$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/0b705d25-1fb7-3013-ac75-5ac549005aac.roa File: 0b705d25-1fb7-3013-ac75-5ac549005aac.roa (raw, json) Hash identifier: twC/w3Yng+tkov9WKgdXJGJEEeoXCayobkMt9Psl/zQ= Subject key identifier: C8:19:4A:8A:D1:C0:3D:16:9E:1C:67:A5:5C:99:59:AB:5A:67:A2:E9 Certificate issuer: /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Certificate serial: 010D0C9F4328584AD936677C26FCA77F4D990D80 Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/0b705d25-1fb7-3013-ac75-5ac549005aac.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 398343 IP address blocks: 141.195.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:67:7c:26:fc:a7:7f:4d:99:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=6aa3dd0b-42be-404d-88d3-8494016c78f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:76:d7:5b:d9:a0:b1:82:e1:63:ff:32:73: 95:20:b4:2b:44:8d:25:38:53:50:37:f7:a8:3e:7a: 8b:4d:a7:2f:d7:c6:77:ee:8a:7d:2d:82:ea:8b:e7: aa:94:b0:aa:74:89:5c:7d:aa:ec:41:bd:8e:a3:a4: f0:a6:95:f1:03:48:e4:40:ec:27:bc:f7:44:cd:75: d5:49:18:2c:15:80:86:fa:7c:36:b6:f9:10:b5:56: 1a:48:f1:ac:9c:8f:56:8c:2a:59:86:4a:14:ea:7b: 93:9e:43:e1:90:e0:87:7c:66:5b:18:97:fa:58:b0: b7:c8:73:a6:a7:82:7e:8c:33:d0:40:c9:5c:94:43: b2:de:78:42:5f:cd:da:78:d7:ee:4b:32:6c:40:f9: 92:8a:24:3f:72:c7:84:37:5d:0f:25:fd:39:01:ff: a2:d3:bd:85:0e:1d:ea:47:e0:35:ea:1e:a0:4a:27: 04:47:28:2e:ce:37:f6:e1:56:74:2d:19:db:ca:83: a3:1d:d3:ac:5f:c3:4c:62:17:f6:36:df:23:96:bc: 63:c4:65:b9:07:a7:aa:cd:2e:c1:78:88:d9:ca:19: d4:5c:30:82:48:e7:19:28:41:4b:ff:d7:8b:6c:56: 3c:77:c7:23:7c:86:f7:4e:7b:42:38:85:57:c1:e9: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:4A:8A:D1:C0:3D:16:9E:1C:67:A5:5C:99:59:AB:5A:67:A2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/0b705d25-1fb7-3013-ac75-5ac549005aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl X509v3 Authority Key Identifier: keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer sbgp-ipAddrBlock: critical IPv4: 141.195.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f5:01:a4:91:72:61:0b:9c:e8:76:82:6f:fe:4b:77:ca:46: 04:b9:3a:93:7f:e2:0b:4a:74:58:8d:70:17:9f:b4:dc:49:a5: e8:14:a8:23:ca:be:e0:f6:81:1e:d9:89:dc:a1:d0:db:08:56: 1f:b0:64:9b:81:0c:87:bf:a4:56:ab:44:2a:f3:46:54:5a:dd: 77:5b:9c:29:77:4e:b0:e3:f1:53:86:98:46:b2:00:79:ff:4a: 72:40:9b:ae:fd:53:8b:f7:fb:b7:ce:4b:34:94:f9:a4:e7:e5: 27:79:c3:e4:66:83:78:fa:55:ea:9c:0c:13:32:2a:98:1c:8d: a2:5a:23:b5:f7:2a:40:73:0c:f4:f6:ab:fd:3e:92:b1:df:be: e4:83:7d:f9:24:32:52:ad:5a:1f:11:55:cd:5e:31:00:40:f2: 9b:86:f2:58:58:8b:bd:de:4b:69:61:af:d1:ec:dc:fe:9e:a0: b0:55:44:70:a9:76:86:95:3f:23:9a:65:40:29:7b:06:a9:29: 6f:94:f0:65:c8:ad:4d:25:97:68:85:8d:62:fd:9b:ed:ce:8a: 21:1a:1d:b7:c1:91:fb:d8:b1:a4:ad:e9:6f:c1:ab:66:de:cc: bd:82:df:49:0b:f1:dc:4c:98:04:0d:4f:ba:12:98:58:ed:8a: 89:13:cc:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmd8Jvynf02ZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1OGIyZDctZGI5MC00ZTE2LWE1NWMtMWRlNjI5ZjJj YTA4MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NmFhM2RkMGItNDJiZS00MDRkLTg4ZDMtODQ5NDAxNmM3OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyx211vZoLGC4WP/MnOVILQrRI0lOFNQN/eo PnqLTacv18Z37op9LYLqi+eqlLCqdIlcfarsQb2Oo6TwppXxA0jkQOwnvPdEzXXV SRgsFYCG+nw2tvkQtVYaSPGsnI9WjCpZhkoU6nuTnkPhkOCHfGZbGJf6WLC3yHOm p4J+jDPQQMlclEOy3nhCX83aeNfuSzJsQPmSiiQ/cseEN10PJf05Af+i072FDh3q R+A16h6gSicERyguzjf24VZ0LRnbyoOjHdOsX8NMYhf2Nt8jlrxjxGW5B6eqzS7B eIjZyhnUXDCCSOcZKEFL/9eLbFY8d8cjfIb3TntCOIVXwenUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgZSorRwD0WnhxnpVyZWataZ6LpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4 YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2MjlmMmNhMDgvMGI3MDVkMjUtMWZiNy0z MDEzLWFjNzUtNWFjNTQ5MDA1YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzc1OGIyZDctZGI5MC00ZTE2LWE1 NWMtMWRlNjI5ZjJjYTA4L2M3NThiMmQ3LWRiOTAtNGUxNi1hNTVjLTFkZTYyOWYy Y2EwOC5jcmwwHwYDVR0jBBgwFoAUDmCzSifD5DV2KMoQViGQ2iXNZdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNzU4YjJkNy1kYjkwLTRlMTYtYTU1Yy0xZGU2 MjlmMmNhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz1AaSRcmELnOh2gm/+S3fKRgS5OpN/4gtKdFiNcBeftNxJpegUqCPK vuD2gR7Zidyh0NsIVh+wZJuBDIe/pFarRCrzRlRa3XdbnCl3TrDj8VOGmEayAHn/ SnJAm679U4v3+7fOSzSU+aTn5Sd5w+Rmg3j6VeqcDBMyKpgcjaJaI7X3KkBzDPT2 q/0+krHfvuSDffkkMlKtWh8RVc1eMQBA8puG8lhYi73eS2lhr9Hs3P6eoLBVRHCp doaVPyOaZUApewapKW+U8GXIrU0ll2iFjWL9m+3OiiEaHbfBkfvYsaSt6W/Bq2be zL2C30kL8dxMmAQNT7oSmFjtiokTzFk= -----END CERTIFICATE-----Generated at Sun Aug 24 01:07:14 2025 by rpki-client