$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa File: 4e64faac-4ed8-338b-8d6d-9245653b4469.roa (raw, json) Hash identifier: ajQ+7i0czGcgnBnNBdigr2Przj0I0XL0FCXvS7mfev8= Subject key identifier: 25:88:64:AB:E1:EB:A7:E4:66:42:05:92:2C:62:E0:EB:84:FC:8B:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE437F18599A906B2AF70B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa Signing time: Fri 15 Aug 2025 20:26:13 +0000 ROA not before: Fri 15 Aug 2025 20:26:13 +0000 ROA not after: Thu 13 Nov 2025 21:26:13 +0000 asID: 31898 IP address blocks: 140.91.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:43:7f:18:59:9a:90:6b:2a:f7:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 20:26:13 2025 GMT Not After : Nov 13 21:26:13 2025 GMT Subject: CN=c819e334-ae5b-40a5-b013-fcf856d1ae2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:66:0c:36:d6:c6:e7:67:89:09:7b:99:41: c0:a7:5c:e1:49:08:d9:5d:b2:d8:ed:aa:96:dd:09: 63:39:c0:40:00:f7:2c:6d:ba:4e:e1:88:a4:de:39: 39:67:51:af:b6:06:28:08:86:94:38:3b:10:24:dd: 04:27:d8:30:a5:85:98:7e:ec:ea:c6:10:9c:d5:4a: 35:b1:48:21:8b:54:50:63:b3:74:af:e1:97:31:3f: f1:13:7c:49:24:35:c9:d9:fb:ba:06:9d:3a:e0:c9: 1a:ac:3e:4b:97:14:1c:56:29:ec:e8:c4:2d:30:30: c5:0a:53:4e:f7:77:a0:37:cb:54:65:8b:e9:e3:d9: 8a:e0:a3:86:0d:4e:28:1e:46:6c:35:2a:3a:8b:0c: a0:bd:27:ab:bf:26:67:7d:19:0f:d6:84:b3:87:b4: 77:6b:c7:a9:7e:4c:74:18:b9:a3:c1:02:2b:22:fb: 25:1c:21:29:61:c5:59:f1:c2:cd:c6:79:e7:42:bf: 0b:98:41:ab:7b:a9:dd:b5:45:6f:a6:62:5d:7b:13: 26:49:e4:58:2c:e9:13:e7:89:16:c8:38:02:37:4f: af:be:61:f2:8f:b4:2b:fc:d2:ae:af:97:91:5d:e9: 58:18:c6:9b:ad:9c:ec:2a:70:db:aa:27:a2:04:7c: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:64:AB:E1:EB:A7:E4:66:42:05:92:2C:62:E0:EB:84:FC:8B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:9a:55:c8:5e:cd:01:cc:dc:d5:6f:a1:b4:29:87:0c:03: a2:72:2b:8e:98:2c:46:6b:5b:c1:6f:3a:b6:f8:04:ac:67:b4: 11:0b:3f:14:64:22:2b:35:c8:fd:3c:2e:57:20:76:57:be:3c: 61:ad:06:dc:b9:5f:60:a0:2b:a5:47:a6:70:a7:ce:b8:50:87: f4:56:33:be:9d:c9:d8:c0:1a:1c:32:a9:dc:2b:de:1f:0b:2e: 2b:a4:4f:3a:08:83:f9:eb:30:b8:34:c6:8c:97:94:1c:44:01: 63:57:4c:69:2f:e8:ca:73:c3:73:48:70:f0:d9:61:bb:9d:4a: 2c:cc:bd:23:5e:f8:2f:d1:35:0f:b5:af:37:67:3e:d5:6f:07: 03:15:96:bd:3a:86:9d:26:4a:e0:e5:2b:f5:a4:e7:38:28:00: 8e:ce:79:e3:c2:65:49:33:2d:44:7a:21:aa:5f:a2:61:6c:df: 98:31:12:2c:79:b8:e6:a1:34:2d:88:83:ae:43:91:b4:b9:02: 02:e1:7c:fb:72:e6:09:3f:63:e7:d2:dd:ef:2e:e7:06:05:b6: 64:14:b9:17:1a:bd:e7:16:bc:92:ae:2d:52:20:8c:53:65:8d: a8:ac:04:35:e7:c8:c2:c9:fb:8a:b8:ef:64:b5:b0:68:02:9a: c9:ba:1b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreQ38YWZqQayr3C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIwMjYxM1oXDTI1MTExMzIxMjYxM1owLzEtMCsGA1UEAxMk YzgxOWUzMzQtYWU1Yi00MGE1LWIwMTMtZmNmODU2ZDFhZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh65mDDbWxudniQl7mUHAp1zhSQjZXbLY7aqW 3QljOcBAAPcsbbpO4Yik3jk5Z1GvtgYoCIaUODsQJN0EJ9gwpYWYfuzqxhCc1Uo1 sUghi1RQY7N0r+GXMT/xE3xJJDXJ2fu6Bp064MkarD5LlxQcVins6MQtMDDFClNO 93egN8tUZYvp49mK4KOGDU4oHkZsNSo6iwygvServyZnfRkP1oSzh7R3a8epfkx0 GLmjwQIrIvslHCEpYcVZ8cLNxnnnQr8LmEGre6ndtUVvpmJdexMmSeRYLOkT54kW yDgCN0+vvmHyj7Qr/NKur5eRXelYGMabrZzsKnDbqieiBHy/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWIZKvh66fkZkIFkixi4OuE/IsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGU2NGZhYWMtNGVkOC0z MzhiLThkNmQtOTI0NTY1M2I0NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsomlXIXs0BzNzVb6G0KYcMA6JyK46YLEZrW8FvOrb4BKxntBELPxRk Iis1yP08Llcgdle+PGGtBty5X2CgK6VHpnCnzrhQh/RWM76dydjAGhwyqdwr3h8L LiukTzoIg/nrMLg0xoyXlBxEAWNXTGkv6Mpzw3NIcPDZYbudSizMvSNe+C/RNQ+1 rzdnPtVvBwMVlr06hp0mSuDlK/Wk5zgoAI7OeePCZUkzLUR6IapfomFs35gxEix5 uOahNC2Ig65DkbS5AgLhfPty5gk/Y+fS3e8u5wYFtmQUuRcavecWvJKuLVIgjFNl jaisBDXnyMLJ+4q472S1sGgCmsm6G2w= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:18 2025 by rpki-client