$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90595e7c-b266-35e6-8a6a-cc9ac3b572db.roa File: 90595e7c-b266-35e6-8a6a-cc9ac3b572db.roa (raw, json) Hash identifier: iX3XbkwyFM9f0e/3v1tjLqbKBqQghGq+3jDgNENbMgQ= Subject key identifier: 9F:02:E3:5C:75:55:34:F5:D7:03:F3:C7:53:CB:46:83:74:99:A0:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDF914BBAEBB5E4E7D7CBC5C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90595e7c-b266-35e6-8a6a-cc9ac3b572db.roa Signing time: Fri 15 Aug 2025 17:56:16 +0000 ROA not before: Fri 15 Aug 2025 17:56:16 +0000 ROA not after: Thu 13 Nov 2025 18:56:16 +0000 asID: 31898 IP address blocks: 140.91.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:f9:14:bb:ae:bb:5e:4e:7d:7c:bc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:56:16 2025 GMT Not After : Nov 13 18:56:16 2025 GMT Subject: CN=cfa4f166-3033-46b8-ac0d-b0987da86110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:b9:f6:2f:57:b0:ac:8f:2e:83:c7:eb:5e: 34:8a:08:20:a0:fe:24:03:ca:10:99:c1:cd:d0:d2: 75:d2:ae:f1:e9:ad:76:a1:61:0a:57:08:7b:8a:c8: 4c:90:e5:83:72:77:e3:bb:d1:1f:b7:97:b7:61:90: b4:66:a2:de:58:bf:3e:8c:5c:d2:2b:bd:11:14:94: 2f:c8:b0:7c:af:b4:9c:0c:3c:de:eb:2d:be:ae:39: e2:44:67:ff:c8:f3:52:47:0a:23:30:6f:d3:30:bf: e0:60:56:b8:ee:c1:16:10:79:06:15:59:49:06:7c: a9:30:f9:0d:11:94:ad:80:18:83:33:8a:0d:2e:a4: da:95:11:53:c2:12:8a:5b:1d:46:7c:44:a3:4b:74: 4c:66:2a:1c:28:17:e5:5f:a9:9b:ac:a6:6b:c2:dd: 27:f6:25:32:d0:3b:a7:60:7b:fe:a2:da:ff:86:d7: eb:fc:5e:95:22:d5:40:89:b4:23:49:cd:a5:f3:37: 10:e4:e4:84:23:35:48:55:97:86:41:42:62:27:dc: 06:19:53:1f:83:cf:39:0c:af:27:b3:f6:42:26:b3: 59:78:d8:18:6e:81:de:2a:0c:01:71:96:30:08:ff: c3:59:a9:95:96:e7:c7:4a:60:60:5f:3b:e4:31:a1: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:E3:5C:75:55:34:F5:D7:03:F3:C7:53:CB:46:83:74:99:A0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/90595e7c-b266-35e6-8a6a-cc9ac3b572db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:de:9b:b5:3f:fc:5a:4f:74:83:53:d8:f2:1f:4c:2d:48:c8: df:ed:94:3d:f0:23:3b:aa:41:a7:55:09:2f:a0:38:9b:5c:f9: d7:2e:8c:96:78:6e:1e:ae:6e:ba:f6:71:db:d9:4b:31:ac:19: 0b:20:dc:e1:47:4f:71:ad:f8:14:79:2d:d9:cd:cf:b2:f0:86: b5:1f:5d:f6:40:90:af:57:d4:61:f9:3e:cb:93:e8:72:ec:7d: 57:82:69:cd:8f:d3:29:84:0c:57:22:88:8a:5f:a2:a5:b0:cd: e5:34:db:f7:86:5e:a5:ce:9b:e7:a7:eb:dc:4a:f5:3a:18:97: df:d2:5f:9b:44:41:03:db:e5:a8:bf:25:40:f8:47:2c:f9:da: f9:48:97:b9:cc:d3:ad:1d:21:f5:31:a3:3a:76:f2:60:e3:fc: d1:5d:c9:79:da:9a:5c:0d:3b:72:4b:7b:8d:d3:01:ff:a9:0a: d9:6d:55:76:79:2b:f8:d0:76:45:17:c4:29:73:1e:a1:1e:ff: 58:ac:03:46:9f:ca:2f:f4:fd:e5:ae:81:ba:27:ce:e8:b5:88: ab:8f:02:df:ab:7a:f3:dd:30:0c:c6:48:64:01:84:e3:13:4f: d7:7c:22:ae:10:bb:a7:96:61:54:82:37:c3:09:ee:fb:e9:56: e3:10:5c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd+RS7rrteTn18vFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3NTYxNloXDTI1MTExMzE4NTYxNlowLzEtMCsGA1UEAxMk Y2ZhNGYxNjYtMzAzMy00NmI4LWFjMGQtYjA5ODdkYTg2MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+59i9XsKyPLoPH6140igggoP4kA8oQmcHN 0NJ10q7x6a12oWEKVwh7ishMkOWDcnfju9Eft5e3YZC0ZqLeWL8+jFzSK70RFJQv yLB8r7ScDDze6y2+rjniRGf/yPNSRwojMG/TML/gYFa47sEWEHkGFVlJBnypMPkN EZStgBiDM4oNLqTalRFTwhKKWx1GfESjS3RMZiocKBflX6mbrKZrwt0n9iUy0Dun YHv+otr/htfr/F6VItVAibQjSc2l8zcQ5OSEIzVIVZeGQUJiJ9wGGVMfg885DK8n s/ZCJrNZeNgYboHeKgwBcZYwCP/DWamVlufHSmBgXzvkMaFyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8C41x1VTT11wPzx1PLRoN0maDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTA1OTVlN2MtYjI2Ni0z NWU2LThhNmEtY2M5YWMzYjU3MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjem7U//FpPdINT2PIfTC1IyN/tlD3wIzuqQadVCS+gOJtc+dcujJZ4 bh6ubrr2cdvZSzGsGQsg3OFHT3Gt+BR5LdnNz7LwhrUfXfZAkK9X1GH5PsuT6HLs fVeCac2P0ymEDFciiIpfoqWwzeU02/eGXqXOm+en69xK9ToYl9/SX5tEQQPb5ai/ JUD4Ryz52vlIl7nM060dIfUxozp28mDj/NFdyXnamlwNO3JLe43TAf+pCtltVXZ5 K/jQdkUXxClzHqEe/1isA0afyi/0/eWugbonzui1iKuPAt+revPdMAzGSGQBhOMT T9d8Iq4Qu6eWYVSCN8MJ7vvpVuMQXDs= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:33 2025 by rpki-client