$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f766ac9-2c09-36cd-a770-00cc8380a092.roa File: 5f766ac9-2c09-36cd-a770-00cc8380a092.roa (raw, json) Hash identifier: l8Z0CBoVf08NaR0tJbtY1m8EvyCOXGhdSbdmOcDLbv8= Subject key identifier: 04:2D:A7:9C:EC:27:BB:06:CB:44:CE:40:8C:09:B5:86:30:DF:2B:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C85790FC3AC58C9E4CE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f766ac9-2c09-36cd-a770-00cc8380a092.roa Signing time: Tue 19 Aug 2025 17:41:34 +0000 ROA not before: Tue 19 Aug 2025 17:41:34 +0000 ROA not after: Mon 17 Nov 2025 18:41:34 +0000 asID: 31898 IP address blocks: 140.91.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:85:79:0f:c3:ac:58:c9:e4:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:34 2025 GMT Not After : Nov 17 18:41:34 2025 GMT Subject: CN=e9ebb3d0-73d8-406a-bfb4-24080a169c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:ef:e0:f4:80:5b:65:33:db:52:c1:9c:73: 91:56:c4:b9:82:3e:df:f0:6f:e6:9f:6c:08:dc:0a: 21:d6:9f:78:dc:36:2b:40:f9:48:d5:a7:25:66:fd: 3d:8f:c3:d5:d0:fb:84:05:c1:c7:d9:f7:72:09:eb: 49:c5:3f:57:28:2b:e4:73:5e:53:3e:c8:71:bb:c9: 2e:61:1b:92:17:57:6f:85:66:4d:ea:fc:94:e8:5e: f8:bc:46:94:11:53:3d:3d:0c:ec:ad:f7:5f:d9:8b: 3c:29:51:d3:62:52:44:02:66:68:05:f2:66:78:2d: 46:19:8e:28:ed:5e:d9:fb:80:a3:b4:eb:67:c4:ed: a7:90:ad:05:d3:0a:f3:81:d2:6e:68:a2:df:e6:77: 6f:f8:56:de:ad:d4:09:6f:f2:f4:12:50:73:29:d3: ab:77:d5:79:84:0d:41:63:b7:6f:80:59:b6:f3:21: ca:ac:f5:64:fd:f8:78:64:e7:58:3e:e5:91:fd:a1: 57:1b:ee:0d:65:1b:70:62:8c:38:f0:e2:6a:f4:e1: fb:69:8b:6e:d6:69:1f:1d:dd:cf:a6:63:64:47:05: 0a:af:85:eb:b2:61:48:cc:09:70:69:39:95:a2:9b: 74:fd:b9:67:f4:9a:1c:96:ec:a5:77:cb:20:b9:06: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:A7:9C:EC:27:BB:06:CB:44:CE:40:8C:09:B5:86:30:DF:2B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f766ac9-2c09-36cd-a770-00cc8380a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:06:c4:40:3c:bf:4f:2f:b0:cb:6e:d4:fa:8f:b5:ef:77:f6: a3:1c:d6:db:7c:9f:24:c8:da:f1:73:ff:f7:58:1f:bc:45:7a: 76:6d:74:80:d1:77:b2:e8:dd:4d:88:3a:d9:7b:3b:0f:fe:8b: d4:0d:61:8c:21:23:81:d7:bb:20:85:cd:9c:e2:ad:31:0d:7d: ca:ab:4d:6a:6a:46:e6:ac:ff:93:20:5a:71:d8:5f:85:45:69: 8c:c7:bd:df:79:00:ce:e0:7d:16:5f:22:3a:de:0d:b8:b1:9b: 52:26:c4:d5:25:3f:3b:30:d4:a2:f3:d2:a1:60:05:19:c3:6e: 85:10:a7:0e:de:42:59:47:41:0b:ee:ec:e0:aa:9a:52:a8:8d: 44:f2:4c:04:e3:9d:63:ac:4b:cc:58:0c:00:b0:93:8c:89:b8: f1:f2:58:4f:b3:2a:6c:26:1b:49:f1:79:30:ca:2c:25:be:09: 9b:4d:87:06:ed:9d:ac:51:90:8d:14:39:7c:46:d7:bf:23:ab: 71:a7:bf:c4:0b:93:b6:7b:22:5b:2e:06:43:14:af:d6:c2:8a: 00:2f:7d:f3:c6:d0:46:97:af:cd:15:60:d5:97:f9:aa:02:c2: 69:66:3a:31:d9:83:00:ff:db:05:e7:2b:38:00:95:43:cd:5a: bb:12:51:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHIV5D8OsWMnkzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDEzNFoXDTI1MTExNzE4NDEzNFowLzEtMCsGA1UEAxMk ZTllYmIzZDAtNzNkOC00MDZhLWJmYjQtMjQwODBhMTY5YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxnv4PSAW2Uz21LBnHORVsS5gj7f8G/mn2wI 3Aoh1p943DYrQPlI1aclZv09j8PV0PuEBcHH2fdyCetJxT9XKCvkc15TPshxu8ku YRuSF1dvhWZN6vyU6F74vEaUEVM9PQzsrfdf2Ys8KVHTYlJEAmZoBfJmeC1GGY4o 7V7Z+4CjtOtnxO2nkK0F0wrzgdJuaKLf5ndv+FberdQJb/L0ElBzKdOrd9V5hA1B Y7dvgFm28yHKrPVk/fh4ZOdYPuWR/aFXG+4NZRtwYow48OJq9OH7aYtu1mkfHd3P pmNkRwUKr4XrsmFIzAlwaTmVopt0/bln9Jocluyld8sguQbbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQtp5zsJ7sGy0TOQIwJtYYw3yvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWY3NjZhYzktMmMwOS0z NmNkLWE3NzAtMDBjYzgzODBhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkGxEA8v08vsMtu1PqPte939qMc1tt8nyTI2vFz//dYH7xFenZtdIDR d7Lo3U2IOtl7Ow/+i9QNYYwhI4HXuyCFzZzirTENfcqrTWpqRuas/5MgWnHYX4VF aYzHvd95AM7gfRZfIjreDbixm1ImxNUlPzsw1KLz0qFgBRnDboUQpw7eQllHQQvu 7OCqmlKojUTyTATjnWOsS8xYDACwk4yJuPHyWE+zKmwmG0nxeTDKLCW+CZtNhwbt naxRkI0UOXxG178jq3Gnv8QLk7Z7IlsuBkMUr9bCigAvffPG0EaXr80VYNWX+aoC wmlmOjHZgwD/2wXnKzgAlUPNWrsSUZA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:10 2025 by rpki-client