$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20a5c340-86da-3ef4-990e-a2f4fab6345d.roa File: 20a5c340-86da-3ef4-990e-a2f4fab6345d.roa (raw, json) Hash identifier: /fdvye1C5hd+iHitCQCc7jMrIuYIlzLXoElzfXEW5vc= Subject key identifier: 33:E5:9E:97:0E:28:A0:0F:67:EA:20:A3:75:89:78:52:B7:BA:B2:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE40E421BEA2192973FA580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20a5c340-86da-3ef4-990e-a2f4fab6345d.roa Signing time: Fri 15 Aug 2025 17:13:55 +0000 ROA not before: Fri 15 Aug 2025 17:13:55 +0000 ROA not after: Thu 13 Nov 2025 18:13:55 +0000 asID: 31898 IP address blocks: 140.91.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e4:0e:42:1b:ea:21:92:97:3f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:13:55 2025 GMT Not After : Nov 13 18:13:55 2025 GMT Subject: CN=f07d26d4-422c-4471-a6a9-a4837509a075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:9d:03:ee:a8:17:ff:c4:d0:5f:aa:39:06: 78:8e:29:d0:c7:c9:73:0e:a4:fb:26:21:8b:84:70: d1:a7:fd:7f:e9:dd:14:9c:a8:a3:4c:81:c1:a8:ff: 0f:77:cf:24:95:7c:fa:fb:cc:03:28:ff:3c:8c:33: 2e:ad:06:3c:e8:ff:56:bd:7e:57:f0:5c:cd:7f:91: 11:4c:55:ae:db:5c:0b:c3:bf:84:c0:9d:b8:2b:64: 50:34:9d:de:1e:43:01:f5:5c:9a:aa:dc:36:15:14: 78:b0:85:d1:bd:c1:a4:9f:83:7d:ee:95:7a:80:24: c3:25:67:fb:29:6e:7b:09:d7:ab:69:f7:a1:dc:6d: 10:0f:1f:71:6c:c8:b3:3e:83:cf:1b:24:0d:9b:7c: ae:20:3a:d5:9c:3d:90:89:e2:3f:e7:77:90:75:b5: 8d:da:a4:b4:a7:fc:ee:3e:d0:df:1f:0b:b6:62:88: 01:72:e1:35:f3:3e:52:56:ef:9a:7d:93:f6:71:45: bc:54:e9:ee:f6:6c:9f:71:14:7a:2d:1f:ca:b5:ff: f7:3b:26:ac:a8:b6:f1:52:9f:58:50:44:39:5f:31: 7a:78:d2:a7:4d:4c:31:e8:b7:93:63:82:8b:08:b9: 12:5c:c0:35:e9:02:75:10:47:4b:20:6a:7d:05:85: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:9E:97:0E:28:A0:0F:67:EA:20:A3:75:89:78:52:B7:BA:B2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20a5c340-86da-3ef4-990e-a2f4fab6345d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ab:84:ae:71:03:cb:56:a5:7e:17:6c:ff:62:d4:4f:b9:08: 37:08:4b:a7:17:7f:7d:b0:cb:e5:e8:4a:3f:76:cd:d3:b9:79: b5:af:ef:f4:6a:f6:91:ce:bf:0a:8a:1e:70:a3:d5:ee:3c:ba: 4b:cc:c6:79:58:95:ec:30:66:31:d8:0d:14:b1:4b:e2:c1:c9: c2:0a:fa:9f:2d:2a:50:3c:9c:98:7d:55:cf:56:4e:23:94:75: 0a:00:f1:11:e9:2f:4f:0f:7f:c9:ab:d8:38:68:25:86:20:56: ff:e5:b8:cd:02:79:e7:f8:ea:2f:52:84:2f:82:f5:8a:bc:f9: 5b:eb:27:f1:06:a2:b9:a1:f5:e1:d5:ef:ca:90:e7:de:1a:b5: 99:9b:b6:66:2d:9c:c9:75:95:68:e0:5b:11:13:4c:62:42:23: fb:34:63:19:e6:ce:51:13:4b:8f:ea:b0:40:9b:35:7e:96:66: 5a:fc:3a:ee:83:fe:00:95:da:6a:01:d1:8a:9e:ec:a0:2b:d2: c6:21:f5:d3:28:fb:a6:26:0c:26:74:3a:40:2e:2f:cb:e1:6f: 41:bf:eb:03:2e:d0:d7:f9:94:40:89:67:9b:20:fd:5b:6d:9d: 97:d8:f2:be:48:48:75:80:f0:90:e2:f2:d3:14:65:29:86:1e: e8:08:0c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd5A5CG+ohkpc/pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTM1NVoXDTI1MTExMzE4MTM1NVowLzEtMCsGA1UEAxMk ZjA3ZDI2ZDQtNDIyYy00NDcxLWE2YTktYTQ4Mzc1MDlhMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkmdA+6oF//E0F+qOQZ4jinQx8lzDqT7JiGL hHDRp/1/6d0UnKijTIHBqP8Pd88klXz6+8wDKP88jDMurQY86P9WvX5X8FzNf5ER TFWu21wLw7+EwJ24K2RQNJ3eHkMB9Vyaqtw2FRR4sIXRvcGkn4N97pV6gCTDJWf7 KW57Cderafeh3G0QDx9xbMizPoPPGyQNm3yuIDrVnD2QieI/53eQdbWN2qS0p/zu PtDfHwu2YogBcuE18z5SVu+afZP2cUW8VOnu9myfcRR6LR/Ktf/3OyasqLbxUp9Y UEQ5XzF6eNKnTUwx6LeTY4KLCLkSXMA16QJ1EEdLIGp9BYVLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPlnpcOKKAPZ+ogo3WJeFK3urI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjBhNWMzNDAtODZkYS0z ZWY0LTk5MGUtYTJmNGZhYjYzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+rhK5xA8tWpX4XbP9i1E+5CDcIS6cXf32wy+XoSj92zdO5ebWv7/Rq 9pHOvwqKHnCj1e48ukvMxnlYlewwZjHYDRSxS+LBycIK+p8tKlA8nJh9Vc9WTiOU dQoA8RHpL08Pf8mr2DhoJYYgVv/luM0Ceef46i9ShC+C9Yq8+VvrJ/EGormh9eHV 78qQ594atZmbtmYtnMl1lWjgWxETTGJCI/s0YxnmzlETS4/qsECbNX6WZlr8Ou6D /gCV2moB0Yqe7KAr0sYh9dMo+6YmDCZ0OkAuL8vhb0G/6wMu0Nf5lECJZ5sg/Vtt nZfY8r5ISHWA8JDi8tMUZSmGHugIDJ0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:54 2025 by rpki-client