$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa File: d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa (raw, json) Hash identifier: M3p9kn6OmVD0pk9bktxPqmIW+Dx2cgJEwwRlyLi154U= Subject key identifier: 0C:0A:13:22:1B:54:7B:C2:E4:CE:2B:F7:9D:E4:2D:CA:E3:95:A1:C8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C37112818AD380D567F4A60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 141.150.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:11:28:18:ad:38:0d:56:7f:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8f3676f6-725d-4d38-9b08-bbe615d545cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:40:2d:22:32:62:4d:f4:ff:1b:a4:af:c5: 7d:6d:d6:de:59:b0:85:43:24:a9:03:02:76:e6:95: 1a:f6:8f:ca:ef:7f:02:05:13:5f:e7:88:b3:cf:67: 54:6b:6d:4f:3b:ac:64:6d:57:70:33:6a:84:62:b1: 7c:75:29:5a:bc:c9:bf:f3:1c:52:0a:4b:db:8a:e4: dc:dc:a8:f0:89:d5:f1:6c:0a:73:56:19:40:3c:a7: b5:06:c1:48:03:33:a9:71:b1:4d:a2:7e:8f:49:6a: 74:36:54:07:78:c4:20:d2:13:b8:84:c3:4d:85:d7: ff:df:40:b9:6e:d9:bf:11:ad:d5:c0:e1:6b:ee:f6: 0c:79:2e:d1:ef:1e:4c:1a:6e:64:b5:8c:e8:c8:df: 57:45:98:ca:2b:3a:51:0b:91:f8:33:3a:a9:15:64: 26:72:13:38:39:e0:0e:6f:5e:19:b9:15:1e:78:53: 3b:e8:4d:68:6f:a2:6b:b3:ad:4d:3a:6f:da:c1:7c: 5b:d3:3a:1f:17:73:1e:ab:6c:05:7a:25:aa:51:99: 70:c5:46:64:01:34:51:8a:be:67:30:a4:1a:c1:72: 89:8a:67:36:bf:0d:81:32:75:a6:8a:0b:4a:aa:2a: 66:a3:7a:11:8e:9d:a4:fa:dd:9a:bd:3e:08:de:a8: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0A:13:22:1B:54:7B:C2:E4:CE:2B:F7:9D:E4:2D:CA:E3:95:A1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4401a01-22e7-306a-8ac3-1a3457bda2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.150.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e8:df:f1:f6:28:f7:5f:5a:ff:60:0c:2e:f4:55:af:2e:f5: 53:aa:a7:d4:ce:8e:e8:3d:98:8f:7e:79:94:03:95:a1:6a:44: ca:91:41:d1:a0:b5:7d:d7:73:09:0b:2a:bc:59:35:35:1c:5c: dd:ee:a8:35:29:db:36:b0:61:69:28:4b:76:38:d5:60:9b:e1: bf:17:29:85:1d:ae:ea:c4:90:3a:0e:44:7f:82:74:a4:31:34: e7:d0:78:ec:f4:e2:7e:f0:e0:09:fa:5a:ad:d9:7b:ec:4f:2d: ba:2d:c1:18:70:be:13:99:36:54:f1:e5:96:9c:71:f1:13:55: dc:9a:5b:09:fc:96:0a:da:24:39:76:14:4b:a3:0a:5b:73:49: 32:08:6c:d9:76:97:0e:58:1d:cb:36:10:35:16:3b:f7:32:4c: 31:7e:73:00:f1:8c:d0:7a:79:c6:bb:aa:db:59:d1:54:92:08: db:ce:6b:45:7f:e1:71:3e:4d:c8:28:62:3e:0b:43:a1:b4:97: 96:72:b9:31:22:3c:62:f6:27:8f:e3:65:d5:6a:e8:20:3a:81: 17:bc:61:13:44:10:a3:86:82:c7:7a:3f:10:1e:3f:d3:07:25: ad:bb:bc:bd:43:1f:68:4a:5c:26:54:8c:ab:32:d3:75:2f:9a: fb:16:aa:5a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEscNxEoGK04DVZ/SmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGYzNjc2ZjYtNzI1ZC00ZDM4LTliMDgtYmJlNjE1ZDU0NWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy5ALSIyYk30/xukr8V9bdbeWbCFQySpAwJ2 5pUa9o/K738CBRNf54izz2dUa21PO6xkbVdwM2qEYrF8dSlavMm/8xxSCkvbiuTc 3KjwidXxbApzVhlAPKe1BsFIAzOpcbFNon6PSWp0NlQHeMQg0hO4hMNNhdf/30C5 btm/Ea3VwOFr7vYMeS7R7x5MGm5ktYzoyN9XRZjKKzpRC5H4MzqpFWQmchM4OeAO b14ZuRUeeFM76E1ob6Jrs61NOm/awXxb0zofF3Meq2wFeiWqUZlwxUZkATRRir5n MKQawXKJimc2vw2BMnWmigtKqipmo3oRjp2k+t2avT4I3qiaIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAwKEyIbVHvC5M4r953kLcrjlaHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ0MDFhMDEtMjJlNy0z MDZhLThhYzMtMWEzNDU3YmRhMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjZYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZ+jf8fYo919a/2AMLvRVry71U6qn1M6O6D2Yj355lAOVoWpEypFB0aC1 fddzCQsqvFk1NRxc3e6oNSnbNrBhaShLdjjVYJvhvxcphR2u6sSQOg5Ef4J0pDE0 59B47PTifvDgCfpardl77E8tui3BGHC+E5k2VPHllpxx8RNV3JpbCfyWCtokOXYU S6MKW3NJMghs2XaXDlgdyzYQNRY79zJMMX5zAPGM0Hp5xruq21nRVJII285rRX/h cT5NyChiPgtDobSXlnK5MSI8YvYnj+Nl1WroIDqBF7xhE0QQo4aCx3o/EB4/0wcl rbu8vUMfaEpcJlSMqzLTdS+a+xaqWg== -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:21 2025 by rpki-client