$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa File: 4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa (raw, json) Hash identifier: XEXQ/rsR1nASLjZcmx5Q1lCWBgfeR89U0qbnI4XL4co= Subject key identifier: BE:B6:D2:83:1A:78:1E:39:5C:09:A4:51:E8:75:85:32:F4:E9:F4:C4 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F4328584A90A0BC5F5EBDABD0C58088C0 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 27370 IP address blocks: 140.241.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:bc:5f:5e:bd:ab:d0:c5:80:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=25efb405-4e17-4554-9fe0-b8e1dc814093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:dd:14:7d:a0:87:50:3d:f1:5a:b7:89:df: d4:50:5f:59:9c:20:6b:e4:20:f9:72:98:63:88:ec: 77:89:d2:cc:84:62:9d:21:ff:fc:00:ee:75:07:a8: 66:9b:a2:ea:22:9e:1f:b7:56:41:26:13:43:3a:22: 04:ba:2b:13:f9:75:5e:7b:83:f0:02:f4:53:77:5e: 87:71:c8:8f:a2:c5:8e:70:3d:bb:73:8b:8d:d7:8f: e7:ca:b3:a6:c9:70:08:33:02:a9:2f:15:17:54:e2: b4:ae:8f:a7:68:30:ca:a2:e2:bd:bf:33:87:15:94: 47:a4:9f:fd:6c:fe:e4:49:43:0f:23:66:1d:c2:74: c0:02:a9:fe:23:ed:12:18:a3:94:2d:3a:b2:04:ad: 04:d7:de:d2:2f:f7:79:65:f7:16:f2:39:4e:f7:ec: 60:93:09:9b:fe:20:e6:c2:fc:c7:fa:21:fb:3c:59: db:89:32:06:55:a9:08:75:9b:02:c5:c4:f3:d8:16: f9:b8:ed:23:c6:7c:8e:c3:34:86:15:e7:84:77:d0: f6:92:52:97:18:10:38:b7:f8:3b:4e:9b:97:b3:38: 79:e5:2b:15:35:de:ca:6b:96:d7:74:65:cc:b1:02: 22:aa:6f:22:98:18:b0:c0:6a:eb:33:22:0a:0b:20: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B6:D2:83:1A:78:1E:39:5C:09:A4:51:E8:75:85:32:F4:E9:F4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c7:fc:34:91:6d:c3:75:b7:4c:9d:d1:a1:ec:7e:e2:f5:4f: da:84:da:6c:3c:8f:3d:a1:76:2d:cf:3d:78:6f:0b:e2:bf:8e: 8b:8f:8e:0b:bd:b6:56:17:8c:f9:58:44:15:99:d4:15:84:5d: e0:91:78:96:5f:4f:2b:07:fc:ac:1a:30:67:ce:3b:b4:8f:22: dd:98:a1:9c:42:f7:4b:06:bd:77:0c:4b:61:e5:60:57:4c:ab: e4:07:fb:9b:c7:51:30:7c:ec:dc:e4:bc:28:80:79:d4:dd:ba: e1:ec:5c:ed:bf:ce:53:fd:6b:63:3f:9b:bd:a8:21:88:e7:5d: a9:7b:d5:c2:06:b6:03:b5:12:72:34:da:9c:f8:ea:d7:59:56: c5:24:70:4a:bc:a0:7b:75:c6:60:d0:02:42:4b:2e:35:cb:07: 0e:19:c6:b2:d8:0e:f7:7b:d3:d1:ce:ec:cd:3f:a6:a1:d3:78: 7b:95:d5:75:7d:4f:42:96:68:17:78:33:73:13:7f:83:a1:fb: 15:ea:17:a2:5a:41:b7:e4:1d:59:9d:fb:11:8e:cc:55:00:7c: 4d:19:08:7d:8e:e9:e2:96:6d:85:4a:6b:85:fb:59:55:9d:e8: 94:f0:e0:b5:67:18:7c:48:13:94:18:5f:28:88:ca:8b:ea:ba: f3:49:a9:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLxfXr2r0MWAiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjVlZmI0MDUtNGUxNy00NTU0LTlmZTAtYjhlMWRjODE0MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1LdFH2gh1A98Vq3id/UUF9ZnCBr5CD5cphj iOx3idLMhGKdIf/8AO51B6hmm6LqIp4ft1ZBJhNDOiIEuisT+XVee4PwAvRTd16H cciPosWOcD27c4uN14/nyrOmyXAIMwKpLxUXVOK0ro+naDDKouK9vzOHFZRHpJ/9 bP7kSUMPI2YdwnTAAqn+I+0SGKOULTqyBK0E197SL/d5ZfcW8jlO9+xgkwmb/iDm wvzH+iH7PFnbiTIGVakIdZsCxcTz2Bb5uO0jxnyOwzSGFeeEd9D2klKXGBA4t/g7 TpuXszh55SsVNd7Ka5bXdGXMsQIiqm8imBiwwGrrMyIKCyBRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL620oMaeB45XAmkUeh1hTL06fTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNGQ2MTFiMzUtMDdlZi0z M2Q3LTlhZTktN2Y1MWYwNTdhZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbH/DSRbcN1t0yd0aHsfuL1T9qE2mw8jz2hdi3PPXhvC+K/jouPjgu9 tlYXjPlYRBWZ1BWEXeCReJZfTysH/KwaMGfOO7SPIt2YoZxC90sGvXcMS2HlYFdM q+QH+5vHUTB87NzkvCiAedTduuHsXO2/zlP9a2M/m72oIYjnXal71cIGtgO1EnI0 2pz46tdZVsUkcEq8oHt1xmDQAkJLLjXLBw4ZxrLYDvd709HO7M0/pqHTeHuV1XV9 T0KWaBd4M3MTf4Oh+xXqF6JaQbfkHVmd+xGOzFUAfE0ZCH2O6eKWbYVKa4X7WVWd 6JTw4LVnGHxIE5QYXyiIyovquvNJqZk= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:52 2025 by rpki-client