$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa File: 6947bfe4-4b87-3709-80d2-05bdef6cf549.roa (raw, json) Hash identifier: lYBJb5B44yyivaGRSi1XbjNDvYwafunKr5jM/7MjARk= Subject key identifier: C5:B8:FA:D1:22:6D:16:DF:00:53:D1:07:54:15:9F:0E:75:5A:0E:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6996F6E7B03383D7D4E3180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa Signing time: Mon 18 Aug 2025 20:05:50 +0000 ROA not before: Mon 18 Aug 2025 20:05:50 +0000 ROA not after: Sun 16 Nov 2025 21:05:50 +0000 asID: 31898 IP address blocks: 140.91.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:99:6f:6e:7b:03:38:3d:7d:4e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 20:05:50 2025 GMT Not After : Nov 16 21:05:50 2025 GMT Subject: CN=8b38b515-3bf9-453a-9486-1d84d452491b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:8c:9e:9a:73:e9:a8:e7:3c:61:7a:d8:a3: 77:8a:b9:43:1d:76:53:69:25:38:18:ec:42:f6:bd: 45:eb:4d:03:fa:cc:69:ae:85:e3:ab:a4:bd:e1:de: 47:1c:92:e1:2a:2b:04:2d:71:50:2c:8a:26:1d:cf: 3b:7c:da:cf:4a:a4:ed:65:72:78:ad:15:36:49:e1: 07:35:aa:c8:c6:74:a9:ba:5c:ff:6c:82:75:b8:36: 50:d1:9e:28:85:07:16:4a:4d:15:1f:44:2e:fc:f6: bd:44:b3:56:59:c0:72:3b:58:4e:f3:25:2d:48:6d: 16:43:c9:6a:5d:c8:58:ab:39:b2:02:60:54:e3:50: 37:b3:5f:8d:ea:4d:05:76:fd:1a:5f:6c:a3:c7:c5: b8:a5:d4:78:d4:91:9a:be:10:04:dd:45:6b:16:e1: 96:bd:d8:d2:d4:49:3b:82:fb:95:72:6d:3c:bc:7e: ec:a9:a9:0e:9c:bd:48:9c:8d:cd:d0:4a:16:6a:b0: 83:23:82:3d:01:e2:56:33:bd:7e:ae:11:3f:b8:20: e0:6b:d6:42:40:1b:45:55:26:e1:5c:b0:1c:74:66: 42:e6:7a:f8:29:23:95:02:c2:e1:48:41:fb:b7:ab: dd:04:34:2e:87:24:ee:82:25:b0:6a:fc:2c:64:41: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B8:FA:D1:22:6D:16:DF:00:53:D1:07:54:15:9F:0E:75:5A:0E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d7:a1:ad:50:a3:5d:8c:5b:b7:1d:82:34:10:e4:51:13:15: 6d:30:2b:7c:8a:a2:cd:ff:61:fd:cf:6a:1a:3e:00:50:74:65: f8:af:c6:e0:2f:78:f4:12:84:ea:a4:64:c0:ac:ca:64:8f:f1: 3f:84:5c:86:30:5e:62:0c:60:e9:e8:96:9b:83:23:a6:cc:93: 30:d6:45:80:a6:5b:99:bc:92:d0:d0:0e:73:96:3b:02:64:9f: 3d:b0:90:91:07:fc:6e:ad:ff:1b:15:ba:0e:ff:1b:a1:f8:07: 31:73:b6:22:56:df:69:2a:78:f2:90:a7:c2:bd:4b:95:04:be: ec:88:40:d2:aa:4e:b1:87:01:0d:f0:e2:41:13:ff:7c:ae:48: e9:0c:9e:8f:5b:f2:84:ed:b0:7d:ec:d3:3f:ad:8a:52:14:95: 9d:7c:57:1e:0c:dd:79:10:ee:ba:09:60:d1:90:6f:11:45:a6: 2c:34:41:e5:8c:09:24:b6:9c:58:0f:97:f9:29:7c:a6:ca:64: e2:4a:5d:df:3e:ae:58:be:95:59:2b:f3:1b:e3:2e:74:2a:2b: 1e:aa:8c:e8:b6:18:3a:5c:3b:2e:16:a5:8c:59:49:92:9d:d4: 8c:9a:0c:69:19:b7:18:59:3d:f4:ed:c3:7e:8d:a1:31:4d:34: a4:c9:3b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmmW9uewM4PX1OMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIwMDU1MFoXDTI1MTExNjIxMDU1MFowLzEtMCsGA1UEAxMk OGIzOGI1MTUtM2JmOS00NTNhLTk0ODYtMWQ4NGQ0NTI0OTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9+Mnppz6ajnPGF62KN3irlDHXZTaSU4GOxC 9r1F600D+sxproXjq6S94d5HHJLhKisELXFQLIomHc87fNrPSqTtZXJ4rRU2SeEH NarIxnSpulz/bIJ1uDZQ0Z4ohQcWSk0VH0Qu/Pa9RLNWWcByO1hO8yUtSG0WQ8lq XchYqzmyAmBU41A3s1+N6k0Fdv0aX2yjx8W4pdR41JGavhAE3UVrFuGWvdjS1Ek7 gvuVcm08vH7sqakOnL1InI3N0EoWarCDI4I9AeJWM71+rhE/uCDga9ZCQBtFVSbh XLAcdGZC5nr4KSOVAsLhSEH7t6vdBDQuhyTugiWwavwsZEGbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMW4+tEibRbfAFPRB1QVnw51Wg4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjk0N2JmZTQtNGI4Ny0z NzA5LTgwZDItMDViZGVmNmNmNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPXoa1Qo12MW7cdgjQQ5FETFW0wK3yKos3/Yf3Paho+AFB0ZfivxuAv ePQShOqkZMCsymSP8T+EXIYwXmIMYOnolpuDI6bMkzDWRYCmW5m8ktDQDnOWOwJk nz2wkJEH/G6t/xsVug7/G6H4BzFztiJW32kqePKQp8K9S5UEvuyIQNKqTrGHAQ3w 4kET/3yuSOkMno9b8oTtsH3s0z+tilIUlZ18Vx4M3XkQ7roJYNGQbxFFpiw0QeWM CSS2nFgPl/kpfKbKZOJKXd8+rli+lVkr8xvjLnQqKx6qjOi2GDpcOy4WpYxZSZKd 1IyaDGkZtxhZPfTtw36NoTFNNKTJO54= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:04 2025 by rpki-client