$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa File: 64b2fb2a-a043-3594-bcf7-ae49c664733c.roa (raw, json) Hash identifier: v2//UGwU/Ai5ibawN3ESi7hNax9/rKf4691jt3w+17c= Subject key identifier: F1:B7:29:EE:3F:90:11:E7:87:21:0E:61:7C:75:A9:0E:80:9F:85:F6 Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Certificate serial: 010D0C9F4328584AB651022BACFAAFC9260D0BA0 Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 165.140.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:02:2b:ac:fa:af:c9:26:0d:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=659d20dd-b048-4294-b48f-85d77f35091a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c7:25:01:4c:7b:a8:20:76:11:97:60:2e:b2: 14:b7:8f:6e:20:93:60:37:13:98:70:a1:fa:c7:07: 63:64:c1:23:d3:d8:84:26:16:f1:4b:aa:3c:77:49: df:d0:03:72:91:ed:35:ed:d8:c3:21:a8:26:ea:47: 6e:de:9a:e1:f4:3e:96:a9:d4:d0:57:19:49:eb:4e: fb:86:30:35:0f:9f:c9:ad:7c:7f:a4:02:6e:65:d3: f5:6d:36:9d:8e:8e:c0:08:01:80:85:94:62:97:69: c8:a2:35:73:be:91:96:8e:91:af:0d:8e:bc:47:da: 5f:59:43:96:07:cd:54:7b:32:ac:6a:7c:7e:4d:db: ea:b6:74:8d:7e:a1:e4:cd:bb:37:e9:16:bb:9f:63: d6:ef:86:a7:5f:bf:74:17:5e:7d:87:1e:d6:09:0e: e4:ea:23:9e:e6:f0:d9:1a:da:3e:c8:02:33:a1:46: 44:49:ef:b3:95:99:a5:07:db:ab:8b:4a:da:c9:08: 53:a9:e0:35:17:a3:c1:b3:83:64:95:1d:eb:8f:ca: 26:05:88:da:1e:36:4c:85:69:a7:b9:98:1a:81:bb: aa:a6:32:14:6c:94:65:8d:61:d3:7a:96:0b:9e:2a: df:d5:a3:b9:ec:86:e7:5d:ee:49:2d:5d:1b:60:d2: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B7:29:EE:3F:90:11:E7:87:21:0E:61:7C:75:A9:0E:80:9F:85:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/64b2fb2a-a043-3594-bcf7-ae49c664733c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl X509v3 Authority Key Identifier: keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer sbgp-ipAddrBlock: critical IPv4: 165.140.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:25:11:c3:8a:97:b3:5f:20:f1:17:9a:0d:92:e1:7b:e0:9e: 92:21:ee:2f:61:04:24:a4:d7:59:16:be:d1:10:51:21:e2:11: ac:7f:84:ce:44:4e:78:17:0c:5a:a1:a9:50:d8:8f:12:75:7b: c8:4f:49:a1:5a:26:66:5a:f3:17:37:0c:f0:c0:d4:74:18:5a: bb:43:f1:22:4b:61:04:1c:6e:05:91:0f:44:c8:55:11:c5:8d: 1b:f9:1a:72:b5:c1:f5:e5:ae:59:d4:b0:6a:4f:f8:a1:37:5a: 45:25:fc:82:ff:dc:ff:68:5a:6b:7c:da:81:79:3c:3e:7a:d2: ee:3f:f4:91:21:af:9c:3d:8b:60:c7:38:5c:e6:f3:77:63:fb: ac:a0:bd:35:ab:25:ee:b6:78:d2:82:55:1b:50:3f:36:66:c3: 26:08:ac:cd:33:c9:27:40:11:b3:5b:87:d5:74:9d:2d:3f:93: 67:67:f8:c7:4c:1b:ea:9a:f7:05:08:69:f2:18:9b:4e:68:dc: 59:ce:57:5a:9c:71:2d:42:77:e7:7d:07:2e:c5:6d:99:7e:ed: b3:ac:ac:76:9d:65:7c:38:4b:e5:5c:77:98:cb:12:7d:5f:80: e7:04:01:53:ff:b6:6b:9f:bb:d1:cd:34:ac:39:54:b1:12:fd: f3:0f:f5:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQIrrPqvySYNC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMx MDMwMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NjU5ZDIwZGQtYjA0OC00Mjk0LWI0OGYtODVkNzdmMzUwOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cclAUx7qCB2EZdgLrIUt49uIJNgNxOYcKH6 xwdjZMEj09iEJhbxS6o8d0nf0ANyke017djDIagm6kdu3prh9D6WqdTQVxlJ6077 hjA1D5/JrXx/pAJuZdP1bTadjo7ACAGAhZRil2nIojVzvpGWjpGvDY68R9pfWUOW B81UezKsanx+TdvqtnSNfqHkzbs36Ra7n2PW74anX790F159hx7WCQ7k6iOe5vDZ Gto+yAIzoUZESe+zlZmlB9uri0rayQhTqeA1F6PBs4NklR3rj8omBYjaHjZMhWmn uZgagbuqpjIUbJRljWHTepYLnirf1aO57IbnXe5JLV0bYNJaOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG3Ke4/kBHnhyEOYXx1qQ6An4X2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83OGZm ZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvNjRiMmZiMmEtYTA0My0z NTk0LWJjZjctYWU0OWM2NjQ3MzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzhmZmRkMTQtN2U3YS00NmQ0LTk5 M2EtNGI1MWY4MDMxMDMwLzc4ZmZkZDE0LTdlN2EtNDZkNC05OTNhLTRiNTFmODAz MTAzMC5jcmwwHwYDVR0jBBgwFoAU/QuzhgAVhg19Ci8bWzOXl7mVTrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUx ZjgwMzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACslEcOKl7NfIPEXmg2S4XvgnpIh7i9hBCSk11kWvtEQUSHiEax/hM5E TngXDFqhqVDYjxJ1e8hPSaFaJmZa8xc3DPDA1HQYWrtD8SJLYQQcbgWRD0TIVRHF jRv5GnK1wfXlrlnUsGpP+KE3WkUl/IL/3P9oWmt82oF5PD560u4/9JEhr5w9i2DH OFzm83dj+6ygvTWrJe62eNKCVRtQPzZmwyYIrM0zySdAEbNbh9V0nS0/k2dn+MdM G+qa9wUIafIYm05o3FnOV1qccS1Cd+d9By7FbZl+7bOsrHadZXw4S+Vcd5jLEn1f gOcEAVP/tmufu9HNNKw5VLES/fMP9Q8= -----END CERTIFICATE-----Generated at Mon Aug 4 18:55:06 2025 by rpki-client