$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa File: d8b9bbdf-01ff-3063-80c8-033d631124aa.roa (raw, json) Hash identifier: nhsqgnPSjrwOwTDThOzC9x7MGpdEkFkPB1wNMjguLoA= Subject key identifier: 56:9B:4C:D9:6F:0E:D6:8F:5D:03:D2:77:EB:47:19:EC:D9:0E:90:7C Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584B6E91FEAE8C08A5138AC3E840 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2648 IP address blocks: 140.208.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fe:ae:8c:08:a5:13:8a:c3:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=c8194d01-0874-4d53-9e58-6e6bdc85b8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:d7:77:28:49:9a:c7:01:ea:5b:47:37:ca: fa:9c:a3:dc:77:c2:70:0b:4c:4b:c8:2d:69:1a:b8: cb:63:f3:9d:9d:cf:83:95:98:50:89:88:6f:6b:0d: be:19:bb:95:73:e6:8e:d1:d7:76:25:ae:1a:4a:33: 3e:bb:d3:23:68:b9:a0:59:23:60:7a:04:be:77:22: f2:14:3c:09:b4:10:e3:74:5b:bd:39:f6:de:2f:77: ac:fa:b2:72:98:ab:9c:16:a0:84:b9:bc:43:ff:71: a6:aa:6b:49:05:f0:d9:78:e8:fc:54:0b:00:62:cd: c5:5a:e9:00:4b:ec:40:a0:22:a6:a3:9d:bf:13:4a: 40:58:35:d9:66:71:a9:3c:8f:db:c0:2f:40:99:8a: a4:71:ff:97:ee:e3:25:fc:0c:be:3d:d7:3b:c1:5c: 94:13:17:aa:58:2a:0b:03:87:d9:e3:b5:80:d4:d9: 13:4c:0a:b5:37:42:15:d6:29:a5:03:b0:73:0a:49: 8b:5f:52:4c:d9:a1:80:cb:09:57:7f:b8:92:42:76: 85:34:d0:3e:3f:94:f9:29:8e:3b:cc:1d:7a:c8:2e: 5f:6b:b4:de:e0:68:2a:25:46:72:af:4f:81:7d:79: 9c:7e:24:c0:c8:35:52:38:f6:c3:f5:1b:48:4c:1b: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:4C:D9:6F:0E:D6:8F:5D:03:D2:77:EB:47:19:EC:D9:0E:90:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:81:95:9c:13:31:01:8c:cf:b1:5a:63:91:cd:ad:17:3f:bf: db:16:42:58:f0:7e:52:a0:67:9b:75:8f:03:0a:31:09:cf:14: 7f:6d:38:cb:48:a8:3d:39:d9:1a:e2:5a:c9:52:27:4b:31:28: f4:4f:b4:e6:b9:2d:88:1f:66:02:ec:9c:87:67:bf:21:c7:73: 1a:48:b8:c5:79:4d:19:79:a7:cb:d5:57:36:38:1f:6a:56:01: 0a:1d:f7:52:36:2e:18:21:0a:4a:21:b3:eb:39:b6:51:c7:d0: 18:be:14:4d:d2:dd:bd:b8:80:c8:86:71:e6:87:23:a8:77:72: 40:2c:bc:c5:5b:7e:3d:56:43:98:25:df:26:8a:30:ae:ae:27: ce:0a:21:3a:75:15:60:39:db:55:f5:ec:3b:25:d0:dd:c8:6e: 2d:c5:a7:35:61:f7:31:fb:4e:b1:e7:2b:20:09:a1:eb:ed:05: 72:34:e0:ec:d1:c3:18:52:3d:e9:03:5a:8a:b3:65:09:3d:8f: f1:0e:28:e5:a8:5f:2d:0c:7c:ec:18:c2:0b:6b:35:9b:32:93: f9:ac:cf:51:02:14:23:1a:af:21:2e:75:ab:05:1c:05:eb:03: 19:80:6a:87:d8:07:b9:d3:11:f5:11:1e:bf:df:e7:0d:fc:0d: 63:3d:76:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukf6ujAilE4rD6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzgxOTRkMDEtMDg3NC00ZDUzLTllNTgtNmU2YmRjODViOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr3XdyhJmscB6ltHN8r6nKPcd8JwC0xLyC1p GrjLY/Odnc+DlZhQiYhvaw2+GbuVc+aO0dd2Ja4aSjM+u9MjaLmgWSNgegS+dyLy FDwJtBDjdFu9OfbeL3es+rJymKucFqCEubxD/3GmqmtJBfDZeOj8VAsAYs3FWukA S+xAoCKmo52/E0pAWDXZZnGpPI/bwC9AmYqkcf+X7uMl/Ay+Pdc7wVyUExeqWCoL A4fZ47WA1NkTTAq1N0IV1imlA7BzCkmLX1JM2aGAywlXf7iSQnaFNNA+P5T5KY47 zB16yC5fa7Te4GgqJUZyr0+BfXmcfiTAyDVSOPbD9RtITBvP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFabTNlvDtaPXQPSd+tHGezZDpB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvZDhiOWJiZGYtMDFmZi0z MDYzLTgwYzgtMDMzZDYzMTEyNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjNCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+BlZwTMQGMz7FaY5HNrRc/v9sWQljwflKgZ5t1jwMKMQnPFH9tOMtI qD052RriWslSJ0sxKPRPtOa5LYgfZgLsnIdnvyHHcxpIuMV5TRl5p8vVVzY4H2pW AQod91I2LhghCkohs+s5tlHH0Bi+FE3S3b24gMiGceaHI6h3ckAsvMVbfj1WQ5gl 3yaKMK6uJ84KITp1FWA521X17Dsl0N3Ibi3FpzVh9zH7TrHnKyAJoevtBXI04OzR wxhSPekDWoqzZQk9j/EOKOWoXy0MfOwYwgtrNZsyk/msz1ECFCMaryEudasFHAXr AxmAaofYB7nTEfURHr/f5w38DWM9dnQ= -----END CERTIFICATE-----Generated at Fri Oct 10 14:12:49 2025 by rpki-client