$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/7583a1e2-5a1d-396e-a198-c99ff99c6e92.roa File: 7583a1e2-5a1d-396e-a198-c99ff99c6e92.roa (raw, json) Hash identifier: aefPBLJOXAJPWNPOgLc+nuh7aGy1oq+0gfYcGeweCv0= Subject key identifier: 9C:D5:E4:51:6E:1C:1A:98:DF:F2:04:DE:58:19:76:D1:27:25:9A:EF Certificate issuer: /CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Certificate serial: 010D0C9F4328584ABCFC3EFFDB2C4B252CAFF400 Authority key identifier: 39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/7583a1e2-5a1d-396e-a198-c99ff99c6e92.roa Signing time: Sun 03 Aug 2025 22:20:59 +0000 ROA not before: Sun 03 Aug 2025 22:20:59 +0000 ROA not after: Sat 01 Nov 2025 22:20:59 +0000 asID: 57844 IP address blocks: 140.235.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:fc:3e:ff:db:2c:4b:25:2c:af:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Validity Not Before: Aug 3 22:20:59 2025 GMT Not After : Nov 1 22:20:59 2025 GMT Subject: CN=9cabc876-e7b9-4043-b20e-d1c1d6f682cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:08:0f:19:ed:e1:4b:e3:c2:b4:58:b3:7e: 46:68:3d:ac:46:08:92:39:3d:13:23:be:20:92:15: 1d:d1:c8:db:60:85:c9:77:1c:95:b9:ca:41:7e:14: c8:4f:38:cb:e3:20:3b:ca:86:a2:ab:38:1b:79:85: 2c:a6:c0:66:9b:1c:f6:1b:6d:d7:48:fe:22:86:52: af:62:67:f1:4c:7c:9f:44:cf:9f:a9:18:51:99:df: ad:6b:81:34:d9:06:b1:8d:5e:0d:fd:f2:72:63:31: ae:35:62:3a:44:85:ea:fd:e6:0c:22:c3:b4:58:38: e6:19:74:06:36:f2:05:6f:56:74:e1:87:41:50:bd: c7:d9:08:02:ed:d8:cd:ce:8e:8f:ba:13:c3:33:88: af:65:e2:e7:19:17:95:1e:eb:27:ff:a9:bc:5d:c0: 8b:8b:ba:53:c2:a3:f0:18:c2:52:43:d5:96:e7:21: e1:73:93:f6:9e:33:47:87:f3:4b:bf:e2:04:ce:1e: 91:d1:6d:4d:1a:ff:35:18:f4:03:4b:ed:a7:d1:9c: 11:8e:e4:00:ef:70:d2:a4:f4:54:e9:45:18:f6:25: 5e:2c:12:68:8e:a6:a9:da:c1:f8:4e:60:04:9d:42: 16:ce:b2:7c:21:64:22:16:fc:50:42:58:07:cf:49: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D5:E4:51:6E:1C:1A:98:DF:F2:04:DE:58:19:76:D1:27:25:9A:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/7583a1e2-5a1d-396e-a198-c99ff99c6e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl X509v3 Authority Key Identifier: keyid:39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer sbgp-ipAddrBlock: critical IPv4: 140.235.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7d:51:2a:cf:3c:fb:d4:9c:e2:76:84:76:10:a3:bc:6a:26: cf:2e:77:f5:c3:bc:92:bc:33:e9:2a:83:9a:5b:41:5a:5f:32: c1:ee:64:d2:e2:c1:92:f3:e1:ea:c1:24:82:93:a8:2b:8e:c8: b0:e3:75:0e:a3:da:de:db:f5:4d:91:00:e9:05:39:0e:72:13: 92:79:8f:65:c5:9a:d4:21:48:b5:85:21:28:9f:9c:80:de:d2: a5:30:4b:52:36:17:0d:19:83:34:6e:f2:12:96:cb:b9:12:9a: 4a:bd:00:f4:24:82:c8:4e:10:fe:f2:48:fe:73:8a:b0:9d:cf: 43:de:36:b9:11:79:bf:58:6f:3e:95:d1:2e:5f:35:7a:56:ea: 53:44:23:e8:fe:33:c3:3f:d9:6c:80:41:e3:88:5d:f0:33:1a: d5:7d:ac:44:6e:ba:e4:9f:32:cf:49:6d:3e:33:1f:12:2a:ab: 38:60:a6:47:4b:cc:4f:b2:32:69:3d:0d:01:c5:82:4f:a0:66: fd:bb:08:71:85:ca:8a:59:2a:11:ca:71:b9:65:f1:a7:c2:10: 3c:ab:02:e6:a2:b7:63:46:f7:d2:92:0a:87:04:32:94:7c:b5: 68:c2:a0:5f:dd:ce:6d:89:75:1c:7d:9c:9e:e8:e3:b5:36:48: 2f:9e:a9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq8/D7/2yxLJSyv9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZGZkNTEtNTkwNy00ZDkzLThjZTMtMDViOWJjNzU0 ZWFhMB4XDTI1MDgwMzIyMjA1OVoXDTI1MTEwMTIyMjA1OVowLzEtMCsGA1UEAxMk OWNhYmM4NzYtZTdiOS00MDQzLWIyMGUtZDFjMWQ2ZjY4MmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvsIDxnt4UvjwrRYs35GaD2sRgiSOT0TI74g khUd0cjbYIXJdxyVucpBfhTITzjL4yA7yoaiqzgbeYUspsBmmxz2G23XSP4ihlKv YmfxTHyfRM+fqRhRmd+ta4E02QaxjV4N/fJyYzGuNWI6RIXq/eYMIsO0WDjmGXQG NvIFb1Z04YdBUL3H2QgC7djNzo6PuhPDM4ivZeLnGReVHusn/6m8XcCLi7pTwqPw GMJSQ9WW5yHhc5P2njNHh/NLv+IEzh6R0W1NGv81GPQDS+2n0ZwRjuQA73DSpPRU 6UUY9iVeLBJojqap2sH4TmAEnUIWzrJ8IWQiFvxQQlgHz0k4FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzV5FFuHBqY3/IE3lgZdtEnJZrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85OTdk ZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5YmM3NTRlYWEvNzU4M2ExZTItNWExZC0z OTZlLWExOTgtYzk5ZmY5OWM2ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTk3ZGZkNTEtNTkwNy00ZDkzLThj ZTMtMDViOWJjNzU0ZWFhLzk5N2RmZDUxLTU5MDctNGQ5My04Y2UzLTA1YjliYzc1 NGVhYS5jcmwwHwYDVR0jBBgwFoAUOSO4MzC30c2hg2O41M8X/taRZJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85OTdkZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5 YmM3NTRlYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB9USrPPPvUnOJ2hHYQo7xqJs8ud/XDvJK8M+kqg5pbQVpfMsHuZNLi wZLz4erBJIKTqCuOyLDjdQ6j2t7b9U2RAOkFOQ5yE5J5j2XFmtQhSLWFISifnIDe 0qUwS1I2Fw0ZgzRu8hKWy7kSmkq9APQkgshOEP7ySP5zirCdz0PeNrkReb9Ybz6V 0S5fNXpW6lNEI+j+M8M/2WyAQeOIXfAzGtV9rERuuuSfMs9JbT4zHxIqqzhgpkdL zE+yMmk9DQHFgk+gZv27CHGFyopZKhHKcbll8afCEDyrAuait2NG99KSCocEMpR8 tWjCoF/dzm2JdRx9nJ7o47U2SC+eqbg= -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:13 2025 by rpki-client