$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa File: 0663f5ef-ecad-3f07-a038-d349e0737666.roa (raw, json) Hash identifier: ggj/vaXb3OQatKmsu9jbRsRpUPe+5R8tF4Fr9D4gXic= Subject key identifier: DE:C5:4F:58:D3:73:7E:9A:99:D7:D8:86:8F:32:45:84:6E:7C:44:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C3F1E30E282FFC024E1F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa Signing time: Mon 25 Aug 2025 08:16:02 +0000 ROA not before: Mon 25 Aug 2025 08:16:02 +0000 ROA not after: Sun 23 Nov 2025 09:16:02 +0000 asID: 31898 IP address blocks: 140.91.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c3:f1:e3:0e:28:2f:fc:02:4e:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:16:02 2025 GMT Not After : Nov 23 09:16:02 2025 GMT Subject: CN=587ac01d-5f40-4689-8086-bb5530d3f336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:a3:65:4b:a0:63:a9:92:c2:8e:84:d2:9e: 65:40:2a:cc:5a:88:5c:d5:7d:c6:ad:15:6a:18:05: 90:05:53:79:6e:33:20:0d:d4:ba:04:0b:62:b7:d3: 1f:15:97:ce:08:35:c6:2c:7d:55:9d:9f:16:02:d4: 47:c6:ed:37:14:cb:eb:a5:8e:a5:be:77:2a:d9:38: e8:9e:36:c1:3b:45:60:c9:1f:78:9e:69:e5:cf:d2: e7:c5:c3:01:d9:d9:7f:e6:5d:f1:37:72:aa:02:e4: f1:4d:c5:80:4b:86:15:34:89:28:54:14:bf:e0:c3: ee:a1:45:b9:95:c8:c1:db:7c:7c:3d:c7:82:14:8c: ab:85:60:20:0b:9f:25:9d:2b:8f:56:e6:76:62:2f: cc:fb:9e:d6:e6:bc:9f:ed:08:63:21:23:ca:4e:9b: a2:4c:83:3c:16:f5:8b:4c:b6:79:b5:32:16:f0:50: c8:49:30:b7:02:ea:7c:4c:e7:c6:b1:13:38:5f:7a: 0c:33:7a:49:2e:cb:6f:94:6d:7a:46:82:d8:73:57: 28:cb:e1:f1:b5:90:ef:70:00:86:61:4f:ed:2a:7d: 57:a5:18:6e:29:98:b7:5d:1c:8f:6d:d0:29:51:1a: f3:ef:aa:cf:b1:95:ff:b3:b8:20:9a:c4:9d:59:cf: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C5:4F:58:D3:73:7E:9A:99:D7:D8:86:8F:32:45:84:6E:7C:44:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:35:27:1b:a2:ed:7c:16:94:d2:78:09:1f:48:16:3f:f5:75: 35:44:02:2c:97:b0:42:83:0c:98:36:8d:60:c8:61:ab:29:81: ce:34:45:af:52:05:ff:e5:61:fa:98:c5:0d:3d:7b:dd:10:eb: 78:81:44:14:b1:f4:30:64:b1:f6:12:40:fc:4d:21:90:d9:a4: 50:fa:11:61:0e:eb:fa:96:3e:65:63:ff:01:c3:e6:1b:eb:54: 96:f0:9e:4c:b0:97:aa:1d:b8:b9:d9:64:3c:6d:ac:e8:da:94: ff:5d:6c:c4:3e:c2:06:50:99:ec:3c:8d:3d:1a:c7:63:69:fc: ab:73:ba:09:e8:41:57:88:ee:a0:60:fb:ad:ac:32:9c:17:1b: da:5b:71:73:8d:6d:e6:52:98:21:7e:3f:cf:15:95:f5:9a:4e: ab:20:24:04:49:4d:3b:a1:02:b7:d5:e4:4d:78:21:f4:9d:3e: d2:d1:3a:79:d8:90:52:de:39:d5:e8:9f:03:ef:fe:eb:ae:34: 3e:27:1a:97:c0:04:55:53:4b:41:10:63:a3:43:69:d0:a1:8c: 90:e4:41:da:ff:fc:bc:25:5c:d8:e1:7a:fb:41:97:d1:f1:1c: d6:b8:33:8c:1c:e4:47:a0:8c:86:5d:7a:2e:6c:28:d0:c6:e8: 88:2d:d4:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4w/HjDigv/AJOH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTYwMloXDTI1MTEyMzA5MTYwMlowLzEtMCsGA1UEAxMk NTg3YWMwMWQtNWY0MC00Njg5LTgwODYtYmI1NTMwZDNmMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd6jZUugY6mSwo6E0p5lQCrMWohc1X3GrRVq GAWQBVN5bjMgDdS6BAtit9MfFZfOCDXGLH1VnZ8WAtRHxu03FMvrpY6lvncq2Tjo njbBO0VgyR94nmnlz9LnxcMB2dl/5l3xN3KqAuTxTcWAS4YVNIkoVBS/4MPuoUW5 lcjB23x8PceCFIyrhWAgC58lnSuPVuZ2Yi/M+57W5ryf7QhjISPKTpuiTIM8FvWL TLZ5tTIW8FDISTC3Aup8TOfGsRM4X3oMM3pJLstvlG16RoLYc1coy+HxtZDvcACG YU/tKn1XpRhuKZi3XRyPbdApURrz76rPsZX/s7ggmsSdWc883QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7FT1jTc36amdfYho8yRYRufET4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDY2M2Y1ZWYtZWNhZC0z ZjA3LWEwMzgtZDM0OWUwNzM3NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY1Jxui7XwWlNJ4CR9IFj/1dTVEAiyXsEKDDJg2jWDIYaspgc40Ra9S Bf/lYfqYxQ09e90Q63iBRBSx9DBksfYSQPxNIZDZpFD6EWEO6/qWPmVj/wHD5hvr VJbwnkywl6oduLnZZDxtrOjalP9dbMQ+wgZQmew8jT0ax2Np/KtzugnoQVeI7qBg +62sMpwXG9pbcXONbeZSmCF+P88VlfWaTqsgJARJTTuhArfV5E14IfSdPtLROnnY kFLeOdXonwPv/uuuND4nGpfABFVTS0EQY6NDadChjJDkQdr//LwlXNjhevtBl9Hx HNa4M4wc5EegjIZdei5sKNDG6Igt1C0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:20 2025 by rpki-client