$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa File: e7897d3e-f2ac-3530-add5-cb406b5e8685.roa (raw, json) Hash identifier: a7c1zEb8+iWEE+dyyAiVpZuqdt06TVbA9WpzRCPmUU8= Subject key identifier: A2:2C:54:F4:C2:63:8F:23:88:D1:0F:C0:3D:B7:17:1A:35:9B:8B:46 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B83BBCEF80581978D2F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa Signing time: Tue 19 Aug 2025 17:39:33 +0000 ROA not before: Tue 19 Aug 2025 17:39:33 +0000 ROA not after: Mon 17 Nov 2025 18:39:33 +0000 asID: 31898 IP address blocks: 140.91.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:83:bb:ce:f8:05:81:97:8d:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:33 2025 GMT Not After : Nov 17 18:39:33 2025 GMT Subject: CN=e2b02a40-ce33-48f2-b22a-bfa9c6b2312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:7b:82:b0:fd:cf:7c:7f:d9:a1:6e:a4:d1: b7:0f:be:bd:02:9a:d0:3d:1d:da:1e:e5:8f:8e:b6: 80:61:46:9e:ea:53:80:85:72:c3:a7:0b:53:a2:3d: 36:db:e4:85:b9:3c:28:6c:6a:fb:3b:4f:4b:9e:23: 38:80:8d:98:ef:99:cc:5f:ad:1a:ff:f1:fb:ce:22: a1:61:99:35:c2:f5:91:05:f5:5b:d2:a8:2c:59:16: a5:6c:fd:f8:7d:98:79:62:4b:d6:f6:1f:dc:a2:20: cb:46:d1:b8:7b:d6:75:18:60:78:bb:4e:af:67:a1: 75:c3:35:db:77:39:2b:f1:36:18:50:05:83:19:e5: 28:37:ac:3e:6e:d4:95:fd:bf:2f:cc:be:54:ae:f5: ca:68:ec:49:5a:60:9b:03:c1:5d:8b:09:06:52:7f: 51:ce:8b:5d:e2:c2:10:c6:4d:3d:18:21:ec:37:19: c8:76:8a:61:7e:e7:73:87:38:60:ce:2c:99:bf:f8: 43:fc:34:20:f4:c5:c4:a3:38:48:d9:87:cf:63:d8: 6a:9a:42:95:99:ef:5f:5f:78:2e:a4:ca:fd:53:74: c4:33:ad:f6:97:cc:f7:3e:59:7c:61:c8:f2:12:e7: 3d:cc:08:6a:45:9a:0e:cb:60:44:6a:1c:2b:4a:22: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:54:F4:C2:63:8F:23:88:D1:0F:C0:3D:B7:17:1A:35:9B:8B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:06:a8:ff:ba:77:a0:8a:ee:41:c2:50:cd:82:7d:94:68:30: 6a:ef:7a:8d:53:63:da:17:c3:1a:3d:6d:d3:9f:23:cf:41:fc: 19:42:fb:85:c6:00:12:2a:e0:55:31:73:6a:c3:d0:90:29:ad: 73:0c:52:2d:47:1f:88:34:cd:39:ce:42:a2:2f:7b:6d:ea:47: 63:b7:37:45:e5:12:36:7d:35:7d:0f:90:bf:a6:df:af:77:29: 4d:e3:3f:4c:29:b7:a7:c0:c5:51:1d:7c:0a:b8:4e:6f:72:6a: a3:e1:f8:5a:99:41:d6:78:1e:6e:ea:1b:84:88:a1:ef:3f:6c: 15:e5:10:85:73:c7:6f:b4:3c:f3:35:76:af:8c:34:6e:4f:fc: ca:3a:99:09:43:d2:28:fb:a1:85:64:bc:67:d4:1e:58:ff:5e: 68:c6:ef:b1:64:1a:3b:9c:cf:af:77:84:8b:ca:2f:49:7a:80: 3d:1b:02:ec:dd:ff:14:e5:ed:60:a7:32:42:4c:45:16:fb:24: 24:7b:0f:8f:e4:c0:40:bc:cd:12:eb:8f:73:b8:22:e3:29:9f: f2:98:f8:0a:e7:52:5e:62:d0:8d:18:d0:ce:bb:22:59:9e:38: a0:85:be:1d:23:54:7b:e0:71:2b:39:bd:2f:db:dd:c9:ed:cf: 65:0e:89:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG4O7zvgFgZeNL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkzM1oXDTI1MTExNzE4MzkzM1owLzEtMCsGA1UEAxMk ZTJiMDJhNDAtY2UzMy00OGYyLWIyMmEtYmZhOWM2YjIzMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMJ7grD9z3x/2aFupNG3D769AprQPR3aHuWP jraAYUae6lOAhXLDpwtToj022+SFuTwobGr7O09LniM4gI2Y75nMX60a//H7ziKh YZk1wvWRBfVb0qgsWRalbP34fZh5YkvW9h/coiDLRtG4e9Z1GGB4u06vZ6F1wzXb dzkr8TYYUAWDGeUoN6w+btSV/b8vzL5UrvXKaOxJWmCbA8FdiwkGUn9Rzotd4sIQ xk09GCHsNxnIdophfudzhzhgziyZv/hD/DQg9MXEozhI2YfPY9hqmkKVme9fX3gu pMr9U3TEM632l8z3Pll8YcjyEuc9zAhqRZoOy2BEahwrSiLZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIsVPTCY48jiNEPwD23Fxo1m4tGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTc4OTdkM2UtZjJhYy0z NTMwLWFkZDUtY2I0MDZiNWU4Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoGqP+6d6CK7kHCUM2CfZRoMGrveo1TY9oXwxo9bdOfI89B/BlC+4XG ABIq4FUxc2rD0JAprXMMUi1HH4g0zTnOQqIve23qR2O3N0XlEjZ9NX0PkL+m3693 KU3jP0wpt6fAxVEdfAq4Tm9yaqPh+FqZQdZ4Hm7qG4SIoe8/bBXlEIVzx2+0PPM1 dq+MNG5P/Mo6mQlD0ij7oYVkvGfUHlj/XmjG77FkGjucz693hIvKL0l6gD0bAuzd /xTl7WCnMkJMRRb7JCR7D4/kwEC8zRLrj3O4IuMpn/KY+ArnUl5i0I0Y0M67Ilme OKCFvh0jVHvgcSs5vS/b3cntz2UOiew= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:11 2025 by rpki-client