$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86893bde-051c-3b1e-93df-5df2669bee7c.roa File: 86893bde-051c-3b1e-93df-5df2669bee7c.roa (raw, json) Hash identifier: pFXZ12lD9IkfxDp3VVTwGx8VmS9rFrdc+C2tT7nhfGY= Subject key identifier: 0A:4E:DC:9B:94:33:02:C2:A3:E1:72:29:01:E0:4A:9C:C1:7E:0F:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE97711A65CE3CDDC99A93C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86893bde-051c-3b1e-93df-5df2669bee7c.roa Signing time: Tue 19 Aug 2025 20:44:01 +0000 ROA not before: Tue 19 Aug 2025 20:44:01 +0000 ROA not after: Mon 17 Nov 2025 21:44:01 +0000 asID: 31898 IP address blocks: 140.91.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:11:a6:5c:e3:cd:dc:99:a9:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:01 2025 GMT Not After : Nov 17 21:44:01 2025 GMT Subject: CN=7caffd3c-6b30-4826-8a31-f8f9de241fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:cd:f8:94:73:fc:8b:83:9c:55:38:aa:e1: ac:26:6a:05:43:7a:58:d5:9a:2a:c4:33:c9:77:2c: be:ec:ac:53:49:3a:54:6f:5b:c5:55:7c:f4:fd:0d: 20:b3:3a:e1:64:6e:96:2f:7a:35:5f:8b:ea:10:5a: 5a:1e:db:89:41:86:65:39:82:aa:07:2c:a4:74:47: 3b:4b:7f:24:13:fd:90:2d:b0:90:66:8a:38:a5:34: 69:c6:88:e7:92:bd:dd:42:57:ff:cc:ee:33:13:dd: 98:5e:f0:be:0d:2c:52:38:ec:a7:29:64:45:55:ac: e0:48:f4:51:eb:f9:ec:5b:be:2e:8d:50:cd:df:34: bb:50:2a:84:6d:25:81:53:b9:18:86:af:2b:9c:33: 84:ef:39:84:1c:78:b0:5d:57:a8:03:dd:a6:9f:fe: 7c:0c:22:c4:08:b1:70:0b:f7:7f:9c:da:33:3a:ff: 5a:52:51:7d:d6:cc:1f:2e:ea:d6:0c:6a:c9:38:0a: 3f:d6:f3:b4:ff:69:db:f8:a3:ed:50:bb:17:53:7c: a9:00:9c:7b:17:be:57:8f:3c:f6:45:53:94:63:70: aa:9e:d5:df:0c:03:b6:00:8f:0a:58:d1:08:f4:01: 3c:a8:40:e1:26:5c:c2:a5:f0:8d:cb:b6:12:a6:4d: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4E:DC:9B:94:33:02:C2:A3:E1:72:29:01:E0:4A:9C:C1:7E:0F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86893bde-051c-3b1e-93df-5df2669bee7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f3:41:8d:80:30:c7:72:6a:b3:cb:30:72:6d:03:96:9a:ff: c1:7d:84:ee:d3:8e:06:f5:4c:55:fd:36:f3:04:c0:be:e5:dc: 3a:79:f7:a3:07:82:85:bb:42:78:fd:23:45:15:ba:d7:f1:56: e8:58:b6:d4:61:7c:e6:7b:e9:d6:4c:28:c1:fd:a7:22:c1:93: d2:4c:85:0f:67:71:46:04:3c:98:02:2a:da:be:4a:ac:51:35: a5:db:4d:1d:7d:60:3d:de:6d:25:ad:91:ff:f7:73:40:22:c6: 76:6f:65:f9:0e:9f:bb:10:28:5b:a4:b5:60:d4:34:c8:fd:24: 98:b6:fd:6e:10:75:de:b1:00:74:f9:c7:9b:64:05:f0:b3:fe: f5:81:6f:4b:ae:94:ed:25:8e:6e:0b:06:ed:29:3e:c2:bc:57: 7e:0d:40:a5:0f:21:5c:0a:36:aa:ca:15:be:d1:b7:67:f6:21: 50:8e:7f:98:a3:39:d5:8c:51:44:62:e4:6f:6e:f5:36:5c:1d: ef:27:17:6c:1d:4a:2c:7c:1b:1a:90:13:8a:43:34:61:e7:66: 80:fb:0d:54:c4:a5:4e:f5:98:c3:34:67:ec:c3:e7:2f:7a:ad: 14:e3:5c:7d:51:22:6c:27:05:19:31:11:5d:9c:f3:42:93:b3: 0d:b0:fc:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdxGmXOPN3JmpPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQwMVoXDTI1MTExNzIxNDQwMVowLzEtMCsGA1UEAxMk N2NhZmZkM2MtNmIzMC00ODI2LThhMzEtZjhmOWRlMjQxZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J7N+JRz/IuDnFU4quGsJmoFQ3pY1ZoqxDPJ dyy+7KxTSTpUb1vFVXz0/Q0gszrhZG6WL3o1X4vqEFpaHtuJQYZlOYKqByykdEc7 S38kE/2QLbCQZoo4pTRpxojnkr3dQlf/zO4zE92YXvC+DSxSOOynKWRFVazgSPRR 6/nsW74ujVDN3zS7UCqEbSWBU7kYhq8rnDOE7zmEHHiwXVeoA92mn/58DCLECLFw C/d/nNozOv9aUlF91swfLurWDGrJOAo/1vO0/2nb+KPtULsXU3ypAJx7F75Xjzz2 RVOUY3CqntXfDAO2AI8KWNEI9AE8qEDhJlzCpfCNy7YSpk2k/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApO3JuUMwLCo+FyKQHgSpzBfg/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY4OTNiZGUtMDUxYy0z YjFlLTkzZGYtNWRmMjY2OWJlZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzzQY2AMMdyarPLMHJtA5aa/8F9hO7Tjgb1TFX9NvMEwL7l3Dp596MH goW7Qnj9I0UVutfxVuhYttRhfOZ76dZMKMH9pyLBk9JMhQ9ncUYEPJgCKtq+SqxR NaXbTR19YD3ebSWtkf/3c0AixnZvZfkOn7sQKFuktWDUNMj9JJi2/W4Qdd6xAHT5 x5tkBfCz/vWBb0uulO0ljm4LBu0pPsK8V34NQKUPIVwKNqrKFb7Rt2f2IVCOf5ij OdWMUURi5G9u9TZcHe8nF2wdSix8GxqQE4pDNGHnZoD7DVTEpU71mMM0Z+zD5y96 rRTjXH1RImwnBRkxEV2c80KTsw2w/MU= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client