$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af8a7489-dc75-36fe-a8a5-fe4701147d16.roa File: af8a7489-dc75-36fe-a8a5-fe4701147d16.roa (raw, json) Hash identifier: 3LXEgB7OtpV+hBqFuHTtc50JMmdzqdfDs3df0I0WlcM= Subject key identifier: 97:A2:51:C0:DC:19:F9:A0:73:FC:C7:C0:D1:A1:14:91:F2:4B:89:50 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B73FE20260CE9EC622D2E44C0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af8a7489-dc75-36fe-a8a5-fe4701147d16.roa Signing time: Wed 08 Oct 2025 11:37:41 +0000 ROA not before: Wed 08 Oct 2025 11:37:41 +0000 ROA not after: Tue 06 Jan 2026 12:37:41 +0000 asID: 834 IP address blocks: 141.140.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:fe:20:26:0c:e9:ec:62:2d:2e:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 8 11:37:41 2025 GMT Not After : Jan 6 12:37:41 2026 GMT Subject: CN=c6dd72a8-6b06-403e-ac3c-5108882c31b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:07:aa:62:93:e5:e1:ae:87:86:7d:2a:6b: b3:15:42:fb:bd:1d:a8:56:d5:3f:18:b1:d2:99:e4: a7:81:0b:09:d6:0d:96:80:bc:4b:d9:7f:c5:ac:97: da:74:a0:45:70:90:73:e2:7d:63:d8:73:55:fa:5b: d6:ee:d7:b7:0d:32:e5:86:9f:60:25:f8:6f:ad:44: eb:de:83:ff:08:30:28:43:b1:d8:24:fa:98:09:2e: 63:02:13:ba:48:59:46:4b:17:89:88:a3:eb:7f:9a: 22:72:e4:37:02:a6:09:98:07:e6:ad:65:52:77:42: 08:0c:33:6e:1d:2d:f7:b8:a0:0f:c6:4b:df:d8:3d: c7:a6:b9:f8:af:5f:4a:84:8f:80:b0:e6:07:a5:9c: ac:70:32:d6:0b:6c:b4:d0:64:a0:fd:d0:79:7b:df: bc:af:dc:de:b3:85:5a:11:dc:da:ab:8a:8b:7c:c8: 05:4b:1d:9b:80:88:77:1b:3b:c0:27:04:c3:d2:24: cf:8e:d2:39:5f:75:4e:d2:98:e2:8f:d9:f3:f0:0c: f7:d9:26:43:90:34:0a:12:05:9e:1e:0e:f7:f1:d9: a3:0d:27:12:48:0e:2d:94:7f:31:8b:6b:98:ab:14: 10:99:0e:5f:ba:55:aa:09:3a:ec:bb:ad:37:a0:fa: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:51:C0:DC:19:F9:A0:73:FC:C7:C0:D1:A1:14:91:F2:4B:89:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/af8a7489-dc75-36fe-a8a5-fe4701147d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:af:35:3c:00:53:dd:e7:4b:e6:c2:49:19:76:90:d0:6a: 95:04:6a:ad:1b:f5:09:a3:6c:70:f1:ed:33:af:14:df:8f:79: 01:a5:23:61:c6:b3:e3:4c:af:f1:3a:ec:c6:a1:47:c9:26:5e: 2f:0a:e2:99:5c:13:80:c0:ae:d7:23:30:5d:5e:a4:21:ac:cc: 2c:e2:2b:0f:4b:cd:da:7e:f4:27:c8:ef:99:78:eb:55:f5:66: fe:8f:43:f4:47:90:41:e0:6a:71:49:a5:1b:08:67:e8:fb:b8: fe:91:77:df:c5:6f:eb:b5:6b:19:e8:8a:ac:42:91:b4:4d:da: 38:07:4c:a9:57:b8:f7:26:6d:05:cf:6d:53:b6:aa:eb:2a:b8: f0:d5:b0:08:51:91:4b:ae:b8:36:00:68:e7:11:97:f5:bb:73: b5:f0:8a:e9:4d:c0:84:ef:06:b9:98:7c:ed:46:ff:39:c6:af: bd:34:be:4d:9f:78:4e:4a:7a:ce:6c:1b:b5:d7:92:4d:d7:d9: 55:cf:6e:fb:77:3d:0f:19:35:73:cf:e7:c3:84:16:87:cf:03: f3:f6:0f:05:41:6f:3c:06:9f:0f:11:0b:52:52:af:90:9f:6f: 9b:95:43:e8:e8:cd:53:3d:1e:23:67:88:e6:d2:30:7f:13:3f: a6:bb:34:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtz/iAmDOnsYi0uRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MTAwODExMzc0MVoXDTI2MDEwNjEyMzc0MVowLzEtMCsGA1UEAxMk YzZkZDcyYTgtNmIwNi00MDNlLWFjM2MtNTEwODg4MmMzMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7UHqmKT5eGuh4Z9KmuzFUL7vR2oVtU/GLHS meSngQsJ1g2WgLxL2X/FrJfadKBFcJBz4n1j2HNV+lvW7te3DTLlhp9gJfhvrUTr 3oP/CDAoQ7HYJPqYCS5jAhO6SFlGSxeJiKPrf5oicuQ3AqYJmAfmrWVSd0IIDDNu HS33uKAPxkvf2D3Hprn4r19KhI+AsOYHpZyscDLWC2y00GSg/dB5e9+8r9zes4Va Edzaq4qLfMgFSx2bgIh3GzvAJwTD0iTPjtI5X3VO0pjij9nz8Az32SZDkDQKEgWe Hg738dmjDScSSA4tlH8xi2uYqxQQmQ5fulWqCTrsu603oPqsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeiUcDcGfmgc/zHwNGhFJHyS4lQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYWY4YTc0ODktZGM3NS0z NmZlLWE4YTUtZmU0NzAxMTQ3ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmJrzU8AFPd50vmwkkZdpDQapUEaq0b9QmjbHDx7TOvFN+PeQGlI2HG s+NMr/E67MahR8kmXi8K4plcE4DArtcjMF1epCGszCziKw9Lzdp+9CfI75l461X1 Zv6PQ/RHkEHganFJpRsIZ+j7uP6Rd9/Fb+u1axnoiqxCkbRN2jgHTKlXuPcmbQXP bVO2qusquPDVsAhRkUuuuDYAaOcRl/W7c7XwiulNwITvBrmYfO1G/znGr700vk2f eE5Kes5sG7XXkk3X2VXPbvt3PQ8ZNXPP58OEFofPA/P2DwVBbzwGnw8RC1JSr5Cf b5uVQ+jozVM9HiNniObSMH8TP6a7NCc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:58 2025 by rpki-client