$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa File: 140177d9-4785-361a-8ed9-7f2ef0d09070.roa (raw, json) Hash identifier: Ea26AhF+k/lqDjXROcxYIWyKHvbxoRW+pTbUUju8C3U= Subject key identifier: 4A:97:44:80:CA:B0:B7:19:22:A6:00:B9:86:A1:87:91:53:F3:24:AC Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584B0CDC1B6589966654F72EC840 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 396026 IP address blocks: 66.249.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1b:65:89:96:66:54:f7:2e:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=e0bad5ab-83b7-4c24-87ea-e4c5170db23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:e3:b4:6e:dd:e0:6b:50:db:d3:1f:4f:cb: 6c:d8:95:f1:84:4f:9d:ec:04:51:08:c1:e8:ff:9b: e3:6c:17:04:67:e2:41:79:25:c9:e5:d4:fd:bf:af: c3:69:41:04:61:62:ce:73:79:16:ae:6e:59:fa:64: ba:5d:f3:c2:ea:3b:75:88:c0:dd:6f:5a:f2:68:b5: d0:bd:9b:f2:d3:69:88:1c:68:ce:aa:4d:af:1c:02: d0:76:43:d8:2d:b9:3c:76:ef:09:4b:03:d7:9a:27: ed:20:00:cc:35:b2:a4:2e:b0:c3:8d:ae:f2:42:71: f5:9d:b9:f2:29:4c:ea:cf:99:27:82:5e:39:2b:73: 04:92:09:2a:04:d8:f9:5d:2b:25:e6:ce:d9:9d:07: f7:5e:52:ec:33:7f:4e:b5:83:65:52:cf:75:7d:17: 31:75:1d:f5:c3:7e:cb:6d:f0:92:44:76:ab:6d:7e: 3a:b6:b4:7d:fe:0c:f3:62:1c:a7:a1:b5:52:81:53: 52:9d:b8:5f:66:71:2d:30:97:26:d7:6c:23:61:bf: 7e:10:82:59:a7:b1:a6:9d:32:22:e5:d5:c1:00:37: 48:b8:b2:05:18:c6:1c:08:14:ee:40:8c:12:a6:9f: 1c:a1:da:44:46:01:80:a9:9b:1c:d2:5d:59:cb:5a: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:44:80:CA:B0:B7:19:22:A6:00:B9:86:A1:87:91:53:F3:24:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/140177d9-4785-361a-8ed9-7f2ef0d09070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4b:bc:c4:15:6b:96:b5:79:11:60:09:91:fa:4d:25:6e:d3: 34:88:36:a9:17:e3:af:c6:4c:22:7c:6d:ae:6c:38:11:f1:f1: a7:e3:c6:59:b2:98:20:0e:d2:ac:69:2e:1f:ef:f2:ad:2d:fd: a6:a8:d2:e5:c9:56:93:47:b1:1d:94:45:f0:e7:52:61:f2:b8: e4:aa:dd:16:b9:89:77:c5:b5:52:a2:fb:5d:2a:cf:4d:08:ab: 7e:3b:f3:9c:a4:6e:40:23:5a:f9:42:47:87:4f:77:67:7f:dc: ff:42:75:7f:e8:93:b0:7a:3e:03:eb:92:3b:99:ed:43:79:e2: 68:24:c7:d9:5c:de:79:ca:c6:48:64:83:9a:dd:b8:0c:33:35: 10:cb:2c:24:3a:30:c3:45:04:88:30:2d:02:9d:f4:b4:75:d3: 00:7a:10:54:94:8c:eb:62:d4:0a:1f:89:9f:b9:68:c2:a4:c1: 7f:f0:8a:74:40:4a:74:f9:55:e2:6c:0f:56:ac:a6:77:37:29: 5e:6b:b9:32:07:4c:58:d7:ca:ab:d1:1c:0a:5b:7d:a9:47:5c: c9:02:7a:73:50:59:0a:6f:2d:7c:14:08:0e:95:88:eb:6b:0f: 81:60:45:0e:e9:61:eb:4d:4d:2b:21:d6:6f:c1:91:8e:5c:73: 73:af:f1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BtliZZmVPcuyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZTBiYWQ1YWItODNiNy00YzI0LTg3ZWEtZTRjNTE3MGRiMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibzjtG7d4GtQ29MfT8ts2JXxhE+d7ARRCMHo /5vjbBcEZ+JBeSXJ5dT9v6/DaUEEYWLOc3kWrm5Z+mS6XfPC6jt1iMDdb1ryaLXQ vZvy02mIHGjOqk2vHALQdkPYLbk8du8JSwPXmiftIADMNbKkLrDDja7yQnH1nbny KUzqz5kngl45K3MEkgkqBNj5XSsl5s7ZnQf3XlLsM39OtYNlUs91fRcxdR31w37L bfCSRHarbX46trR9/gzzYhynobVSgVNSnbhfZnEtMJcm12wjYb9+EIJZp7GmnTIi 5dXBADdIuLIFGMYcCBTuQIwSpp8codpERgGAqZsc0l1Zy1oeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqXRIDKsLcZIqYAuYahh5FT8ySsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMTQwMTc3ZDktNDc4NS0z NjFhLThlZDktN2YyZWYwZDA5MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpLvMQVa5a1eRFgCZH6TSVu0zSINqkX46/GTCJ8ba5sOBHx8afjxlmy mCAO0qxpLh/v8q0t/aao0uXJVpNHsR2URfDnUmHyuOSq3Ra5iXfFtVKi+10qz00I q34785ykbkAjWvlCR4dPd2d/3P9CdX/ok7B6PgPrkjuZ7UN54mgkx9lc3nnKxkhk g5rduAwzNRDLLCQ6MMNFBIgwLQKd9LR10wB6EFSUjOti1AofiZ+5aMKkwX/winRA SnT5VeJsD1aspnc3KV5ruTIHTFjXyqvRHApbfalHXMkCenNQWQpvLXwUCA6ViOtr D4FgRQ7pYetNTSsh1m/BkY5cc3Ov8UQ= -----END CERTIFICATE-----Generated at Fri Oct 24 14:33:54 2025 by rpki-client