$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa File: bb5c8181-de03-3082-935b-bbbeac181c59.roa (raw, json) Hash identifier: IJRWan32ME5A/frkyvyn29jMAOaorVpYY1XC+T7Kcoo= Subject key identifier: BF:F9:FB:79:D3:E2:D2:87:C2:0A:27:E1:F4:29:C0:A7:66:4E:AC:8A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C850B040101A3A5E1A8880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa Signing time: Mon 25 Aug 2025 17:00:39 +0000 ROA not before: Mon 25 Aug 2025 17:00:39 +0000 ROA not after: Sun 23 Nov 2025 18:00:39 +0000 asID: 31898 IP address blocks: 140.91.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:50:b0:40:10:1a:3a:5e:1a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:39 2025 GMT Not After : Nov 23 18:00:39 2025 GMT Subject: CN=ff24d64a-f824-47bf-9c46-564bf317aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f1:99:99:38:42:a1:45:49:7d:43:cd:75:77: dd:ea:3b:94:25:a5:c6:79:fb:19:3d:98:8c:af:4e: 5d:bd:d3:53:b6:38:24:00:84:57:04:fe:0d:cf:d0: d2:4e:d7:31:ba:c9:67:5c:9e:2a:38:a5:c1:eb:1e: 2a:c7:85:9b:61:7c:3b:0b:51:1b:74:4f:4b:12:ce: 39:2d:80:bd:2f:03:c1:ae:cd:35:b0:16:a7:0b:a7: 92:1e:6d:56:1c:6d:98:dc:fa:95:0b:cd:3b:14:88: 7e:02:c3:30:d4:6a:99:ee:2a:9d:3d:9e:34:f0:81: cf:73:7c:bd:43:6e:26:d3:06:8e:c8:b0:24:3b:20: f5:dd:1b:ad:a0:a4:61:d6:a6:db:d1:ff:ad:a2:2f: 38:d2:f9:89:b8:15:8a:09:7d:a1:fa:fd:d7:ad:50: 3a:ca:57:4f:ef:02:48:ce:bc:38:58:27:a6:84:d2: a9:69:5d:3a:03:72:91:c6:6d:2c:b8:87:13:b4:e6: b3:1e:e6:9c:08:75:de:4f:c5:9b:ea:c6:9b:08:92: fc:ca:c4:2b:50:50:da:1d:18:b1:f3:4e:ce:ca:f2: c8:70:b1:b7:a5:28:25:3d:42:59:dc:92:7d:1d:af: 71:7e:13:aa:62:8d:67:e5:0d:24:bf:af:53:39:af: 7c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:FB:79:D3:E2:D2:87:C2:0A:27:E1:F4:29:C0:A7:66:4E:AC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:df:8b:81:1d:98:89:47:83:eb:63:62:9f:76:5f:61:b2:1e: c0:63:8a:e8:40:f7:17:73:b2:c7:1b:80:c5:86:34:07:e2:65: f5:68:70:9b:6b:b3:ec:51:32:02:81:7c:8d:30:22:d0:3e:e0: da:64:ae:19:62:df:33:0f:27:00:b0:f8:78:60:de:eb:d1:8c: b5:76:32:4f:e3:9e:8f:7a:61:d8:82:7c:26:e3:53:d5:39:7e: 44:e7:db:e4:b9:2b:e6:ac:1d:7d:c2:a1:60:a9:08:bd:5a:1c: 30:90:ce:d6:da:41:e1:7a:a9:53:a8:c2:71:27:ac:02:fa:9d: fb:a2:cf:1b:d8:76:11:c7:03:f5:36:95:7a:63:9a:26:8b:20: f4:b0:e8:58:4e:75:60:14:db:8f:fa:10:71:07:7a:87:55:80: 09:40:43:49:8f:0d:46:db:98:12:45:49:32:1e:e5:3e:86:01: a8:70:6f:fd:d5:df:50:0c:7b:26:e7:07:3b:29:e8:2a:c9:b9: 3f:5c:7a:c7:a1:c2:2d:66:cd:f2:0e:2e:93:25:ba:97:19:7a: b8:8c:f1:b4:39:02:4f:02:fe:b7:53:83:8c:d8:17:52:11:a6: d1:e5:5c:03:a3:46:a1:32:41:5e:1d:66:60:8d:15:c0:76:27: 42:83:3f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yFCwQBAaOl4aiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAzOVoXDTI1MTEyMzE4MDAzOVowLzEtMCsGA1UEAxMk ZmYyNGQ2NGEtZjgyNC00N2JmLTljNDYtNTY0YmYzMTdhZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/GZmThCoUVJfUPNdXfd6juUJaXGefsZPZiM r05dvdNTtjgkAIRXBP4Nz9DSTtcxuslnXJ4qOKXB6x4qx4WbYXw7C1EbdE9LEs45 LYC9LwPBrs01sBanC6eSHm1WHG2Y3PqVC807FIh+AsMw1GqZ7iqdPZ408IHPc3y9 Q24m0waOyLAkOyD13RutoKRh1qbb0f+toi840vmJuBWKCX2h+v3XrVA6yldP7wJI zrw4WCemhNKpaV06A3KRxm0suIcTtOazHuacCHXeT8Wb6sabCJL8ysQrUFDaHRix 807OyvLIcLG3pSglPUJZ3JJ9Ha9xfhOqYo1n5Q0kv69TOa98TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/5+3nT4tKHwgon4fQpwKdmTqyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmI1YzgxODEtZGUwMy0z MDgyLTkzNWItYmJiZWFjMTgxYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDfi4EdmIlHg+tjYp92X2GyHsBjiuhA9xdzsscbgMWGNAfiZfVocJtr s+xRMgKBfI0wItA+4Npkrhli3zMPJwCw+Hhg3uvRjLV2Mk/jno96YdiCfCbjU9U5 fkTn2+S5K+asHX3CoWCpCL1aHDCQztbaQeF6qVOownEnrAL6nfuizxvYdhHHA/U2 lXpjmiaLIPSw6FhOdWAU24/6EHEHeodVgAlAQ0mPDUbbmBJFSTIe5T6GAahwb/3V 31AMeybnBzsp6CrJuT9cesehwi1mzfIOLpMlupcZeriM8bQ5Ak8C/rdTg4zYF1IR ptHlXAOjRqEyQV4dZmCNFcB2J0KDPyI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:36 2025 by rpki-client