$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa File: 7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa (raw, json) Hash identifier: XyUApCuKfdLaIa+9dM5NL4QhKsI1IdtAqkx713hvPVY= Subject key identifier: FE:77:44:88:D7:B6:E6:9C:C0:CB:C7:17:1E:93:34:4E:8C:0B:A0:AF Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B28C6EC4F3E41E38E50EA1D80 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 141.140.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ec:4f:3e:41:e3:8e:50:ea:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=299be5e0-e450-4d46-a9cc-ed4896cbd50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:c8:fb:7d:50:ad:c5:36:b2:99:6d:c9:27: 44:64:a0:df:fc:ba:fc:b6:5e:1d:ec:3f:44:d0:45: ed:a5:45:11:bb:ff:c6:69:fd:bb:bc:2c:0c:e6:ae: 9f:6e:59:2e:b1:32:ca:30:55:47:a1:a2:95:56:9e: 33:0e:51:4b:6d:68:a8:75:99:91:24:ee:c1:ba:ec: 3f:a8:2b:44:e8:05:39:bb:86:53:d3:1e:16:67:69: 43:5c:89:16:18:24:30:b0:e4:79:f3:49:25:53:a7: bb:34:3a:ad:5d:06:65:d7:6e:f9:ca:59:b1:67:f1: 8c:31:39:fc:10:b8:50:78:b8:f3:d4:b9:13:52:84: d9:b6:2c:f0:5d:dc:6f:8a:f9:c8:69:e2:fd:9f:cb: cc:98:60:da:63:56:62:95:65:ad:62:8b:4e:da:bc: 46:83:0c:1d:12:e4:09:d3:6d:c6:fc:01:c6:83:ed: 0e:c5:54:15:59:3e:86:ec:ea:c3:26:26:46:de:82: fa:e7:4b:23:e5:2e:d0:c5:7a:ec:82:59:ec:91:16: a7:2a:b5:9d:f0:35:6a:5f:d0:6c:f4:50:cf:a3:bd: a0:9e:8d:06:2b:0d:42:01:d4:7b:bd:ee:a0:01:7f: 18:5c:7c:59:5f:91:b3:bd:be:7a:9d:d9:8d:63:09: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:44:88:D7:B6:E6:9C:C0:CB:C7:17:1E:93:34:4E:8C:0B:A0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7c815f92-8336-3191-8b9c-2dbbc2d0fd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:72:9c:a3:d2:6d:8f:73:12:57:2a:e5:73:b5:11:ae:4f:81: 04:20:12:13:c7:aa:fd:12:51:d9:a7:51:ec:4c:f4:99:38:fb: 29:59:1c:cc:fe:19:00:5a:11:31:04:72:93:5f:36:ff:99:29: 51:8c:1a:1c:4c:e8:5e:02:54:b0:e3:8e:b9:6e:26:0c:74:97: 0e:43:28:f1:27:de:07:de:95:a7:c9:23:fc:be:10:10:04:ce: 6e:ef:e4:b7:04:99:a1:f9:58:f8:23:03:69:21:1c:32:83:88: 77:ab:a0:97:d3:d1:a1:80:f9:6b:d3:38:ce:ba:2d:80:45:80: b1:70:03:da:39:ed:88:5b:46:f8:b4:e7:d2:31:10:67:c5:32: e2:78:e1:f9:04:42:c4:68:41:19:df:ef:a8:ea:a3:c6:0b:43: b8:2c:61:f8:58:97:fe:7a:b1:b3:ac:45:65:73:fc:ab:f5:3d: 44:09:76:36:d7:67:cc:e0:0d:1e:b1:f5:37:b1:13:8b:22:9b: 6d:58:a3:9d:7c:74:9a:0a:bf:e1:fb:86:f4:86:d9:54:c5:9f: cf:08:d3:07:ac:f3:bf:d8:d3:65:10:c2:c8:d2:62:a3:74:52: 0f:92:36:54:dd:04:7b:7f:a0:62:ef:97:da:d7:18:95:70:48: 60:c0:06:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuxPPkHjjlDqHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk Mjk5YmU1ZTAtZTQ1MC00ZDQ2LWE5Y2MtZWQ0ODk2Y2JkNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjobI+31QrcU2spltySdEZKDf/Lr8tl4d7D9E 0EXtpUURu//Gaf27vCwM5q6fblkusTLKMFVHoaKVVp4zDlFLbWiodZmRJO7Buuw/ qCtE6AU5u4ZT0x4WZ2lDXIkWGCQwsOR580klU6e7NDqtXQZl1275ylmxZ/GMMTn8 ELhQeLjz1LkTUoTZtizwXdxvivnIaeL9n8vMmGDaY1ZilWWtYotO2rxGgwwdEuQJ 023G/AHGg+0OxVQVWT6G7OrDJiZG3oL650sj5S7QxXrsglnskRanKrWd8DVqX9Bs 9FDPo72gno0GKw1CAdR7ve6gAX8YXHxZX5Gzvb56ndmNYwnPFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP53RIjXtuacwMvHFx6TNE6MC6CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvN2M4MTVmOTItODMzNi0z MTkxLThiOWMtMmRiYmMyZDBmZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdynKPSbY9zElcq5XO1Ea5PgQQgEhPHqv0SUdmnUexM9Jk4+ylZHMz+ GQBaETEEcpNfNv+ZKVGMGhxM6F4CVLDjjrluJgx0lw5DKPEn3gfelafJI/y+EBAE zm7v5LcEmaH5WPgjA2khHDKDiHeroJfT0aGA+WvTOM66LYBFgLFwA9o57YhbRvi0 59IxEGfFMuJ44fkEQsRoQRnf76jqo8YLQ7gsYfhYl/56sbOsRWVz/Kv1PUQJdjbX Z8zgDR6x9TexE4sim21Yo518dJoKv+H7hvSG2VTFn88I0wes87/Y02UQwsjSYqN0 Ug+SNlTdBHt/oGLvl9rXGJVwSGDABvg= -----END CERTIFICATE-----Generated at Fri Oct 10 23:29:07 2025 by rpki-client