4:fb:4b:77:af:1a: ef:87:be:ed:a3:43:63:bd:3e:6e:c0:86:7d:55:aa: 85:24:ab:11:a2:b6:35:42:56:cf:3e:da:79:3a:91: 87:2c:36:1e:57:c3:52:78:a8:79:0a:44:50:74:e8: 58:bd:68:22:45:f4:55:23:ac:3e:0f:2e:32:d4:d7: d7:00:19:a2:66:e9:41:a5:18:dd:21:a7:64:33:95: fa:cd:d1:91:23:88:02:43:20:c4:b3:2f:a2:7d:42: 9e:0f:60:0a:8e:fb:d2:8f:e6:35:f9:27:31:95:87: 69:89:26:cd:a1:d5:c6:36:3c:1c:1a:55:99:7e:ca: 31:d9:dd:d5:c2:34:c2:83:b7:d0:2b:4a:4a:69:5f: d4:5e:23:57:03:5f:8a:0d:33:49:26:ec:54:88:e1: b1:cd:93:d8:71:89:6c:b8:d4:74:f0:d0:73:9a:0a: 1b:72:1e:9a:19:b3:3f:bd:1e:53:73:99:ce:b4:36: 4b:7f:0f:5b:77:6d:89:8a:17:f9:26:dd:09:da:5b: e0:36:04:d1:e7:3c:f1:6f:4e:bc:2c:3c:40:2f:7f: 8f:11:ee:24:58:4b:a3:a4:0d:dc:63:53:a9:c6:c5: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C3:EC:DC:29:14:85:37:DA:A3:CD:3C:4C:CA:21:F8:45:E5:FA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1235fa39-c93e-34e1-a93a-5f50f60c6d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:60:3b:b1:ad:b7:ce:a8:5f:8c:94:f8:bc:c5:9d:79:03:b8: 62:8b:92:eb:64:ed:42:d2:65:a3:78:02:aa:4d:9e:84:ea:4c: 03:03:98:38:62:ad:1e:19:7d:b0:46:cf:f6:f9:f0:1b:bf:92: b5:b5:c8:d3:33:de:2b:bc:a5:f0:ae:3d:cb:f5:0b:97:17:ed: f4:f3:42:63:44:93:9c:98:66:2b:c1:89:84:a4:ba:a5:db:d1: 8f:8c:c7:bc:7d:6a:30:a4:04:3f:0d:65:43:25:6b:19:f8:de: a8:1d:1b:05:21:91:9d:c7:f3:85:38:7b:42:bb:b3:29:c8:63: ae:1b:05:5d:29:30:e6:ea:4f:1f:17:f2:f6:a7:ca:5b:bc:99: 13:f5:37:83:28:a6:17:27:e4:bd:c6:8d:39:5c:e5:b6:8c:72: 0e:80:4f:fe:03:b8:c4:f8:78:70:47:57:b3:f3:20:e3:54:a7: 25:c2:99:80:72:de:bc:c0:c9:2c:2e:4a:da:44:3b:d6:d6:de: 64:09:e9:f5:bf:c4:cc:ee:cd:d9:e8:7f:ba:43:d5:77:5e:1c: 9e:1d:9c:ff:88:ed:94:50:0f:3a:6b:9d:04:a3:17:c5:90:f4: 1f:bd:0f:d7:78:dd:49:4d:3c:b0:88:56:06:9b:fe:af:28:f4: 01:ee:01:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbN3nlSU1GnKKUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk YzBiMzZlNGUtZDAzMC00Yjk1LWIwMzEtYzdlZWJjYzllNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVnuK8V8fubBbzdXA+mPDPx3mqsFSK60+0t3 rxrvh77to0NjvT5uwIZ9VaqFJKsRorY1QlbPPtp5OpGHLDYeV8NSeKh5CkRQdOhY vWgiRfRVI6w+Dy4y1NfXABmiZulBpRjdIadkM5X6zdGRI4gCQyDEsy+ifUKeD2AK jvvSj+Y1+ScxlYdpiSbNodXGNjwcGlWZfsox2d3VwjTCg7fQK0pKaV/UXiNXA1+K DTNJJuxUiOGxzZPYcYlsuNR08NBzmgobch6aGbM/vR5Tc5nOtDZLfw9bd22Jihf5 Jt0J2lvgNgTR5zzxb068LDxAL3+PEe4kWEujpA3cY1OpxsX6IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDD7NwpFIU32qPNPEzKIfhF5froMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTIzNWZhMzktYzkzZS0z NGUxLWE5M2EtNWY1MGY2MGM2ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxgO7Gtt86oX4yU+LzFnXkDuGKLkutk7ULSZaN4AqpNnoTqTAMDmDhi rR4ZfbBGz/b58Bu/krW1yNMz3iu8pfCuPcv1C5cX7fTzQmNEk5yYZivBiYSkuqXb 0Y+Mx7x9ajCkBD8NZUMlaxn43qgdGwUhkZ3H84U4e0K7synIY64bBV0pMObqTx8X 8vanylu8mRP1N4Mophcn5L3GjTlc5baMcg6AT/4DuMT4eHBHV7PzIONUpyXCmYBy 3rzAySwuStpEO9bW3mQJ6fW/xMzuzdnof7pD1XdeHJ4dnP+I7ZRQDzprnQSjF8WQ 9B+9D9d43UlNPLCIVgab/q8o9AHuAWs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:17 2025 by rpki-client