$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa File: 4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa (raw, json) Hash identifier: GLXHIZgACZ6ozc64RnPWW0cLgZhHRmghgZaisX1CZ3Q= Subject key identifier: 89:2D:55:A0:4C:5C:F4:55:EE:47:46:A8:B2:D4:19:91:04:0F:BA:69 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584ABF409E816E69125B96599580 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa Signing time: Mon 04 Aug 2025 17:50:21 +0000 ROA not before: Mon 04 Aug 2025 17:50:21 +0000 ROA not after: Sun 02 Nov 2025 18:50:21 +0000 asID: 62564 IP address blocks: 141.140.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:40:9e:81:6e:69:12:5b:96:59:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 4 17:50:21 2025 GMT Not After : Nov 2 18:50:21 2025 GMT Subject: CN=1e24fed7-e612-43e4-acc9-4de7089c9091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9c:58:88:31:dd:21:5f:8a:82:74:da:2d:a2: 1d:18:5c:a2:25:6c:04:a9:12:32:a5:e9:32:57:c9: e7:fe:77:74:54:9f:95:be:4b:9a:64:f8:f8:5e:75: 57:ef:54:af:da:de:49:b9:ef:c0:6b:3f:28:cc:7c: 11:4e:5d:e4:af:e4:ca:f7:93:88:c7:a1:d6:dc:05: 75:5e:16:30:74:4f:f0:18:13:89:51:65:e7:60:45: 2a:88:36:ab:bf:4b:79:13:6c:8b:55:1c:91:72:3c: 7d:ac:c9:86:f2:23:f5:7b:60:c7:8e:32:24:6d:c3: 89:8f:19:59:bd:76:36:41:95:69:12:65:f4:f1:bc: 03:4e:dd:dc:3b:5d:67:9c:50:de:8a:fe:3f:5e:4b: 93:20:c0:8d:b2:95:23:41:42:11:b7:ff:26:ee:a3: 52:58:b1:da:79:74:1e:b5:16:3d:e1:1f:52:00:e3: d6:b6:86:40:f1:43:11:db:0f:a5:75:da:68:4a:3b: 28:0d:3e:04:a8:7f:39:d7:df:cc:73:8d:67:4a:c9: d4:80:f1:b0:3b:dd:24:cb:93:33:97:5d:77:c2:32: da:ca:45:cc:ca:ad:62:1f:5c:fa:60:24:fb:36:0b: da:c8:27:bc:2d:0e:ac:6d:c0:71:2a:52:82:d1:39: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:55:A0:4C:5C:F4:55:EE:47:46:A8:B2:D4:19:91:04:0F:BA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:42:fb:de:27:79:ac:20:3e:e8:31:a8:a2:fe:b5:20:ef:70: c3:ef:04:c5:4d:da:fa:42:43:71:f8:b2:17:94:6c:98:7d:27: f7:e0:bc:aa:46:44:b3:aa:d1:50:63:2f:8b:c5:a5:be:38:50: a9:0b:35:1c:4c:01:89:0d:65:a5:d7:a4:4d:82:3b:38:ed:7c: d8:b9:f1:12:bb:94:c9:e3:5c:33:f9:08:f4:db:93:44:d1:98: 75:a3:0c:a0:01:f4:b7:4a:d9:14:59:c1:1a:3b:ac:56:f5:80: de:b3:50:f1:22:a2:14:a0:08:6f:4c:12:27:92:99:e3:bc:0c: 66:4d:3b:ff:92:76:41:d6:20:ae:a0:07:3d:44:5f:ca:19:6d: 3a:4e:9f:01:cc:cc:b7:48:ad:31:0a:eb:8c:49:17:0a:6f:52: f9:23:4b:45:13:1f:5e:c0:4c:aa:26:5d:c4:51:90:63:b0:6f: f2:7f:d2:16:6a:9b:b9:f6:09:12:1b:c6:52:bb:4b:06:81:59: 30:70:b5:58:e7:99:c6:50:16:b3:ae:a1:db:5a:c7:b5:e1:90: 9e:c0:22:9a:73:cb:f6:51:88:1c:fb:60:87:e4:45:0d:b7:a0: f2:f6:7c:17:c1:93:70:7d:94:a6:d2:6d:d8:f8:3a:82:83:a6: 57:0d:57:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/QJ6BbmkSW5ZZlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDgwNDE3NTAyMVoXDTI1MTEwMjE4NTAyMVowLzEtMCsGA1UEAxMk MWUyNGZlZDctZTYxMi00M2U0LWFjYzktNGRlNzA4OWM5MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JxYiDHdIV+KgnTaLaIdGFyiJWwEqRIypeky V8nn/nd0VJ+VvkuaZPj4XnVX71Sv2t5Jue/Aaz8ozHwRTl3kr+TK95OIx6HW3AV1 XhYwdE/wGBOJUWXnYEUqiDarv0t5E2yLVRyRcjx9rMmG8iP1e2DHjjIkbcOJjxlZ vXY2QZVpEmX08bwDTt3cO11nnFDeiv4/XkuTIMCNspUjQUIRt/8m7qNSWLHaeXQe tRY94R9SAOPWtoZA8UMR2w+lddpoSjsoDT4EqH8519/Mc41nSsnUgPGwO90ky5Mz l113wjLaykXMyq1iH1z6YCT7NgvayCe8LQ6sbcBxKlKC0TlFwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIktVaBMXPRV7kdGqLLUGZEED7ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNGZiY2ZhMmEtOTg3YS0z ZjBmLWJjYjUtN2QzMDI0MGYxZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApC+94neawgPugxqKL+tSDvcMPvBMVN2vpCQ3H4sheUbJh9J/fgvKpG RLOq0VBjL4vFpb44UKkLNRxMAYkNZaXXpE2COzjtfNi58RK7lMnjXDP5CPTbk0TR mHWjDKAB9LdK2RRZwRo7rFb1gN6zUPEiohSgCG9MEieSmeO8DGZNO/+SdkHWIK6g Bz1EX8oZbTpOnwHMzLdIrTEK64xJFwpvUvkjS0UTH17ATKomXcRRkGOwb/J/0hZq m7n2CRIbxlK7SwaBWTBwtVjnmcZQFrOuodtax7XhkJ7AIppzy/ZRiBz7YIfkRQ23 oPL2fBfBk3B9lKbSbdj4OoKDplcNV+w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:17:02 2025 by rpki-client