$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa File: dacc3826-a49a-31ce-8af8-aff620dec6e2.roa (raw, json) Hash identifier: pB1JxqDlHz28qMzN+Zvs5HMZW2aH/RwvzDpUQeil4qQ= Subject key identifier: DE:01:AE:86:98:B5:4E:F8:CB:7C:BA:6E:FA:62:64:26:83:23:47:A7 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584B1AD1908951C2A500F7727A00 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 12119 IP address blocks: 140.177.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:90:89:51:c2:a5:00:f7:72:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=0f4d1293-f282-43f3-8b6e-6d9dc8d34620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a7:69:a6:6e:6b:6e:28:19:6d:87:38:d3:b2: f2:7e:8f:3f:df:b0:48:38:ce:fb:73:a5:d5:55:69: c1:f8:9e:2f:8a:17:d0:23:22:3d:d1:f7:f0:bc:a2: c5:21:7a:b6:66:f7:61:d5:93:30:7e:0d:b6:fc:ee: bd:e8:49:b9:d2:1c:e9:e9:a8:98:d5:ee:59:75:81: 7a:e2:b4:b5:56:97:1f:62:7f:66:32:fa:18:b6:b9: 40:19:7c:17:fe:99:73:06:b7:55:52:ac:bc:a6:90: cf:22:37:9a:82:75:dd:c5:61:43:56:ee:83:09:cf: 11:8f:23:84:cf:df:af:36:b3:03:c2:44:3e:87:b2: 20:35:1f:b7:49:63:18:17:34:09:1e:88:ce:ce:6f: 89:e5:dd:e0:74:61:03:41:c1:00:1a:e1:b5:96:20: 96:32:61:d6:7d:8d:86:30:9e:a8:4c:af:24:ad:ff: 86:df:36:43:c2:cc:94:5d:f4:7a:13:6f:b5:2e:d3: f4:59:0c:54:7d:12:e6:ec:a1:de:64:9a:ba:53:a9: f8:c5:57:af:55:3b:31:33:6e:ef:2a:fe:c4:f2:c1: f6:b9:bc:79:96:4a:76:d4:03:26:b0:47:9a:8a:cd: 8d:73:7e:2f:cd:6c:53:0e:aa:b7:eb:ec:3f:57:19: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:AE:86:98:B5:4E:F8:CB:7C:BA:6E:FA:62:64:26:83:23:47:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:4f:3f:6e:86:c5:3d:06:c4:cf:c4:ac:83:5e:1d:be:16: 2b:62:3e:29:a5:3b:e9:86:ac:1f:81:79:23:ff:2e:b2:39:ef: 4b:6c:10:69:85:32:b0:f1:19:23:47:86:ce:03:ae:9e:fc:07: 9a:bb:02:31:73:fe:28:96:3d:3a:8e:c5:68:cf:b2:b2:ce:dd: 3a:39:6e:f9:6d:7c:a6:82:0f:d7:63:e7:ec:00:df:33:35:0f: 25:e3:c0:8d:45:e3:07:bc:01:45:6b:79:c8:cd:21:1f:8f:37: d7:2e:57:52:d0:ab:36:16:77:e8:8f:ef:ca:bd:34:4d:e6:fa: d1:6f:4f:83:ce:2d:b0:5f:05:3f:54:0d:0a:7f:cc:5c:a9:28: ef:d0:9f:dd:f8:9d:c9:f5:9a:25:6a:ca:14:28:9d:26:ad:70: fa:c4:26:0a:fe:1c:93:13:bc:d9:a8:d5:74:96:93:d8:f5:83: 19:04:0b:11:8d:44:71:e6:b4:e4:da:4a:2a:79:97:6e:ef:99: 0b:fa:94:9c:55:7f:f2:6c:88:4d:40:de:fd:36:38:ba:47:b5: ef:30:4d:4d:9e:a2:e1:2a:43:d5:4a:6b:29:d5:e4:da:0d:4b: e4:a3:84:14:61:d6:4f:1e:44:71:19:93:6d:e9:b1:f4:7b:9c: 16:3e:66:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZCJUcKlAPdyegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MGY0ZDEyOTMtZjI4Mi00M2YzLThiNmUtNmQ5ZGM4ZDM0NjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKdppm5rbigZbYc407Lyfo8/37BIOM77c6XV VWnB+J4vihfQIyI90ffwvKLFIXq2Zvdh1ZMwfg22/O696Em50hzp6aiY1e5ZdYF6 4rS1VpcfYn9mMvoYtrlAGXwX/plzBrdVUqy8ppDPIjeagnXdxWFDVu6DCc8RjyOE z9+vNrMDwkQ+h7IgNR+3SWMYFzQJHojOzm+J5d3gdGEDQcEAGuG1liCWMmHWfY2G MJ6oTK8krf+G3zZDwsyUXfR6E2+1LtP0WQxUfRLm7KHeZJq6U6n4xVevVTsxM27v Kv7E8sH2ubx5lkp21AMmsEeais2Nc34vzWxTDqq36+w/VxntfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4BroaYtU74y3y6bvpiZCaDI0enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvZGFjYzM4MjYtYTQ5YS0z MWNlLThhZjgtYWZmNjIwZGVjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjLGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazTz9uhsU9BsTPxKyDXh2+FitiPimlO+mGrB+BeSP/LrI570tsEGmF MrDxGSNHhs4Drp78B5q7AjFz/iiWPTqOxWjPsrLO3To5bvltfKaCD9dj5+wA3zM1 DyXjwI1F4we8AUVrecjNIR+PN9cuV1LQqzYWd+iP78q9NE3m+tFvT4POLbBfBT9U DQp/zFypKO/Qn934ncn1miVqyhQonSatcPrEJgr+HJMTvNmo1XSWk9j1gxkECxGN RHHmtOTaSip5l27vmQv6lJxVf/JsiE1A3v02OLpHte8wTU2eouEqQ9VKaynV5NoN S+SjhBRh1k8eRHEZk23psfR7nBY+Zp8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:33:48 2025 by rpki-client