$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa File: f4268c2a-59de-3a1d-b2ec-3952e6424669.roa (raw, json) Hash identifier: W28x60U6oTAGh4v7/PaeGThnLxjE0lz6LdOrxYxyxK4= Subject key identifier: CB:EB:5B:50:CB:48:67:2F:65:AB:BC:64:D9:41:77:81:FC:1A:24:78 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584ACE0BA585FC0362D6F2E34BE0 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 398343 IP address blocks: 165.140.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a5:85:fc:03:62:d6:f2:e3:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=fb084d70-3539-4684-a414-d43690fa7a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:6a:19:52:ab:4b:36:f8:4c:a3:51:72:91: e8:fb:4e:b9:3a:12:0a:8d:cc:ea:e5:a8:78:0e:61: 1b:5b:27:ac:a6:9b:20:21:c6:5b:d0:94:d7:77:03: e1:a0:ff:63:20:ea:92:9e:4a:20:94:d3:82:f1:1c: 27:ef:06:92:41:bd:71:68:8d:9b:95:9a:3b:ab:e2: c9:0b:ec:49:94:cb:b9:cd:2d:61:3a:f2:2c:3b:d2: 77:14:62:b3:ff:50:0b:6c:8a:85:4c:bf:84:8f:76: 57:97:e2:12:06:0f:a5:eb:cb:ed:36:e1:ec:11:d0: db:eb:d4:68:1c:f1:48:ea:a1:33:8d:71:eb:a4:2f: 3b:ea:3b:6a:b9:dd:19:47:7a:b7:94:05:1e:a0:79: 7d:e0:f3:f4:3c:16:c9:e5:6f:3e:9f:e8:d8:5b:31: c4:0d:50:4b:42:47:ca:f5:c1:01:a4:85:88:25:b0: e7:0b:77:2f:57:1c:78:8c:05:a6:98:06:5c:7f:20: 03:e4:d8:dc:f8:de:6a:02:c8:7f:cb:2e:7b:6a:b2: 74:90:38:61:36:a9:5e:1b:f7:c1:30:e0:6b:4a:75: 7e:ce:d4:fd:fd:ab:dd:6b:eb:e6:21:a4:7f:c0:bd: 7f:ef:9b:a0:c2:23:ac:23:29:57:64:40:56:27:60: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EB:5B:50:CB:48:67:2F:65:AB:BC:64:D9:41:77:81:FC:1A:24:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 165.140.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:36:2e:d7:46:2a:08:81:25:0d:1d:d7:cd:05:d9:e5:0f:58: 70:a6:4d:a6:be:30:b3:c8:29:ba:56:12:cf:c9:43:33:6c:d9: f6:58:02:eb:00:b9:c0:55:0b:86:d7:74:70:04:60:3b:34:25: 62:00:de:0d:15:f3:2c:98:15:34:20:4c:c5:20:ef:4c:13:4e: 64:cb:68:db:9a:33:04:cb:f8:ec:50:4b:4e:eb:87:db:ea:3a: ed:76:bf:90:b5:cf:9e:5d:47:57:63:2d:5c:7d:11:b4:e6:d9: bc:90:a2:3c:a4:d0:eb:34:46:98:a2:97:17:ec:06:77:e9:f5: 9f:e3:b3:29:d0:fa:b1:89:f7:9d:9e:8e:33:fb:5b:c1:ee:d3: f9:28:2c:ba:9c:ca:d7:6d:b9:67:9c:5d:73:96:70:e2:59:43: 31:4b:d7:75:99:68:07:00:89:9b:e1:63:af:e7:f0:d4:e5:1d: 31:d4:74:ff:7e:aa:d3:f3:5c:70:11:d3:8e:01:71:11:01:2b: 54:71:82:37:c8:a3:21:cb:a3:9c:ae:eb:e7:ee:91:fe:c7:86: 70:0e:dc:44:7c:cb:85:5b:ed:2a:14:03:4e:3e:d9:b3:92:a1: 6d:a0:9f:1b:de:35:7d:5a:4d:a6:0c:56:22:83:cc:ba:53:96: a5:03:b3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6WF/ANi1vLjS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZmIwODRkNzAtMzUzOS00Njg0LWE0MTQtZDQzNjkwZmE3YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SpqGVKrSzb4TKNRcpHo+065OhIKjczq5ah4 DmEbWyesppsgIcZb0JTXdwPhoP9jIOqSnkoglNOC8Rwn7waSQb1xaI2blZo7q+LJ C+xJlMu5zS1hOvIsO9J3FGKz/1ALbIqFTL+Ej3ZXl+ISBg+l68vtNuHsEdDb69Ro HPFI6qEzjXHrpC876jtqud0ZR3q3lAUeoHl94PP0PBbJ5W8+n+jYWzHEDVBLQkfK 9cEBpIWIJbDnC3cvVxx4jAWmmAZcfyAD5Njc+N5qAsh/yy57arJ0kDhhNqleG/fB MOBrSnV+ztT9/avda+vmIaR/wL1/75ugwiOsIylXZEBWJ2BE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvrW1DLSGcvZau8ZNlBd4H8GiR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZjQyNjhjMmEtNTlkZS0z YTFkLWIyZWMtMzk1MmU2NDI0NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo2LtdGKgiBJQ0d180F2eUPWHCmTaa+MLPIKbpWEs/JQzNs2fZYAusA ucBVC4bXdHAEYDs0JWIA3g0V8yyYFTQgTMUg70wTTmTLaNuaMwTL+OxQS07rh9vq Ou12v5C1z55dR1djLVx9EbTm2byQojyk0Os0RpiilxfsBnfp9Z/jsynQ+rGJ952e jjP7W8Hu0/koLLqcytdtuWecXXOWcOJZQzFL13WZaAcAiZvhY6/n8NTlHTHUdP9+ qtPzXHAR044BcREBK1RxgjfIoyHLo5yu6+fukf7HhnAO3ER8y4Vb7SoUA04+2bOS oW2gnxveNX1aTaYMViKDzLpTlqUDs98= -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:27 2025 by rpki-client