$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9aef5d6f-431a-37d5-8b2d-c85b78c86f77.roa File: 9aef5d6f-431a-37d5-8b2d-c85b78c86f77.roa (raw, json) Hash identifier: 1xBpow4uocqsnaV3NnH3g0s6HxpEIuJpgCCqwEo2DKc= Subject key identifier: EB:82:48:C5:80:46:47:96:D0:30:A8:67:3D:7B:FB:44:D5:C8:47:B9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE977E6C24D1CA25573559D40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9aef5d6f-431a-37d5-8b2d-c85b78c86f77.roa Signing time: Tue 19 Aug 2025 20:45:42 +0000 ROA not before: Tue 19 Aug 2025 20:45:42 +0000 ROA not after: Mon 17 Nov 2025 21:45:42 +0000 asID: 31898 IP address blocks: 140.91.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:e6:c2:4d:1c:a2:55:73:55:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:42 2025 GMT Not After : Nov 17 21:45:42 2025 GMT Subject: CN=096178dc-87ff-49b6-9662-e1f5f72fc4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:77:54:08:9f:1c:1c:18:6e:08:f5:fc:eb: 0e:db:fa:92:b3:f7:09:51:b8:64:7e:4a:51:fc:08: 88:10:b1:fd:53:15:cf:0f:cb:3d:3f:b1:cd:b2:5b: 26:8a:58:00:1a:86:69:f6:d1:71:1f:79:5e:73:ac: 7c:ce:31:fa:50:34:14:cf:22:f9:37:10:ea:ec:ad: 65:18:5b:74:a7:cf:5e:bc:7a:f6:8f:7b:0d:b7:6b: 6e:a8:da:49:70:a0:5d:b0:bc:97:f1:b2:5b:8d:ac: 61:37:c3:44:42:8a:06:cc:2b:12:e4:27:e5:ed:8b: f2:36:73:4a:4b:b4:f6:56:88:ca:d8:1d:dc:ba:0a: f5:3c:f3:16:6f:9a:c4:72:d8:b5:5d:e3:48:96:6d: c4:0f:90:1b:c7:de:e1:35:f4:43:a2:04:d9:d9:a8: a5:39:ac:09:18:f0:33:87:43:44:d3:33:f9:97:e9: c6:cd:bd:04:35:0a:0f:8f:b7:0e:c6:78:a2:45:eb: 06:41:e9:d8:43:6d:68:88:c6:f7:07:c6:3d:8d:77: c0:39:eb:5a:26:11:51:da:15:21:c9:55:39:a6:29: 16:45:70:fe:e4:83:7a:1c:6d:28:f3:86:a1:0e:f9: 0a:54:28:6c:42:4f:3e:7b:5b:28:25:d7:76:a2:d9: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:82:48:C5:80:46:47:96:D0:30:A8:67:3D:7B:FB:44:D5:C8:47:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9aef5d6f-431a-37d5-8b2d-c85b78c86f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:0b:f9:24:ec:85:bf:91:e4:ca:4e:86:a0:7d:70:ff:0f: 64:23:52:41:e8:02:93:fa:87:dc:5f:f4:d0:52:9c:bc:5a:b2: bd:ea:0b:25:74:41:b1:9f:99:a2:94:0f:09:c3:bc:f4:3f:84: ae:7b:3a:19:70:67:e3:3f:13:03:23:41:a6:0c:9a:8c:13:33: 40:02:49:9f:51:08:cf:2c:44:4b:35:dd:b4:39:76:f6:a3:0e: 82:41:ca:13:cf:53:9c:56:8f:e0:c3:11:3a:49:2c:90:2f:27: 03:64:9c:db:60:8d:0f:d6:ca:f3:73:7a:51:39:2a:d7:9b:c2: bd:a3:3c:d3:e5:00:64:3f:97:12:5d:ab:0a:47:83:6a:ce:45: 35:ef:92:86:5f:56:ec:2b:ff:9a:71:e0:ae:c0:38:fb:84:71: 2c:3f:49:57:4d:48:2b:ed:d9:75:57:e1:e9:4e:fe:51:41:32: 61:0b:3b:de:17:f6:ac:cc:e9:15:a1:1f:de:50:e6:3f:99:e5: 43:6f:b2:f2:54:b4:05:f0:3b:b4:8f:be:d1:65:de:52:31:e8: a3:cf:71:be:67:cb:99:2b:ec:d2:27:4f:e7:1a:21:ab:93:60: 99:4a:3f:bd:bc:42:2c:c2:99:20:89:e0:57:0b:87:07:c4:95: 6b:4b:10:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd+bCTRyiVXNVnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDU0MloXDTI1MTExNzIxNDU0MlowLzEtMCsGA1UEAxMk MDk2MTc4ZGMtODdmZi00OWI2LTk2NjItZTFmNWY3MmZjNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioR3VAifHBwYbgj1/OsO2/qSs/cJUbhkfkpR /AiIELH9UxXPD8s9P7HNslsmilgAGoZp9tFxH3lec6x8zjH6UDQUzyL5NxDq7K1l GFt0p89evHr2j3sNt2tuqNpJcKBdsLyX8bJbjaxhN8NEQooGzCsS5Cfl7YvyNnNK S7T2VojK2B3cugr1PPMWb5rEcti1XeNIlm3ED5Abx97hNfRDogTZ2ailOawJGPAz h0NE0zP5l+nGzb0ENQoPj7cOxniiResGQenYQ21oiMb3B8Y9jXfAOetaJhFR2hUh yVU5pikWRXD+5IN6HG0o84ahDvkKVChsQk8+e1soJdd2otkX3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuCSMWARkeW0DCoZz17+0TVyEe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWFlZjVkNmYtNDMxYS0z N2Q1LThiMmQtYzg1Yjc4Yzg2Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFseMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJSC/kk7IW/keTKToagfXD/D2QjUkHoApP6h9xf9NBSnLxasr3qCyV0 QbGfmaKUDwnDvPQ/hK57OhlwZ+M/EwMjQaYMmowTM0ACSZ9RCM8sREs13bQ5dvaj DoJByhPPU5xWj+DDETpJLJAvJwNknNtgjQ/WyvNzelE5Ktebwr2jPNPlAGQ/lxJd qwpHg2rORTXvkoZfVuwr/5px4K7AOPuEcSw/SVdNSCvt2XVX4elO/lFBMmELO94X 9qzM6RWhH95Q5j+Z5UNvsvJUtAXwO7SPvtFl3lIx6KPPcb5ny5kr7NInT+caIauT YJlKP728QizCmSCJ4FcLhwfElWtLEOA= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:56 2025 by rpki-client