$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/a7389e05-8cae-390e-9e80-9e7a92b6fb78.roa File: a7389e05-8cae-390e-9e80-9e7a92b6fb78.roa (raw, json) Hash identifier: gMdGmIkzygcq/QCmT6ic6nB+jhBcILInzExyyGuXKnc= Subject key identifier: 0F:3A:E7:C8:77:69:0C:37:39:E6:6F:B3:71:58:DB:4F:63:DC:D4:B7 Certificate issuer: /CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Certificate serial: 010D0C9F4328584AD0C7D0AF6AD23EE6798429BB Authority key identifier: 39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/a7389e05-8cae-390e-9e80-9e7a92b6fb78.roa Signing time: Mon 11 Aug 2025 00:31:30 +0000 ROA not before: Mon 11 Aug 2025 00:31:30 +0000 ROA not after: Sun 09 Nov 2025 01:31:30 +0000 asID: 26548 IP address blocks: 140.235.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:c7:d0:af:6a:d2:3e:e6:79:84:29:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Validity Not Before: Aug 11 00:31:30 2025 GMT Not After : Nov 9 01:31:30 2025 GMT Subject: CN=1c46ba5f-93af-4abd-9521-deda121e3470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:88:1b:0d:5c:f2:14:c0:93:30:c9:da:7b: bf:8d:f2:39:75:c6:ff:a0:62:e6:a5:27:20:3b:55: 6d:de:7f:56:e6:64:82:a2:a2:c1:f8:56:d3:eb:99: e0:31:1b:4d:94:64:ba:e7:85:86:7f:94:21:17:93: a7:f3:f4:e6:cf:ab:23:1a:01:4c:94:ae:c7:27:1f: dd:bf:1e:47:e3:87:a3:4a:c4:e7:e3:df:e6:f3:ac: 02:f7:70:99:4a:d2:4b:d3:fa:1b:08:b3:d0:71:6c: 48:be:2d:b4:c3:6c:9b:3d:99:24:ad:71:cd:6e:4e: 9e:6a:30:69:1e:ae:1e:d5:c6:b9:1b:ae:a0:10:a9: 6f:4b:c3:de:96:f8:40:25:b6:0d:96:d8:01:1d:13: 8d:99:1b:cf:96:ab:a2:7d:46:4c:9f:75:b6:7a:0e: c4:eb:7e:31:08:ac:c5:f9:4f:ff:97:54:b1:7c:44: ba:47:5e:60:70:b9:12:56:88:d2:f6:73:31:9a:e8: e4:9e:d3:14:f4:2f:0a:cb:36:c7:e1:64:4e:b9:c6: cf:36:89:29:7c:62:73:55:9a:71:4f:28:46:4e:6f: 83:e0:79:67:8c:56:23:ad:9f:c4:3c:27:f0:b2:66: 29:9b:31:2a:64:c1:83:12:77:7d:90:3f:09:77:be: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:E7:C8:77:69:0C:37:39:E6:6F:B3:71:58:DB:4F:63:DC:D4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/a7389e05-8cae-390e-9e80-9e7a92b6fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl X509v3 Authority Key Identifier: keyid:39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer sbgp-ipAddrBlock: critical IPv4: 140.235.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:51:92:06:39:be:23:7c:a5:2b:2a:b6:c9:bd:ef:60:5d:d8: e0:19:e3:9f:03:d4:87:b2:10:e1:85:f3:ab:65:80:13:78:ba: 68:e5:de:92:df:15:40:8a:f8:a7:31:05:62:df:56:c0:19:aa: dd:4b:4d:9e:67:09:88:ec:82:a2:cd:d8:63:f3:fc:de:56:68: ed:ac:bc:b4:df:03:ae:1e:2c:1d:8e:22:88:f4:57:91:f4:b2: 5e:e7:f5:7a:16:2a:c6:32:39:bf:5a:44:3c:fd:99:fc:09:86: c8:8e:40:0b:b0:9b:ed:53:2c:c8:74:c7:c2:61:90:1f:1e:f6: 8c:ec:94:3d:ac:0c:1a:5e:12:2e:f2:41:53:d5:96:ca:05:97: fd:e8:1e:95:81:a9:9b:c8:4b:33:cd:6c:c2:6b:9b:b4:3c:85: 23:7b:65:83:24:7b:8d:90:28:dd:4b:a6:7a:6d:bc:59:a2:cd: 7e:62:bb:64:10:5e:a8:cc:5c:25:34:c5:de:aa:8f:b6:a5:c3: cd:50:d3:e1:b6:77:3e:b6:0a:16:49:b9:91:e3:86:3d:ae:8f: c9:a0:36:6c:1c:ad:7b:96:05:70:a8:e2:af:f3:bd:21:6a:58: cd:56:71:a6:d0:81:89:51:fe:fe:01:ec:e8:f2:a2:71:a9:22: 79:ce:fe:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQx9CvatI+5nmEKbswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZGZkNTEtNTkwNy00ZDkzLThjZTMtMDViOWJjNzU0 ZWFhMB4XDTI1MDgxMTAwMzEzMFoXDTI1MTEwOTAxMzEzMFowLzEtMCsGA1UEAxMk MWM0NmJhNWYtOTNhZi00YWJkLTk1MjEtZGVkYTEyMWUzNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmluIGw1c8hTAkzDJ2nu/jfI5dcb/oGLmpScg O1Vt3n9W5mSCoqLB+FbT65ngMRtNlGS654WGf5QhF5On8/Tmz6sjGgFMlK7HJx/d vx5H44ejSsTn49/m86wC93CZStJL0/obCLPQcWxIvi20w2ybPZkkrXHNbk6eajBp Hq4e1ca5G66gEKlvS8PelvhAJbYNltgBHRONmRvPlquifUZMn3W2eg7E634xCKzF +U//l1SxfES6R15gcLkSVojS9nMxmujkntMU9C8KyzbH4WROucbPNokpfGJzVZpx TyhGTm+D4HlnjFYjrZ/EPCfwsmYpmzEqZMGDEnd9kD8Jd76cqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8658h3aQw3OeZvs3FY209j3NS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85OTdk ZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5YmM3NTRlYWEvYTczODllMDUtOGNhZS0z OTBlLTllODAtOWU3YTkyYjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTk3ZGZkNTEtNTkwNy00ZDkzLThj ZTMtMDViOWJjNzU0ZWFhLzk5N2RmZDUxLTU5MDctNGQ5My04Y2UzLTA1YjliYzc1 NGVhYS5jcmwwHwYDVR0jBBgwFoAUOSO4MzC30c2hg2O41M8X/taRZJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85OTdkZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5 YmM3NTRlYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtRkgY5viN8pSsqtsm972Bd2OAZ458D1IeyEOGF86tlgBN4umjl3pLf FUCK+KcxBWLfVsAZqt1LTZ5nCYjsgqLN2GPz/N5WaO2svLTfA64eLB2OIoj0V5H0 sl7n9XoWKsYyOb9aRDz9mfwJhsiOQAuwm+1TLMh0x8JhkB8e9ozslD2sDBpeEi7y QVPVlsoFl/3oHpWBqZvISzPNbMJrm7Q8hSN7ZYMke42QKN1LpnptvFmizX5iu2QQ XqjMXCU0xd6qj7alw81Q0+G2dz62ChZJuZHjhj2uj8mgNmwcrXuWBXCo4q/zvSFq WM1WcabQgYlR/v4B7OjyonGpInnO/qQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:20 2025 by rpki-client