$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa File: 87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa (raw, json) Hash identifier: fgY+3JjMocKYhoyzjy3L/XLavKCc9zHydp10RCBNUug= Subject key identifier: 17:2F:DF:6F:D3:C7:E2:05:7A:E1:00:FD:80:A8:B9:05:80:C4:55:8C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9A238E03213086AA4DCE580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa Signing time: Tue 19 Aug 2025 22:10:58 +0000 ROA not before: Tue 19 Aug 2025 22:10:58 +0000 ROA not after: Mon 17 Nov 2025 23:10:58 +0000 asID: 31898 IP address blocks: 140.91.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:a2:38:e0:32:13:08:6a:a4:dc:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 22:10:58 2025 GMT Not After : Nov 17 23:10:58 2025 GMT Subject: CN=b3f2c246-3f97-4ceb-815f-853a6bb0a544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1e:f0:ac:db:a1:d1:ec:0c:b4:6f:01:e4:f0: 23:78:6c:fc:60:43:f4:f5:04:c5:aa:54:23:2b:77: 91:09:39:40:c3:39:08:b7:04:fd:66:4c:fa:dc:b2: e6:a9:1a:36:10:84:ee:f2:1a:5d:10:cc:bd:aa:6d: 95:c3:35:0a:a2:3e:bb:a5:b9:ef:43:14:cc:fd:9d: 55:34:f9:23:07:99:6b:af:18:a1:bb:95:20:2a:1a: e9:18:dc:48:77:b9:76:27:82:92:2b:74:d7:0e:4e: d1:d1:45:93:92:04:6c:65:f0:3e:bb:38:6f:c9:dc: fe:de:61:03:a8:5e:32:83:bf:17:7d:46:c6:2a:a9: e7:90:35:73:a0:81:3d:15:40:8b:1a:de:3f:38:75: b5:f2:72:9d:c0:4b:c9:a2:27:ee:6d:66:85:af:a4: 93:4a:c8:13:e6:cb:20:ba:32:6e:69:bd:0a:ce:24: d1:2e:32:3e:69:99:90:b9:37:63:a8:9a:4b:d1:9a: d6:60:6d:a4:2c:15:fe:c2:eb:41:24:71:5c:03:9b: ab:22:e8:a8:c7:a6:94:6e:83:fb:03:b7:a0:18:96: 60:55:5d:c7:8c:b8:72:61:78:6a:7f:7d:f7:ac:12: b4:3d:33:7b:c0:8c:d1:14:08:57:41:4d:12:90:80: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2F:DF:6F:D3:C7:E2:05:7A:E1:00:FD:80:A8:B9:05:80:C4:55:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87a28bb3-ffd9-3b4f-9973-03157b2a4c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:9e:a7:71:22:7c:45:90:ea:9d:ba:82:04:9f:30:03:1c: 02:b9:10:8e:d9:b6:5b:27:6d:a0:93:40:83:25:3b:29:79:d1: 7e:1f:ce:ef:cc:93:1f:0c:e5:de:c2:31:23:db:7e:fa:aa:44: 2d:4d:14:3f:1c:ba:13:89:7d:43:eb:f1:33:3f:d7:81:98:0e: 9f:46:2b:b0:89:ca:fa:1f:5b:3d:30:68:eb:c8:10:ea:7e:2d: c6:96:aa:cd:29:22:9e:c7:58:a7:6a:87:26:f1:b8:ad:78:55: 4d:1e:02:9f:a6:93:1c:d3:ef:de:81:eb:fb:14:a2:96:52:7a: 8d:41:1c:b8:97:25:cc:72:aa:7b:ae:98:08:6a:d7:e7:50:03: fd:bd:30:12:81:12:91:b7:4a:7b:89:d0:95:65:ea:43:c2:f9: 75:08:c7:66:ec:72:5b:13:87:d0:44:71:c4:b4:b8:d9:18:bc: fb:9e:c9:80:05:a2:89:0d:d2:4a:c2:a4:e2:7a:3b:1f:39:23: ab:2d:48:05:b5:33:6b:9e:c3:45:a9:51:cd:40:d0:f0:5a:89: 7d:a0:a2:07:e0:88:8f:44:df:1c:c2:0a:49:a3:06:de:ff:89: f7:6e:f7:3b:2b:5b:84:48:6d:0a:12:cd:72:6d:99:3b:41:32: b5:b1:cd:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpojjgMhMIaqTc5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIyMTA1OFoXDTI1MTExNzIzMTA1OFowLzEtMCsGA1UEAxMk YjNmMmMyNDYtM2Y5Ny00Y2ViLTgxNWYtODUzYTZiYjBhNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x7wrNuh0ewMtG8B5PAjeGz8YEP09QTFqlQj K3eRCTlAwzkItwT9Zkz63LLmqRo2EITu8hpdEMy9qm2VwzUKoj67pbnvQxTM/Z1V NPkjB5lrrxihu5UgKhrpGNxId7l2J4KSK3TXDk7R0UWTkgRsZfA+uzhvydz+3mED qF4yg78XfUbGKqnnkDVzoIE9FUCLGt4/OHW18nKdwEvJoifubWaFr6STSsgT5ssg ujJuab0KziTRLjI+aZmQuTdjqJpL0ZrWYG2kLBX+wutBJHFcA5urIuiox6aUboP7 A7egGJZgVV3HjLhyYXhqf333rBK0PTN7wIzRFAhXQU0SkICEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcv32/Tx+IFeuEA/YCouQWAxFWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdhMjhiYjMtZmZkOS0z YjRmLTk5NzMtMDMxNTdiMmE0YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFv6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMJnqdxInxFkOqduoIEnzADHAK5EI7ZtlsnbaCTQIMlOyl50X4fzu/M kx8M5d7CMSPbfvqqRC1NFD8cuhOJfUPr8TM/14GYDp9GK7CJyvofWz0waOvIEOp+ LcaWqs0pIp7HWKdqhybxuK14VU0eAp+mkxzT796B6/sUopZSeo1BHLiXJcxyqnuu mAhq1+dQA/29MBKBEpG3SnuJ0JVl6kPC+XUIx2bsclsTh9BEccS0uNkYvPueyYAF ookN0krCpOJ6Ox85I6stSAW1M2uew0WpUc1A0PBaiX2gogfgiI9E3xzCCkmjBt7/ ifdu9zsrW4RIbQoSzXJtmTtBMrWxzV4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:12 2025 by rpki-client