$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88b8d041-20b1-35dc-9289-6c92c7306f31.roa File: 88b8d041-20b1-35dc-9289-6c92c7306f31.roa (raw, json) Hash identifier: FgfYjdIwLpR1Sf+5SAGhGIa1fsw6otTn9eiyNs1lFX4= Subject key identifier: 1B:F1:BB:E0:C7:92:66:64:50:7F:2E:E7:0C:D7:CD:66:70:90:4B:6C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE977E40E0CF78260C76EAA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88b8d041-20b1-35dc-9289-6c92c7306f31.roa Signing time: Tue 19 Aug 2025 20:45:40 +0000 ROA not before: Tue 19 Aug 2025 20:45:40 +0000 ROA not after: Mon 17 Nov 2025 21:45:40 +0000 asID: 31898 IP address blocks: 140.91.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:e4:0e:0c:f7:82:60:c7:6e:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:40 2025 GMT Not After : Nov 17 21:45:40 2025 GMT Subject: CN=c02da0a0-e416-41fd-bd64-8b16fbc99129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:65:18:82:f8:a4:af:cc:85:9d:5b:b5:9c: f6:6f:f2:24:94:17:ea:39:ad:a5:8e:a5:e8:9c:3a: a2:24:a8:54:5c:c9:0f:65:63:c9:57:f1:20:18:c4: 32:a8:20:18:c6:5f:0c:99:72:c1:d4:0a:d5:53:13: 34:c7:9d:92:03:6b:30:cf:90:c6:eb:c8:cb:8c:29: 20:cc:85:76:17:ef:59:44:9f:cc:0c:c4:a9:bf:84: c6:df:a5:db:66:c5:97:18:59:e7:04:d9:1f:bb:5a: b3:7e:32:29:10:3a:53:fe:5c:49:91:e2:23:1c:8c: b2:60:c1:ef:1a:91:7c:c7:79:8b:56:69:fb:c3:90: c9:0f:f4:d2:9d:83:a0:e9:26:ca:be:07:15:65:15: 4b:d9:3b:3f:df:cf:a3:fe:fd:6e:b2:11:93:be:9b: a7:6c:3e:36:2b:59:ab:8a:01:41:57:8c:1a:4b:18: 29:68:72:0b:79:3b:9d:b7:ba:34:4a:ff:c8:94:62: 74:8f:90:bb:8b:9c:30:55:92:bb:b4:ce:bf:99:1f: 74:56:20:92:91:94:08:1f:6e:ee:ca:31:97:8f:8f: e3:34:89:81:14:81:c7:9d:4f:90:cb:84:9f:27:33: fc:f6:36:61:17:a2:63:d4:cf:9b:c7:e4:e1:e0:9b: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:BB:E0:C7:92:66:64:50:7F:2E:E7:0C:D7:CD:66:70:90:4B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88b8d041-20b1-35dc-9289-6c92c7306f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:50:8b:f7:1e:6f:54:68:58:bb:99:d6:dc:b4:87:d7:bc:1c: 7b:f6:ba:b0:4e:50:4e:68:4c:20:98:99:29:9b:d3:82:c7:6f: dd:a2:b2:c4:6b:0d:2f:19:01:31:6a:32:01:84:67:a8:6c:2c: 4e:35:8b:3c:30:f8:9f:fd:99:83:06:03:b0:56:f7:67:7a:65: 28:1e:96:ba:69:92:78:47:ba:0a:42:aa:ee:75:9c:7e:c7:70: 22:39:52:e0:5d:df:fb:4b:89:6e:0a:be:d9:27:4d:36:8f:75: 89:10:46:04:e8:ee:a9:24:a5:fe:5d:d2:ae:9a:7d:92:33:97: 5c:26:13:d4:7c:59:ef:74:49:8d:bf:dd:ad:0e:7b:03:a8:f4: ed:0c:0b:22:96:d8:38:e6:17:b4:e7:47:07:bc:da:3e:a0:56: 26:63:d7:e6:15:23:4c:dc:73:b0:77:a1:05:a2:5e:fe:28:32: 2b:8f:ca:1d:6b:a2:0e:7c:f3:27:ac:39:51:a0:4c:1b:ba:06: 2e:3c:57:99:dc:da:04:9a:a4:89:4b:5d:97:64:25:71:0f:39: 93:17:3e:a5:70:c3:20:d7:19:89:ab:b2:c9:46:c7:5b:57:11: f0:84:eb:08:76:6f:01:f9:8f:89:7f:2d:31:75:cf:bd:c2:b2: 4f:07:2a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd+QODPeCYMduqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDU0MFoXDTI1MTExNzIxNDU0MFowLzEtMCsGA1UEAxMk YzAyZGEwYTAtZTQxNi00MWZkLWJkNjQtOGIxNmZiYzk5MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE1lGIL4pK/MhZ1btZz2b/IklBfqOa2ljqXo nDqiJKhUXMkPZWPJV/EgGMQyqCAYxl8MmXLB1ArVUxM0x52SA2swz5DG68jLjCkg zIV2F+9ZRJ/MDMSpv4TG36XbZsWXGFnnBNkfu1qzfjIpEDpT/lxJkeIjHIyyYMHv GpF8x3mLVmn7w5DJD/TSnYOg6SbKvgcVZRVL2Ts/38+j/v1ushGTvpunbD42K1mr igFBV4waSxgpaHILeTudt7o0Sv/IlGJ0j5C7i5wwVZK7tM6/mR90ViCSkZQIH27u yjGXj4/jNImBFIHHnU+Qy4SfJzP89jZhF6Jj1M+bx+Th4JsAFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvxu+DHkmZkUH8u5wzXzWZwkEtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODhiOGQwNDEtMjBiMS0z NWRjLTkyODktNmM5MmM3MzA2ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBQi/ceb1RoWLuZ1ty0h9e8HHv2urBOUE5oTCCYmSmb04LHb92issRr DS8ZATFqMgGEZ6hsLE41izww+J/9mYMGA7BW92d6ZSgelrppknhHugpCqu51nH7H cCI5UuBd3/tLiW4KvtknTTaPdYkQRgTo7qkkpf5d0q6afZIzl1wmE9R8We90SY2/ 3a0OewOo9O0MCyKW2DjmF7TnRwe82j6gViZj1+YVI0zcc7B3oQWiXv4oMiuPyh1r og588yesOVGgTBu6Bi48V5nc2gSapIlLXZdkJXEPOZMXPqVwwyDXGYmrsslGx1tX EfCE6wh2bwH5j4l/LTF1z73Csk8HKvg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:36:03 2025 by rpki-client