$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa File: 8695139a-e96a-3566-9130-2d8de4f804d0.roa (raw, json) Hash identifier: aAUcqySbENEhiCPtfSMtjvCYl5BOhk+Uctn073J8Ayc= Subject key identifier: 41:02:DA:90:91:E4:1E:85:73:A3:EE:78:DF:80:AA:9F:C6:85:81:EB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A77809189D339E7195C64C580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 62759 IP address blocks: 140.174.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:91:89:d3:39:e7:19:5c:64:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=68f0d7b4-9fb2-4873-b539-e2a64dc5d99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:a0:af:c5:53:aa:10:4c:62:64:58:56:b0: 9c:a4:76:37:7f:4f:0f:02:33:74:5f:51:31:5e:74: c0:a5:75:6f:c2:32:6a:b1:a8:f3:3e:6f:b9:be:32: 80:ee:04:33:74:bf:c7:ef:e5:d0:9c:c3:eb:d2:c1: 8d:7b:10:69:5c:55:f1:1c:9c:18:08:ad:be:df:b8: 90:8a:d0:4a:64:40:e8:07:1a:25:4c:b5:71:c3:23: 02:41:50:15:b6:e7:12:43:5e:08:85:7e:a0:c0:15: 63:28:29:d8:83:ab:a2:17:68:08:91:e9:bc:12:c5: d2:3a:fb:96:7b:ce:2a:58:6a:94:f7:cf:af:c8:ab: 05:27:13:79:a1:91:5d:b4:e2:c8:7d:31:b0:78:28: c7:bb:df:da:3c:ec:a7:15:c9:b7:d3:b0:86:83:12: de:65:49:7e:a2:9e:d3:76:3a:95:ac:40:18:35:71: 97:a1:84:8c:77:9f:99:9e:b6:63:bf:80:08:e8:49: 95:0e:b4:11:7f:1e:a9:b6:14:ed:d5:8b:ff:4f:85: 2d:44:ec:7f:f9:5e:e3:7d:0a:aa:16:35:23:ec:3a: 9d:1f:ea:53:1b:e9:43:fb:b3:88:62:85:54:59:15: 44:20:67:d2:21:e0:3c:3d:ab:77:c9:c9:51:a4:e1: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:02:DA:90:91:E4:1E:85:73:A3:EE:78:DF:80:AA:9F:C6:85:81:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1b:2d:dc:12:1b:7b:a0:bd:de:1d:fa:22:50:a4:df:88:74: a2:81:be:76:bb:2f:b1:ab:8e:0a:64:a2:05:d3:f2:09:ed:c4: 4d:9d:e8:de:9a:6f:3a:e0:6c:db:d0:f3:bc:40:83:e8:99:3f: 97:99:d8:2a:68:82:33:21:04:0b:07:f7:c6:f9:af:f2:3c:9f: 7d:28:23:55:4a:d6:25:5e:d8:eb:47:3c:b9:cd:40:5b:0e:53: 20:c4:40:99:70:69:2a:a5:c0:47:56:19:76:e4:4d:2c:e5:71: cc:49:04:13:74:a6:74:aa:fa:e5:53:c2:13:ae:ba:4a:59:19: 09:93:6f:14:87:dd:ac:c9:da:a5:fb:5a:2d:51:26:ae:01:bb: 6d:b4:85:24:e5:22:cb:31:f6:1f:5d:0c:81:3e:1d:ce:cd:7c: 2c:97:c2:06:5f:60:bf:50:28:5a:54:ed:4d:d4:91:86:d6:eb: c4:28:81:60:3f:40:5b:99:eb:b2:53:61:c0:45:a8:f3:36:60: c3:b3:5f:67:6a:c5:dc:38:c6:66:58:05:f7:4f:24:10:55:76: 7f:ff:5f:42:8e:c0:2d:a5:0f:bb:69:d8:71:f3:d0:31:01:b3: 53:04:d0:78:fd:60:39:94:8b:fe:40:00:45:1c:15:62:66:4c: 72:5c:ec:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJGJ0znnGVxkxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NjhmMGQ3YjQtOWZiMi00ODczLWI1MzktZTJhNjRkYzVkOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWgr8VTqhBMYmRYVrCcpHY3f08PAjN0X1Ex XnTApXVvwjJqsajzPm+5vjKA7gQzdL/H7+XQnMPr0sGNexBpXFXxHJwYCK2+37iQ itBKZEDoBxolTLVxwyMCQVAVtucSQ14IhX6gwBVjKCnYg6uiF2gIkem8EsXSOvuW e84qWGqU98+vyKsFJxN5oZFdtOLIfTGweCjHu9/aPOynFcm307CGgxLeZUl+op7T djqVrEAYNXGXoYSMd5+ZnrZjv4AI6EmVDrQRfx6pthTt1Yv/T4UtROx/+V7jfQqq FjUj7DqdH+pTG+lD+7OIYoVUWRVEIGfSIeA8Pat3yclRpOEGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEC2pCR5B6Fc6PueN+Aqp/GhYHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY5NTEzOWEtZTk2YS0z NTY2LTkxMzAtMmQ4ZGU0ZjgwNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjK7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0bLdwSG3ugvd4d+iJQpN+IdKKBvna7L7GrjgpkogXT8gntxE2d6N6a bzrgbNvQ87xAg+iZP5eZ2CpogjMhBAsH98b5r/I8n30oI1VK1iVe2OtHPLnNQFsO UyDEQJlwaSqlwEdWGXbkTSzlccxJBBN0pnSq+uVTwhOuukpZGQmTbxSH3azJ2qX7 Wi1RJq4Bu220hSTlIssx9h9dDIE+Hc7NfCyXwgZfYL9QKFpU7U3UkYbW68QogWA/ QFuZ67JTYcBFqPM2YMOzX2dqxdw4xmZYBfdPJBBVdn//X0KOwC2lD7tp2HHz0DEB s1ME0Hj9YDmUi/5AAEUcFWJmTHJc7K8= -----END CERTIFICATE-----Generated at Thu Jul 10 10:47:19 2025 by rpki-client