$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4250eedc-f1af-399d-a525-e2f4a61963ef.roa File: 4250eedc-f1af-399d-a525-e2f4a61963ef.roa (raw, json) Hash identifier: lX8fcoxuHKzX5tqfgVIe5I3bCmIXILdUgLyflpBswro= Subject key identifier: 88:F0:AE:6F:D8:84:87:DD:E7:49:D0:E3:38:7F:EB:11:5B:22:8E:82 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE40611DAF381F969C473E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4250eedc-f1af-399d-a525-e2f4a61963ef.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 140.91.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:61:1d:af:38:1f:96:9c:47:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=ecefb893-4db6-4bab-9a4b-997c4d980911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:0d:5c:a6:40:6b:a5:1a:79:c6:42:28:e7: 30:4c:81:57:05:0f:28:7f:37:2b:0d:4f:ca:43:84: 4b:eb:df:c1:3b:24:18:19:ad:c2:8b:d6:20:b3:9d: 35:76:1a:51:a8:aa:0b:e3:10:d0:d7:6f:6f:64:98: 88:fc:32:10:29:30:74:ea:da:cc:23:ad:ee:d6:0a: 82:c3:0e:46:0b:b5:c0:6a:0c:73:e0:9b:9f:af:e5: 36:64:17:6c:fc:9f:2f:bd:90:3e:7f:ac:ba:53:19: e3:1e:ff:5e:57:87:23:fa:67:b9:83:3e:91:b2:e2: a7:aa:9d:6d:2b:ef:03:a2:c1:b3:f8:e7:39:18:35: 98:1c:17:7f:e3:4c:bc:46:d6:a3:72:30:12:02:f7: ab:77:74:c6:58:be:58:85:74:4f:50:7d:ba:b1:2c: dc:75:02:6e:ec:90:bd:35:67:21:99:92:91:b5:87: d0:15:86:b7:40:b6:fa:5a:14:7e:09:48:55:78:27: c2:6c:12:7f:3f:99:55:a2:0d:db:eb:6c:14:5b:75: f0:06:b0:fa:61:87:39:b4:bc:fa:f1:ca:be:9a:1b: 88:b1:82:01:05:d4:82:a6:64:15:ca:40:f1:34:59: b4:67:c4:8f:54:7b:87:dd:d5:b6:ed:a2:49:85:6a: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:AE:6F:D8:84:87:DD:E7:49:D0:E3:38:7F:EB:11:5B:22:8E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4250eedc-f1af-399d-a525-e2f4a61963ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f2:60:21:02:98:dd:6a:fd:eb:77:6b:fe:58:d0:ce:f2:22: f1:bb:ff:01:6b:dc:42:c2:1d:0c:15:bf:76:20:d5:ee:f6:79: 6a:70:7f:b9:c5:ec:21:76:5b:7a:33:e1:5f:c8:b7:f3:6c:28: c1:55:df:8e:21:9e:52:a7:35:37:75:49:f5:55:f2:3e:2c:69: 7a:50:1b:a1:90:cf:08:6b:d4:ed:84:9d:c8:79:d2:2f:f6:57: 24:60:10:58:3a:51:c8:3c:94:e6:2e:b7:61:20:0a:56:3d:70: 9d:bf:0a:d7:9a:2d:9c:a6:12:24:07:6e:81:35:70:8e:78:6a: 4b:6e:96:9d:c7:a1:f2:44:26:9f:8b:b1:80:38:25:8b:c1:f7: 37:2c:c0:f3:ab:f8:2d:5b:67:11:a3:8f:24:d5:fb:b1:1f:38: 9d:b4:18:27:8a:94:c3:0b:58:cd:4a:45:d8:f4:b8:a5:a8:31: 19:7f:7d:46:3f:1e:9b:5d:79:f6:35:72:de:a7:22:0e:bc:36: 5c:81:b0:98:e8:99:f2:59:66:1d:c6:f7:76:5a:95:04:cb:27: 81:4f:70:c3:29:8b:d7:dd:eb:d7:83:ab:e1:d8:40:f4:f1:7b: 19:68:41:11:29:de:7c:ac:44:1f:e4:ea:c4:2c:d6:04:4e:6b: a7:4d:0d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGEdrzgflpxHPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWNlZmI4OTMtNGRiNi00YmFiLTlhNGItOTk3YzRkOTgwOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMENXKZAa6UaecZCKOcwTIFXBQ8ofzcrDU/K Q4RL69/BOyQYGa3Ci9Ygs501dhpRqKoL4xDQ129vZJiI/DIQKTB06trMI63u1gqC ww5GC7XAagxz4Jufr+U2ZBds/J8vvZA+f6y6UxnjHv9eV4cj+me5gz6RsuKnqp1t K+8DosGz+Oc5GDWYHBd/40y8RtajcjASAverd3TGWL5YhXRPUH26sSzcdQJu7JC9 NWchmZKRtYfQFYa3QLb6WhR+CUhVeCfCbBJ/P5lVog3b62wUW3XwBrD6YYc5tLz6 8cq+mhuIsYIBBdSCpmQVykDxNFm0Z8SPVHuH3dW27aJJhWrOlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjwrm/YhIfd50nQ4zh/6xFbIo6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDI1MGVlZGMtZjFhZi0z OTlkLWE1MjUtZTJmNGE2MTk2M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzyYCECmN1q/et3a/5Y0M7yIvG7/wFr3ELCHQwVv3Yg1e72eWpwf7nF 7CF2W3oz4V/It/NsKMFV344hnlKnNTd1SfVV8j4saXpQG6GQzwhr1O2Ench50i/2 VyRgEFg6Ucg8lOYut2EgClY9cJ2/CteaLZymEiQHboE1cI54aktulp3HofJEJp+L sYA4JYvB9zcswPOr+C1bZxGjjyTV+7EfOJ20GCeKlMMLWM1KRdj0uKWoMRl/fUY/ HptdefY1ct6nIg68NlyBsJjomfJZZh3G93ZalQTLJ4FPcMMpi9fd69eDq+HYQPTx exloQREp3nysRB/k6sQs1gROa6dNDdM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:48 2025 by rpki-client