$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30fd078c-2703-30bd-bbb4-66d3617e7600.roa File: 30fd078c-2703-30bd-bbb4-66d3617e7600.roa (raw, json) Hash identifier: weprGuINalQDmCHmTr0bNJf2R7/cc+V7lxL8tMMVB0c= Subject key identifier: A9:B3:CF:94:FA:9A:AF:E7:91:24:83:E1:D3:F8:16:AA:81:CB:7D:47 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B8123B214DC8940AA6000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30fd078c-2703-30bd-bbb4-66d3617e7600.roa Signing time: Tue 19 Aug 2025 17:39:32 +0000 ROA not before: Tue 19 Aug 2025 17:39:32 +0000 ROA not after: Mon 17 Nov 2025 18:39:32 +0000 asID: 31898 IP address blocks: 140.91.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:81:23:b2:14:dc:89:40:aa:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:32 2025 GMT Not After : Nov 17 18:39:32 2025 GMT Subject: CN=e998efa0-5354-4eaa-b3e2-122b8fc4def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:f5:18:c8:12:86:d5:1b:44:0a:7a:54:76: 89:1a:74:b9:95:d7:bd:2b:f5:85:77:8c:52:5e:a9: 08:43:2e:7f:85:9d:7f:60:41:b0:6c:af:eb:55:9f: a1:27:70:b1:ee:63:4f:95:9e:c5:1d:84:3a:d5:d0: a3:3c:c2:69:42:94:ea:da:5d:c0:47:4c:9c:35:1c: c8:fa:20:c3:a3:e8:48:15:fc:11:f9:4f:a0:1f:13: dd:7d:32:a8:13:77:99:70:d9:2d:99:99:4a:0e:d3: e0:4b:5c:fe:85:93:45:f9:48:5b:e4:3c:de:75:19: a3:9e:70:5d:08:79:2c:96:75:03:87:3c:b6:29:13: 77:13:3d:9c:ef:8e:35:ac:76:8a:95:5f:cc:c1:39: 61:f0:1e:59:a0:2f:93:f5:3f:9a:64:05:f1:72:d9: fd:b6:e7:51:fe:fb:dd:33:9b:3d:94:78:69:b6:95: 88:3e:5c:5a:cc:ae:63:b2:0c:23:ac:7b:d6:04:af: 3d:44:52:69:f8:77:dd:12:29:49:3e:05:91:2c:5e: de:f6:91:5e:b8:54:e5:a7:fe:cc:be:a6:4c:22:68: 3f:fb:fb:99:81:e7:7d:35:b8:4d:1f:17:30:61:b2: d8:2f:f4:57:28:db:ca:1f:1b:f1:1c:f5:35:1b:88: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:CF:94:FA:9A:AF:E7:91:24:83:E1:D3:F8:16:AA:81:CB:7D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/30fd078c-2703-30bd-bbb4-66d3617e7600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:b2:a2:dc:e0:0f:be:b3:39:f1:86:60:bf:98:13:6c:df: ba:3f:a6:54:3e:31:9d:03:20:3d:32:d8:69:6d:99:9a:29:d3: 33:8c:62:f8:a3:63:cc:21:fc:6e:eb:34:ba:ea:90:c6:83:33: cd:29:8a:80:0b:13:a4:6d:15:f6:9f:af:f8:c0:b5:4a:d4:cb: a1:5f:f5:8b:d6:64:8c:2a:e6:fd:a9:51:9f:bf:af:5d:04:cb: c9:23:1b:97:81:17:30:5b:3f:a6:a7:df:24:06:70:53:c0:82: f5:5b:0d:d9:05:20:13:b7:05:82:0b:b0:09:c0:ca:ca:72:94: 2f:78:c1:5e:c3:ec:5c:36:37:0b:ed:04:1f:db:9d:9b:03:0e: 35:6f:47:8a:7c:00:cf:a9:37:16:6e:75:ad:7b:19:2a:a9:b7: f5:d0:1d:70:86:4f:58:15:34:fb:73:cf:35:10:2f:01:0e:81: 68:fb:4e:d4:cc:82:9f:78:db:b2:e5:8f:fe:56:ec:67:88:e0: 73:4d:14:60:d3:f5:31:f9:9e:71:57:92:7a:8a:b6:55:73:5f: ac:ea:8d:94:54:fa:56:93:65:98:f5:37:d1:7b:11:c9:8c:cd: 83:31:3d:ed:ba:67:12:37:cb:cb:8e:ec:55:21:bd:58:e9:4f: 2e:b5:86:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG4EjshTciUCqYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkzMloXDTI1MTExNzE4MzkzMlowLzEtMCsGA1UEAxMk ZTk5OGVmYTAtNTM1NC00ZWFhLWIzZTItMTIyYjhmYzRkZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuv1GMgShtUbRAp6VHaJGnS5lde9K/WFd4xS XqkIQy5/hZ1/YEGwbK/rVZ+hJ3Cx7mNPlZ7FHYQ61dCjPMJpQpTq2l3AR0ycNRzI +iDDo+hIFfwR+U+gHxPdfTKoE3eZcNktmZlKDtPgS1z+hZNF+Uhb5DzedRmjnnBd CHkslnUDhzy2KRN3Ez2c7441rHaKlV/MwTlh8B5ZoC+T9T+aZAXxctn9tudR/vvd M5s9lHhptpWIPlxazK5jsgwjrHvWBK89RFJp+HfdEilJPgWRLF7e9pFeuFTlp/7M vqZMImg/+/uZged9NbhNHxcwYbLYL/RXKNvKHxvxHPU1G4jXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmzz5T6mq/nkSSD4dP4FqqBy31HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzBmZDA3OGMtMjcwMy0z MGJkLWJiYjQtNjZkMzYxN2U3NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUcsqLc4A++sznxhmC/mBNs37o/plQ+MZ0DID0y2GltmZop0zOMYvij Y8wh/G7rNLrqkMaDM80pioALE6RtFfafr/jAtUrUy6Ff9YvWZIwq5v2pUZ+/r10E y8kjG5eBFzBbP6an3yQGcFPAgvVbDdkFIBO3BYILsAnAyspylC94wV7D7Fw2Nwvt BB/bnZsDDjVvR4p8AM+pNxZuda17GSqpt/XQHXCGT1gVNPtzzzUQLwEOgWj7TtTM gp9427Llj/5W7GeI4HNNFGDT9TH5nnFXknqKtlVzX6zqjZRU+laTZZj1N9F7EcmM zYMxPe26ZxI3y8uO7FUhvVjpTy61hjI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:31 2025 by rpki-client