$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa File: e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa (raw, json) Hash identifier: rgZqay9cxC+qg/NvS77q6SLwNXLx4Q44t/9d7dOCYcE= Subject key identifier: BD:4F:6B:02:0E:CF:CB:16:F9:DD:C3:61:E8:D5:F7:FA:11:30:A5:F4 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584A94D0D5ACFC919F20B4BBFA50 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 61317 IP address blocks: 141.140.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d5:ac:fc:91:9f:20:b4:bb:fa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=a193308b-2046-4c8b-a1c8-be24347d2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:c3:98:2d:bf:a1:b1:45:5f:d6:1b:9a:1a: 71:91:6d:ab:79:07:1b:1c:ca:d7:68:43:1a:41:34: 8c:8c:ff:7f:48:24:60:95:28:18:7e:35:91:25:12: d3:0b:75:41:cb:42:dd:92:3b:70:f4:93:68:f6:cd: da:0b:f7:1b:78:59:a2:b6:8b:3d:0c:84:f7:c0:d7: 6c:09:ea:67:d5:8f:5f:47:14:5e:86:1b:f6:45:53: eb:eb:3f:45:ec:00:19:be:e6:cc:0d:c4:06:e9:9c: c2:28:a2:99:23:8b:38:50:ae:a0:d8:2f:c1:f8:c3: a4:37:b1:f4:4e:7e:65:5d:58:11:e3:bc:9f:9e:7d: 60:80:90:74:29:da:d2:86:b1:66:0f:87:c0:cb:f9: 45:47:60:80:53:d4:d0:b0:52:a1:28:47:fd:0e:3a: 4d:1a:7a:86:99:50:31:54:d1:0a:a0:cf:80:c4:dd: b4:5d:a7:f6:3b:d1:e9:37:0a:80:cf:f0:ed:83:b8: 08:43:25:e9:b5:e5:8c:8c:37:9f:28:07:24:cf:0b: 5c:f5:cb:4f:35:ee:f0:8e:46:b4:af:9c:ad:03:61: b3:dd:9f:ae:51:eb:8f:8c:21:13:ae:3e:dd:52:94: 95:bc:22:e3:37:89:f9:85:7f:71:45:35:f2:2e:b4: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:6B:02:0E:CF:CB:16:F9:DD:C3:61:E8:D5:F7:FA:11:30:A5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:72:4f:2d:2f:4b:07:c3:6d:b3:71:54:e0:44:de:49:26:3e: 68:77:ac:22:f0:fa:b7:1b:1e:13:3d:d5:ec:ca:1f:16:ce:56: e4:3d:fc:d1:6a:5c:2a:a4:1e:56:ce:38:5d:a1:b7:51:70:4b: c5:48:c6:60:e8:3a:9a:f4:15:45:30:af:94:d3:f5:d7:0b:be: 02:15:9c:c8:e6:24:34:19:45:08:5f:7b:03:27:fb:79:0c:59: 34:cb:63:ff:23:08:48:4d:75:40:ea:b3:be:74:ac:ef:6c:fe: a0:f2:eb:39:10:02:e9:bf:0c:41:0f:aa:60:cf:26:d9:38:24: ef:61:63:7a:a1:d0:76:9e:4e:ba:9a:34:32:74:48:ba:3e:77: 42:14:e9:9e:e6:2d:9b:fe:43:fc:23:28:2a:7e:d5:11:4e:10: 51:bd:fe:c1:ef:a1:f6:6e:be:e7:e4:d2:01:26:e8:7a:de:c8: b4:d7:f3:56:80:5e:dd:61:36:46:6f:1d:63:3c:4b:96:27:5a: b4:7d:82:6a:b2:1d:30:1f:25:84:ca:1a:95:76:97:a1:0a:2c: a8:9a:f2:5b:12:ad:84:6d:86:61:df:2f:4b:38:67:77:65:ab: f9:6a:73:ca:55:1a:62:9d:1d:36:16:96:3f:d7:3d:6f:31:c4: 4d:a9:b2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NWs/JGfILS7+lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YTE5MzMwOGItMjA0Ni00YzhiLWExYzgtYmUyNDM0N2QyMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHDmC2/obFFX9YbmhpxkW2reQcbHMrXaEMa QTSMjP9/SCRglSgYfjWRJRLTC3VBy0Ldkjtw9JNo9s3aC/cbeFmitos9DIT3wNds Cepn1Y9fRxRehhv2RVPr6z9F7AAZvubMDcQG6ZzCKKKZI4s4UK6g2C/B+MOkN7H0 Tn5lXVgR47yfnn1ggJB0KdrShrFmD4fAy/lFR2CAU9TQsFKhKEf9DjpNGnqGmVAx VNEKoM+AxN20Xaf2O9HpNwqAz/Dtg7gIQyXpteWMjDefKAckzwtc9ctPNe7wjka0 r5ytA2Gz3Z+uUeuPjCETrj7dUpSVvCLjN4n5hX9xRTXyLrS4rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1PawIOz8sW+d3DYejV9/oRMKX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZThiNWJmMDItYmVmNS0z MDkzLTg5NmUtNGNiY2IxMjhhYjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjYwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhyTy0vSwfDbbNxVOBE3kkmPmh3rCLw+rcbHhM91ezKHxbOVuQ9/NFq XCqkHlbOOF2ht1FwS8VIxmDoOpr0FUUwr5TT9dcLvgIVnMjmJDQZRQhfewMn+3kM WTTLY/8jCEhNdUDqs750rO9s/qDy6zkQAum/DEEPqmDPJtk4JO9hY3qh0HaeTrqa NDJ0SLo+d0IU6Z7mLZv+Q/wjKCp+1RFOEFG9/sHvofZuvufk0gEm6HreyLTX81aA Xt1hNkZvHWM8S5YnWrR9gmqyHTAfJYTKGpV2l6EKLKia8lsSrYRthmHfL0s4Z3dl q/lqc8pVGmKdHTYWlj/XPW8xxE2psow= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:03 2025 by rpki-client