$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa File: b4f0d40c-cad4-3a54-befa-79bac5244c89.roa (raw, json) Hash identifier: cjYNn3aCyZKEc3+tJeXUr3cBftYiqLLqtt08GvBgLOw= Subject key identifier: CD:8F:6D:EC:1B:9B:68:42:F5:BD:8F:32:68:55:A4:8C:92:8F:5A:1C Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584B1F016A6D332A6C9278DA4880 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 4181 IP address blocks: 134.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6a:6d:33:2a:6c:92:78:da:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=13bf9b98-ed7c-4dd8-9e19-c4f85363c3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:7b:01:b1:bf:ac:f0:4f:99:b5:dc:bd:7c: 73:dc:ce:2c:d5:3e:8a:34:e0:7a:87:80:79:b2:b6: 91:bb:a9:c7:b5:a4:c1:17:5a:c2:0c:5b:3a:9a:7c: 6e:e4:d3:77:a2:2b:e3:5b:91:a8:12:14:d6:3e:b3: 2f:f3:a9:1b:dd:4d:1b:24:47:b1:a3:9a:5e:7b:36: 52:1b:c6:16:e6:ad:3b:29:99:cc:81:d8:b8:0f:a0: de:c5:9c:0c:2e:ad:13:33:55:6a:68:82:59:ba:dc: a9:20:f2:04:71:7d:1d:93:3b:26:ea:2d:6e:08:20: 42:3b:3e:ce:b9:64:5d:49:5b:01:63:20:0e:80:c7: db:63:d8:e5:9b:fa:26:fe:d2:1f:3a:7a:a1:8b:74: eb:32:4a:14:b9:38:b3:80:f0:27:0b:44:f1:1b:34: d0:ba:b5:16:d0:d6:e4:e8:cf:43:77:17:3c:c0:cb: c5:dc:cc:ad:33:b0:ae:94:8b:00:df:86:86:31:76: 16:05:a8:7e:e6:6a:e7:23:e3:77:5a:43:e1:03:19: 7b:c5:90:32:dc:af:82:68:a3:40:45:2f:8e:09:e9: bd:84:2c:55:0f:34:c7:10:b2:98:e4:9e:c4:40:f7: bf:38:01:68:52:f3:3b:ef:22:3c:51:58:00:c8:7c: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:6D:EC:1B:9B:68:42:F5:BD:8F:32:68:55:A4:8C:92:8F:5A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 134.140.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:5b:a2:ba:33:f4:45:8f:0c:66:60:a9:94:19:b1:26:cb:78: 6d:1c:2e:11:dc:0a:da:9e:ae:83:fb:d3:7b:5a:db:79:bd:98: cc:7c:ec:1e:d3:a1:5c:81:7b:c9:66:da:06:a1:2d:2d:80:53: 62:56:24:2d:33:f4:c4:67:72:b5:5e:7e:67:b2:49:b0:00:5f: 71:a6:32:3c:72:9e:4d:1b:f0:0a:9e:2b:36:5f:37:44:3b:60: 56:6a:17:c1:fd:55:fe:ac:45:99:22:68:b2:40:99:4a:1a:8e: 46:79:11:f3:6d:b8:29:84:3c:79:97:f0:38:27:71:ae:f5:cb: 17:67:fd:f8:23:01:d5:eb:e5:6f:2d:38:dc:c3:80:58:4c:da: 34:ed:6f:84:1c:1f:1d:b2:12:8b:8c:14:20:ca:6a:d2:50:96: eb:8d:7c:ae:ea:a5:f7:46:11:be:cb:be:c9:ca:04:3f:bb:10: 17:66:4f:7b:6a:bc:e0:98:07:ab:be:29:b5:de:29:cb:c0:35: 6e:ed:3e:52:07:9e:e9:7a:9d:30:9e:22:8f:73:88:b3:42:5b: 70:2a:1f:ad:9a:d6:ab:57:0f:73:dd:44:f7:b1:c1:cf:73:7f: d4:39:cc:e2:05:e0:df:59:f7:ef:bb:2d:70:99:33:4b:98:fc: 5b:3c:ce:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsfAWptMypsknjaSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTNiZjliOTgtZWQ3Yy00ZGQ4LTllMTktYzRmODUzNjNjM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvB7AbG/rPBPmbXcvXxz3M4s1T6KNOB6h4B5 sraRu6nHtaTBF1rCDFs6mnxu5NN3oivjW5GoEhTWPrMv86kb3U0bJEexo5peezZS G8YW5q07KZnMgdi4D6DexZwMLq0TM1VqaIJZutypIPIEcX0dkzsm6i1uCCBCOz7O uWRdSVsBYyAOgMfbY9jlm/om/tIfOnqhi3TrMkoUuTizgPAnC0TxGzTQurUW0Nbk 6M9Ddxc8wMvF3MytM7CulIsA34aGMXYWBah+5mrnI+N3WkPhAxl7xZAy3K+CaKNA RS+OCem9hCxVDzTHELKY5J7EQPe/OAFoUvM77yI8UVgAyHzhNwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFM2Pbewbm2hC9b2PMmhVpIySj1ocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvYjRmMGQ0MGMtY2FkNC0z YTU0LWJlZmEtNzliYWM1MjQ0Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhowwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA2FuiujP0RY8MZmCplBmxJst4bRwuEdwK2p6ug/vTe1rbeb2YzHzsHtOh XIF7yWbaBqEtLYBTYlYkLTP0xGdytV5+Z7JJsABfcaYyPHKeTRvwCp4rNl83RDtg VmoXwf1V/qxFmSJoskCZShqORnkR8224KYQ8eZfwOCdxrvXLF2f9+CMB1evlby04 3MOAWEzaNO1vhBwfHbISi4wUIMpq0lCW6418ruql90YRvsu+ycoEP7sQF2ZPe2q8 4JgHq74ptd4py8A1bu0+Ugee6XqdMJ4ij3OIs0JbcCofrZrWq1cPc91E97HBz3N/ 1DnM4gXg31n377stcJkzS5j8WzzO1Q== -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:06 2025 by rpki-client