$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa File: 971c721e-2148-3a91-aae8-d902249a3b48.roa (raw, json) Hash identifier: gtn5AAWDi+nLj1LnPvcNlNVXQmbhWxcnKZFi2sFvbSA= Subject key identifier: 90:48:A5:FA:8A:64:B5:D2:3F:0B:87:1A:24:A2:BA:C8:4D:D2:6F:D4 Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F4328584AC9DB9C1DE8796ED9109C4B40 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 397388 IP address blocks: 140.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9c:1d:e8:79:6e:d9:10:9c:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a1fe4d49-6fdd-4376-9cd7-43be78e13b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:9d:de:55:a7:10:87:17:83:72:9f:ef:46: 8e:20:42:5e:b3:d3:36:6b:c9:db:cb:a9:5e:6a:ce: 46:0b:f9:4c:c6:07:fa:dc:ec:1c:27:36:a9:e0:31: 7a:d6:1a:f5:d9:8d:3e:48:e3:b6:ff:da:03:4c:bd: bf:31:0c:a4:50:f6:04:25:04:f1:9e:8b:c9:44:18: eb:2c:7e:d7:0b:1b:35:64:c7:01:cb:de:73:74:f1: ea:11:38:1f:f3:b9:af:34:30:19:66:c9:57:e9:3a: 80:d4:2e:89:11:83:99:c5:b9:02:95:82:d8:6a:ac: 26:2f:5b:75:9b:13:43:90:9a:12:fb:ac:6b:1c:86: a0:f1:94:be:cb:95:7c:4e:5f:c1:72:68:bd:f6:a6: 60:1c:fe:34:06:c7:de:cc:33:ce:6a:07:ee:24:f5: 0d:77:b7:58:69:38:6b:e9:e2:9b:47:13:0b:a7:55: 45:ca:ff:79:43:1c:eb:d6:1e:40:6b:4e:62:58:91: b8:2c:6d:9e:e2:cb:98:67:d3:fd:18:04:f1:f9:91: 9e:58:03:dc:8e:23:89:4f:d9:1d:2a:77:fd:3a:0c: 0f:38:01:7c:db:dc:cf:51:53:d6:04:1d:fe:9f:8d: 98:32:00:ea:3d:db:2e:4f:15:83:a6:06:e1:29:dd: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:48:A5:FA:8A:64:B5:D2:3F:0B:87:1A:24:A2:BA:C8:4D:D2:6F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e9:3d:ff:39:58:17:31:e9:6e:5f:ec:7a:1a:7b:b0:70:72: 4c:52:60:c6:6d:dc:4d:a8:60:86:1f:bf:ed:b7:71:cc:af:b6: 50:c0:01:ef:b1:75:4e:49:6d:c1:b7:18:56:fa:7d:5c:8c:17: 76:51:37:ef:0c:51:a6:2c:6a:98:ae:5a:81:63:72:6f:38:da: d9:d1:1d:10:b0:2d:e6:bb:8c:4a:f0:d9:a0:16:f6:84:85:4d: c4:27:11:52:eb:76:46:1c:56:84:b1:4f:8c:94:7c:8a:d9:29: 2a:61:88:ff:2f:9e:ce:50:af:1d:5c:64:15:84:8f:04:20:4b: db:92:a0:93:80:b3:d3:2f:fc:90:c5:72:a6:94:76:98:a6:e1: 83:d3:f7:12:f3:a1:94:55:01:d1:4b:e4:2c:be:5b:37:0a:d5: ec:8c:30:02:91:5c:2a:4b:84:9b:f3:35:f1:ce:be:43:9c:43: 62:5f:64:7a:57:e5:53:08:f5:68:ad:09:3f:21:4e:4b:05:70: cf:e5:5a:b0:09:06:6e:17:9b:80:db:2c:25:cf:78:99:9f:df: a9:97:b4:41:a6:1a:7a:df:9a:4c:2f:71:61:a6:16:45:62:1c: 56:ec:2d:21:38:ea:cd:b7:10:e0:6a:d3:b2:fd:8a:4d:08:43: 63:38:6d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25wd6Hlu2RCcS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTFmZTRkNDktNmZkZC00Mzc2LTljZDctNDNiZTc4ZTEzYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC2d3lWnEIcXg3Kf70aOIEJes9M2a8nby6le as5GC/lMxgf63OwcJzap4DF61hr12Y0+SOO2/9oDTL2/MQykUPYEJQTxnovJRBjr LH7XCxs1ZMcBy95zdPHqETgf87mvNDAZZslX6TqA1C6JEYOZxbkClYLYaqwmL1t1 mxNDkJoS+6xrHIag8ZS+y5V8Tl/Bcmi99qZgHP40BsfezDPOagfuJPUNd7dYaThr 6eKbRxMLp1VFyv95Qxzr1h5Aa05iWJG4LG2e4suYZ9P9GATx+ZGeWAPcjiOJT9kd Knf9OgwPOAF829zPUVPWBB3+n42YMgDqPdsuTxWDpgbhKd39/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBIpfqKZLXSPwuHGiSiushN0m/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvOTcxYzcyMWUtMjE0OC0z YTkxLWFhZTgtZDkwMjI0OWEzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3pPf85WBcx6W5f7Hoae7BwckxSYMZt3E2oYIYfv+23ccyvtlDAAe+x dU5JbcG3GFb6fVyMF3ZRN+8MUaYsapiuWoFjcm842tnRHRCwLea7jErw2aAW9oSF TcQnEVLrdkYcVoSxT4yUfIrZKSphiP8vns5Qrx1cZBWEjwQgS9uSoJOAs9Mv/JDF cqaUdpim4YPT9xLzoZRVAdFL5Cy+WzcK1eyMMAKRXCpLhJvzNfHOvkOcQ2JfZHpX 5VMI9WitCT8hTksFcM/lWrAJBm4Xm4DbLCXPeJmf36mXtEGmGnrfmkwvcWGmFkVi HFbsLSE46s23EOBq07L9ik0IQ2M4bV8= -----END CERTIFICATE-----Generated at Sun Aug 24 08:58:21 2025 by rpki-client