$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/eff53d79-3522-351d-9fb3-5650f254d29f.roa File: eff53d79-3522-351d-9fb3-5650f254d29f.roa (raw, json) Hash identifier: JEm0Taembc0inkW7VZRwO+9u5YClrufsL10wvs7/jmQ= Subject key identifier: AB:7C:48:6E:83:B2:11:7E:6B:28:52:FC:74:B2:FD:C6:07:24:EE:AA Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584AB4EF0523B627E5222353B860 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/eff53d79-3522-351d-9fb3-5650f254d29f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 53356 IP address blocks: 141.140.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:05:23:b6:27:e5:22:23:53:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=251d4825-96ce-44b8-abc2-e311dfc531b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:bb:d7:2c:bd:5e:03:56:74:e3:4a:6d:79: 22:c0:ac:ff:16:d4:6f:cd:52:ef:02:3b:76:5c:e9: 14:17:54:e2:67:5a:dd:58:1b:00:68:26:ae:e3:ca: e9:60:d0:c8:6c:ec:03:6a:ea:15:83:21:aa:e2:40: 07:33:79:17:89:0a:94:f7:0a:6b:cf:72:52:0a:76: bc:63:4e:08:f1:a5:cd:7e:83:fa:65:2c:a2:31:8f: 8d:3c:2b:cd:c3:04:69:8a:94:64:3e:05:2a:0c:e1: 4e:92:25:78:55:26:11:a0:b0:95:37:22:27:35:d6: c8:d7:ae:2c:d7:ae:52:9f:74:40:0e:2d:60:aa:42: a6:4f:a8:5f:dd:e6:42:77:f7:16:02:87:9a:f5:3d: 45:7e:84:5a:73:8e:e7:1e:db:f8:09:db:a6:8d:95: e3:f0:31:c8:7a:01:c1:90:47:13:78:c4:80:7d:2a: 28:82:81:a2:1d:58:a6:c0:26:22:8e:7b:39:bb:fc: d4:a8:4f:c8:2c:ce:08:57:aa:cb:2a:7b:7b:73:bb: 04:98:89:ed:82:94:1e:8c:1a:90:17:7b:7a:ba:ce: 20:ee:ad:b3:ad:ef:35:25:4c:8b:34:85:e8:e2:c1: 8a:f6:b8:ed:90:8f:c7:1e:b0:85:2e:3e:d4:1a:0c: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7C:48:6E:83:B2:11:7E:6B:28:52:FC:74:B2:FD:C6:07:24:EE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/eff53d79-3522-351d-9fb3-5650f254d29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:78:17:0a:9d:96:4e:e3:e5:b0:7c:f4:4b:a5:1a:13:f3:b0: 8b:ba:a5:6c:f8:16:6c:26:6e:26:b6:5b:42:fc:25:2d:e9:15: b4:85:f8:d3:bd:1f:f3:17:98:28:49:06:5f:ee:1c:7a:23:74: 6d:32:1b:2c:c7:b0:63:12:7e:a6:d4:17:b0:15:01:7a:3b:04: 56:df:f4:9e:58:77:19:24:a8:2c:1d:bd:27:18:35:79:8e:8d: 44:19:10:2e:6e:27:c4:9d:f1:9e:f5:94:d0:96:78:82:1c:46: fb:54:2d:ac:2a:bf:54:03:4d:33:ac:21:c6:27:ab:47:14:19: 39:15:76:a6:98:6f:5e:d1:90:e1:23:b7:cf:78:28:97:85:d1: 6c:71:04:b3:fb:98:74:dd:cf:40:34:3a:d7:ef:d1:89:35:cf: eb:42:84:91:ff:02:dd:ca:3e:3e:63:e8:50:db:25:81:ea:1e: 54:ed:a2:d5:84:b5:80:cd:4e:44:f0:04:15:38:0d:ee:cc:22: 13:0a:34:54:79:96:31:df:10:b3:82:c6:63:3b:07:3a:d7:3b: 2c:d7:ec:a4:82:5f:33:d9:a2:8a:d4:a1:74:73:7e:b5:31:1d: b7:95:1e:c8:9c:f8:1a:2f:71:ec:3e:1d:0f:7f:94:31:ed:c1: 2f:48:aa:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wUjtiflIiNTuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MjUxZDQ4MjUtOTZjZS00NGI4LWFiYzItZTMxMWRmYzUzMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBO71yy9XgNWdONKbXkiwKz/FtRvzVLvAjt2 XOkUF1TiZ1rdWBsAaCau48rpYNDIbOwDauoVgyGq4kAHM3kXiQqU9wprz3JSCna8 Y04I8aXNfoP6ZSyiMY+NPCvNwwRpipRkPgUqDOFOkiV4VSYRoLCVNyInNdbI164s 165Sn3RADi1gqkKmT6hf3eZCd/cWAoea9T1FfoRac47nHtv4CdumjZXj8DHIegHB kEcTeMSAfSoogoGiHVimwCYijns5u/zUqE/ILM4IV6rLKnt7c7sEmIntgpQejBqQ F3t6us4g7q2zre81JUyLNIXo4sGK9rjtkI/HHrCFLj7UGgwZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt8SG6DshF+ayhS/HSy/cYHJO6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZWZmNTNkNzktMzUyMi0z NTFkLTlmYjMtNTY1MGYyNTRkMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjYwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh4Fwqdlk7j5bB89EulGhPzsIu6pWz4Fmwmbia2W0L8JS3pFbSF+NO9 H/MXmChJBl/uHHojdG0yGyzHsGMSfqbUF7AVAXo7BFbf9J5YdxkkqCwdvScYNXmO jUQZEC5uJ8Sd8Z71lNCWeIIcRvtULawqv1QDTTOsIcYnq0cUGTkVdqaYb17RkOEj t894KJeF0WxxBLP7mHTdz0A0Otfv0Yk1z+tChJH/At3KPj5j6FDbJYHqHlTtotWE tYDNTkTwBBU4De7MIhMKNFR5ljHfELOCxmM7BzrXOyzX7KSCXzPZoorUoXRzfrUx HbeVHsic+Bovcew+HQ9/lDHtwS9IqjQ= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:17 2025 by rpki-client