$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa File: b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa (raw, json) Hash identifier: Nl/RKv/tXKAkNYFGY72PHbiivWOP+vxx5tyClqVF+Xg= Subject key identifier: 82:03:FA:16:E8:FB:3E:06:61:DB:DF:51:69:3C:76:58:17:6F:75:33 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF0F14763D4CD551762526340 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 40676 IP address blocks: 140.174.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:47:63:d4:cd:55:17:62:52:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=6da12649-d9e8-4a54-834b-f137dd1e466e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:19:cd:72:b7:f5:e8:81:1e:91:29:29:17: fd:5c:34:d7:8a:b0:68:2a:3e:fa:4e:8c:7a:bd:35: b5:0b:8f:1a:74:85:45:39:45:d8:9d:17:f5:59:d7: be:89:01:d6:dc:d9:ba:27:31:51:a3:23:40:58:12: 4e:56:81:7b:c9:13:01:81:a9:ef:5a:04:df:1b:83: 93:1a:1a:21:8e:58:c2:5f:92:e6:9c:05:e1:7e:cd: 03:9d:3c:91:ed:25:43:60:f1:da:4a:d5:6c:95:d8: 70:48:59:1a:4f:e4:5a:a5:ab:09:21:3f:09:e2:4c: 96:86:ef:1a:78:09:17:fb:8d:19:f7:5c:d1:50:f8: 6b:8b:6a:06:43:bb:e6:45:34:b6:87:40:d8:38:8c: b6:ac:0d:1a:b9:74:26:c7:17:48:d4:c2:8c:e3:1f: 3e:d6:79:89:2e:19:8a:73:03:e8:85:bf:b4:48:6c: 50:8d:4e:5e:9a:be:db:18:19:78:b3:92:53:bc:b5: 18:c9:3e:b3:05:61:b8:a1:fd:d9:31:ce:24:8a:94: a4:0d:f2:7b:9b:a4:5a:9e:42:f8:ec:f9:0f:2d:21: ea:7f:a7:1e:84:f4:01:23:fb:34:2c:78:d7:4b:6a: 02:d0:76:81:44:9d:5c:69:7f:e4:7d:46:89:65:63: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:FA:16:E8:FB:3E:06:61:DB:DF:51:69:3C:76:58:17:6F:75:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:33:ed:7f:61:70:d1:28:05:34:ee:79:32:de:b9:cb:22:80: 7d:64:1b:a4:9c:77:d6:de:8f:fd:78:2c:3a:05:b8:58:4a:ee: 09:6c:db:79:0e:5a:21:af:ed:d3:17:15:4e:3c:27:5b:43:e0: fe:17:60:8d:41:72:bb:96:7e:27:00:df:cc:47:25:c8:6f:86: 7d:5d:a0:09:3f:7f:28:97:d7:ac:6f:e0:42:64:bd:e3:77:69: e7:08:a6:b7:1b:16:08:b6:81:96:a6:23:22:b5:64:1a:f5:56: 8e:73:21:0d:ce:5a:75:63:cf:c1:1d:cb:91:2a:e5:93:1c:b2: 04:eb:66:66:54:30:fc:a6:24:b9:e5:9c:15:1c:55:5c:cd:29: 51:df:6e:a7:c0:ad:da:59:2a:e6:94:ce:5e:f8:e5:a2:03:5f: 13:f8:ba:9c:30:1d:61:c7:e2:84:b1:6d:5b:9e:df:28:a4:6d: 2b:39:40:47:65:1e:dd:2e:92:44:27:a4:34:45:4c:22:e5:85: fe:40:b8:ef:ac:8e:0a:c1:32:2d:6c:cb:e9:b8:b5:10:3b:45: 36:ae:d7:63:73:fe:bb:6d:ad:dd:fa:66:cd:ec:28:65:7e:e5: f2:91:8b:8e:48:a2:6c:0d:24:8e:fd:ac:1a:81:50:d7:0a:02: 38:43:3f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Udj1M1VF2JSY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NmRhMTI2NDktZDllOC00YTU0LTgzNGItZjEzN2RkMWU0NjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtgZzXK39eiBHpEpKRf9XDTXirBoKj76Tox6 vTW1C48adIVFOUXYnRf1Wde+iQHW3Nm6JzFRoyNAWBJOVoF7yRMBganvWgTfG4OT GhohjljCX5LmnAXhfs0DnTyR7SVDYPHaStVsldhwSFkaT+RapasJIT8J4kyWhu8a eAkX+40Z91zRUPhri2oGQ7vmRTS2h0DYOIy2rA0auXQmxxdI1MKM4x8+1nmJLhmK cwPohb+0SGxQjU5emr7bGBl4s5JTvLUYyT6zBWG4of3ZMc4kipSkDfJ7m6RankL4 7PkPLSHqf6cehPQBI/s0LHjXS2oC0HaBRJ1caX/kfUaJZWMPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIID+hbo+z4GYdvfUWk8dlgXb3UzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjhjY2IxNjEtMmYxNy0z ZWY1LTkyZmUtNjlkMTU4OTkyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjK4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkz7X9hcNEoBTTueTLeucsigH1kG6Scd9bej/14LDoFuFhK7gls23kO WiGv7dMXFU48J1tD4P4XYI1BcruWficA38xHJchvhn1doAk/fyiX16xv4EJkveN3 aecIprcbFgi2gZamIyK1ZBr1Vo5zIQ3OWnVjz8Edy5Eq5ZMcsgTrZmZUMPymJLnl nBUcVVzNKVHfbqfArdpZKuaUzl745aIDXxP4upwwHWHH4oSxbVue3yikbSs5QEdl Ht0ukkQnpDRFTCLlhf5AuO+sjgrBMi1sy+m4tRA7RTau12Nz/rttrd36Zs3sKGV+ 5fKRi45IomwNJI79rBqBUNcKAjhDP0g= -----END CERTIFICATE-----Generated at Sat Aug 23 13:03:42 2025 by rpki-client