$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1145b8e4-eb9f-366d-8f91-dd05998fab83.roa File: 1145b8e4-eb9f-366d-8f91-dd05998fab83.roa (raw, json) Hash identifier: jKsZQvx+sd+TF+nqbGnimwsDbJAPejt3S6ck25eq3+4= Subject key identifier: AF:8C:B3:86:C1:5A:AA:F0:0E:00:03:6D:D6:D9:65:47:10:64:9A:EE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4FF2C5F1C5B1D5298A9780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1145b8e4-eb9f-366d-8f91-dd05998fab83.roa Signing time: Mon 04 Aug 2025 18:21:15 +0000 ROA not before: Mon 04 Aug 2025 18:21:15 +0000 ROA not after: Sun 02 Nov 2025 19:21:15 +0000 asID: 46558 IP address blocks: 132.226.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4f:f2:c5:f1:c5:b1:d5:29:8a:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:21:15 2025 GMT Not After : Nov 2 19:21:15 2025 GMT Subject: CN=075b9a5f-9293-4f5b-9d35-e8b1c91e0c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f1:ea:0a:0a:3f:39:6e:1b:ed:90:5a:3c:70: 3d:92:0a:ca:7a:93:83:98:28:2b:b4:42:2b:de:b1: b7:21:99:cb:a1:be:b5:95:5b:aa:62:ec:76:07:7f: 4e:50:de:aa:c0:4d:f8:a2:78:8f:17:96:87:e7:a7: 61:e6:e2:2c:2e:16:26:aa:9a:95:b7:07:f1:c5:e8: cf:51:71:0a:1f:04:72:29:88:ff:cf:31:f6:78:b0: cf:59:c5:e3:22:f0:3a:01:c0:66:dd:de:17:23:f2: 83:cb:11:de:55:57:1e:e4:c4:51:ea:12:27:39:ad: 78:48:91:16:aa:46:ed:51:ca:4d:f9:a7:e7:c6:f6: 32:35:b7:01:26:cc:53:1d:de:0c:f5:2b:5e:5d:f8: 82:bd:2b:13:69:6d:04:25:ee:07:1a:01:f5:60:91: 51:1c:53:b6:09:9d:2b:cc:55:39:62:d6:c2:ba:d3: 42:41:56:59:9c:7e:55:f7:6a:b3:12:5f:41:da:2d: d1:45:0a:88:0b:8f:5d:08:a0:f9:0e:d0:74:61:ba: 23:83:ea:50:76:11:60:7c:ee:99:30:e5:53:db:7c: 3d:94:61:db:85:cd:4d:56:0f:44:ba:07:f3:31:1b: 7e:0c:3a:91:68:d9:d0:fc:b0:26:e3:ea:43:f3:5a: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8C:B3:86:C1:5A:AA:F0:0E:00:03:6D:D6:D9:65:47:10:64:9A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1145b8e4-eb9f-366d-8f91-dd05998fab83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.226.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:04:c2:f5:45:d3:18:a3:1a:6b:64:ee:79:1a:0f:5e:fe:9b: 9b:e7:5f:0c:49:43:97:45:05:55:a7:c4:86:61:c7:2d:f0:77: a2:f3:c0:3b:d2:08:55:55:b8:3d:38:e5:be:42:ad:83:21:22: d9:b5:cc:37:51:68:d2:35:53:45:8f:d9:d3:7d:d5:d5:d0:da: 8f:54:ed:35:0e:78:65:14:67:c6:45:77:7f:52:03:5e:a6:a5: 07:fd:86:64:1d:3a:c1:9a:0c:dd:f2:4d:5c:c6:b8:d4:4f:91: 94:53:f6:b4:f7:1d:ee:2e:93:ec:9d:27:cb:09:8c:a3:96:2a: bc:6e:1d:fd:eb:ba:4c:25:49:b5:c3:c1:a7:46:82:2f:bc:a1: 5b:bf:d3:4f:36:e8:aa:ca:f5:ce:5e:04:07:11:46:e2:b5:25: 28:6a:2e:cc:5c:bb:89:9c:a4:65:4b:b8:34:9b:95:46:dd:ff: 71:b9:32:26:85:ef:3f:0c:fb:55:83:5c:5b:00:ad:f2:43:d4: a6:83:00:22:04:f3:8c:65:cd:e5:75:16:87:92:72:6a:d0:33: 2f:7d:0d:95:52:c7:9a:be:6b:12:d6:25:99:81:eb:a6:90:73: 1d:8c:18:67:7e:16:fb:62:75:b9:55:db:2b:58:9e:7b:54:56: cc:ea:8e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/T/LF8cWx1SmKl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MjExNVoXDTI1MTEwMjE5MjExNVowLzEtMCsGA1UEAxMk MDc1YjlhNWYtOTI5My00ZjViLTlkMzUtZThiMWM5MWUwYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvHqCgo/OW4b7ZBaPHA9kgrKepODmCgrtEIr 3rG3IZnLob61lVuqYux2B39OUN6qwE34oniPF5aH56dh5uIsLhYmqpqVtwfxxejP UXEKHwRyKYj/zzH2eLDPWcXjIvA6AcBm3d4XI/KDyxHeVVce5MRR6hInOa14SJEW qkbtUcpN+afnxvYyNbcBJsxTHd4M9SteXfiCvSsTaW0EJe4HGgH1YJFRHFO2CZ0r zFU5YtbCutNCQVZZnH5V92qzEl9B2i3RRQqIC49dCKD5DtB0Ybojg+pQdhFgfO6Z MOVT23w9lGHbhc1NVg9EugfzMRt+DDqRaNnQ/LAm4+pD81o6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+Ms4bBWqrwDgADbdbZZUcQZJruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE0NWI4ZTQtZWI5Zi0z NjZkLThmOTEtZGQwNTk5OGZhYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChOKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAEwvVF0xijGmtk7nkaD17+m5vnXwxJQ5dFBVWnxIZhxy3wd6LzwDvS CFVVuD045b5CrYMhItm1zDdRaNI1U0WP2dN91dXQ2o9U7TUOeGUUZ8ZFd39SA16m pQf9hmQdOsGaDN3yTVzGuNRPkZRT9rT3He4uk+ydJ8sJjKOWKrxuHf3rukwlSbXD wadGgi+8oVu/00826KrK9c5eBAcRRuK1JShqLsxcu4mcpGVLuDSblUbd/3G5MiaF 7z8M+1WDXFsArfJD1KaDACIE84xlzeV1FoeScmrQMy99DZVSx5q+axLWJZmB66aQ cx2MGGd+FvtidblV2ytYnntUVszqjiI= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:34 2025 by rpki-client