$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa File: bf80667c-5655-3355-a79e-cb6b3750f3f8.roa (raw, json) Hash identifier: wdPc1xuypKxp9mm95f/ftE54Z0g2A/vXgl7DXgNMBR4= Subject key identifier: 15:36:EF:59:90:20:51:E8:7A:C1:31:D3:49:CE:49:10:EE:D2:41:B6 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584ACCA692AD31CA10DF159D4300 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 6363 IP address blocks: 134.141.0.0/22 maxlen: 24 134.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:92:ad:31:ca:10:df:15:9d:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=1e60fed7-c93c-4cc9-8725-ea96c743f88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:c4:fe:85:db:9e:47:40:d1:32:02:cf:a9: 54:b4:4c:c9:ab:0b:fb:74:e7:07:36:85:30:70:e0: 54:02:94:9e:c9:9b:d8:68:f3:07:ff:15:d1:03:6c: 42:a9:45:59:01:71:7c:19:60:a4:7f:08:e7:95:94: 80:4a:96:b6:7c:ed:1d:8c:86:b3:77:50:49:61:3a: 2d:34:8e:be:ca:6f:94:39:ef:b2:0a:ca:63:4f:6f: 8a:56:2d:6d:21:72:b2:c3:48:15:4e:81:1a:f0:4f: 2a:49:5b:ad:21:56:19:00:a9:ec:4c:b9:c2:46:f8: 32:20:a5:42:63:6a:80:62:05:45:09:fb:a9:3d:aa: cc:43:9f:5c:45:e5:51:38:bc:7f:59:90:0f:35:e2: 3e:fe:37:94:39:cd:57:a9:1a:1c:67:3b:3c:1b:86: 20:0c:23:42:f4:12:73:5c:44:8e:0d:78:18:76:75: f5:f4:9b:04:2c:fe:33:10:94:e6:57:65:74:0e:d7: ef:ea:eb:56:ba:34:0b:4d:5e:07:51:54:58:bb:78: dc:66:d0:69:be:b7:24:76:b8:ef:24:02:d2:1b:1c: a0:03:0c:4e:fd:45:24:7e:a1:99:a6:1b:45:1d:ae: af:f9:61:cf:b9:a4:e6:ee:e1:1e:23:2c:db:d6:ac: 60:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:EF:59:90:20:51:E8:7A:C1:31:D3:49:CE:49:10:EE:D2:41:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.0.0-134.141.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:69:25:62:54:b3:20:02:a8:36:37:1a:70:9c:b8:be:89:4c: 85:1b:4d:11:a6:cf:aa:ff:f6:9d:8e:16:74:72:be:20:e3:ca: 72:98:46:23:b0:68:bb:c8:f3:bf:7b:6b:74:0f:69:a9:39:4d: e5:8c:7d:5c:7e:74:f9:cd:38:e5:5b:06:53:b9:64:41:e0:c1: 26:3d:37:ea:02:95:69:49:90:be:b5:fe:0a:64:97:a4:4a:32: 28:b7:0a:cf:c0:13:88:27:61:ca:87:71:20:77:98:85:d9:ed: aa:80:08:c6:c7:64:14:19:00:dd:ed:bd:4e:75:aa:33:32:19: 7f:46:93:5c:58:2d:78:f4:e5:5c:9d:c1:29:0f:e6:fd:e7:08: c3:78:95:15:27:6f:25:b0:13:88:0d:0a:25:e4:d6:92:15:63: 24:ee:bd:71:3f:a2:d0:34:3e:5f:75:95:35:3c:41:3e:c6:c5: 8d:97:e8:59:a4:e2:e5:68:a6:f6:8a:c8:fc:74:72:cb:21:f9: ca:01:1b:4c:8b:34:5c:91:70:0d:6f:11:46:c8:5d:31:bb:21: 4e:0a:a3:ed:fc:90:3e:e0:3f:13:cb:05:c4:84:2f:3c:25:71: 5b:5f:c9:e2:46:df:9a:25:15:5d:1d:a5:c9:8d:fa:5d:46:fe: f0:21:65:d9 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWErMppKtMcoQ3xWdQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWU2MGZlZDctYzkzYy00Y2M5LTg3MjUtZWE5NmM3NDNmODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYrE/oXbnkdA0TICz6lUtEzJqwv7dOcHNoUw cOBUApSeyZvYaPMH/xXRA2xCqUVZAXF8GWCkfwjnlZSASpa2fO0djIazd1BJYTot NI6+ym+UOe+yCspjT2+KVi1tIXKyw0gVToEa8E8qSVutIVYZAKnsTLnCRvgyIKVC Y2qAYgVFCfupParMQ59cReVROLx/WZAPNeI+/jeUOc1XqRocZzs8G4YgDCNC9BJz XESODXgYdnX19JsELP4zEJTmV2V0Dtfv6utWujQLTV4HUVRYu3jcZtBpvrckdrjv JALSGxygAwxO/UUkfqGZphtFHa6v+WHPuaTm7uEeIyzb1qxg3QIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFBU271mQIFHoesEx00nOSRDu0kG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYmY4MDY2N2MtNTY1NS0z MzU1LWE3OWUtY2I2YjM3NTBmM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCGjQME AIaNBDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB6aSViVLMgAqg2NxpwnLi+iUyFG00Rps+q//adjhZ0cr4g 48pymEYjsGi7yPO/e2t0D2mpOU3ljH1cfnT5zTjlWwZTuWRB4MEmPTfqApVpSZC+ tf4KZJekSjIotwrPwBOIJ2HKh3Egd5iF2e2qgAjGx2QUGQDd7b1OdaozMhl/RpNc WC149OVcncEpD+b95wjDeJUVJ28lsBOIDQol5NaSFWMk7r1xP6LQND5fdZU1PEE+ xsWNl+hZpOLlaKb2isj8dHLLIfnKARtMizRckXANbxFGyF0xuyFOCqPt/JA+4D8T ywXEhC88JXFbX8niRt+aJRVdHaXJjfpdRv7wIWXZ -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:10 2025 by rpki-client