$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa File: a875ea6f-39a1-317d-a177-865f8b0ed48a.roa (raw, json) Hash identifier: lVi0nXErGtKigy37vxXygP3wk4M37mwYTG8vzYqAVtc= Subject key identifier: 14:5C:7E:05:FC:6A:80:12:FB:CD:55:27:F1:A1:89:9A:E6:DB:4A:43 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AF7EBE0393B5F3E2212A86560 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 215595 IP address blocks: 140.174.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e0:39:3b:5f:3e:22:12:a8:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=f467a8d1-a7e0-4a7b-a796-18bbf6cc4d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:41:64:df:04:20:23:d1:cd:52:83:bd:e4: 7e:51:64:59:46:da:66:2c:75:28:22:13:55:06:6f: 7e:e8:b4:56:78:ed:87:d9:af:a9:87:3d:ab:92:e2: 95:f0:3f:1d:b6:44:e8:90:98:29:99:32:b8:51:2f: af:e5:57:3b:04:2c:c7:0d:ad:ce:09:1b:b9:7a:b7: 4c:d8:7b:bf:29:b4:44:db:c4:2e:f9:80:d2:2b:fd: 6e:c7:94:7d:66:22:a8:1c:75:61:74:3d:99:e3:6c: d9:ce:39:42:f9:af:a5:c0:e7:e4:cc:5b:0b:7f:d4: 6e:56:15:2a:f4:5d:26:a9:d1:f2:c7:a7:c9:a4:be: cc:f3:0d:a7:e7:5f:64:16:86:d6:4b:37:db:05:f5: ad:7d:e4:c7:62:7c:bb:d2:3f:1e:fe:af:61:84:f9: 9e:a9:b5:b2:cb:32:f2:a9:d8:bc:2d:34:bf:1b:14: 99:32:1a:b6:33:7f:a7:8d:9d:86:6a:5d:e4:d4:93: 12:81:aa:77:8f:23:9f:26:cc:06:c8:3f:71:bc:a2: 27:8d:04:6d:56:03:44:30:b2:52:bd:db:41:b6:3b: 41:73:08:13:dd:e4:7d:f8:4d:42:e9:23:43:69:5c: 60:0c:2c:57:71:7e:5f:9d:a5:4e:24:04:21:58:ee: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:7E:05:FC:6A:80:12:FB:CD:55:27:F1:A1:89:9A:E6:DB:4A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ee:3f:1c:79:cd:d4:b6:ec:15:5c:d4:76:8a:56:64:f1:da: d9:2b:e1:7f:3d:72:e9:ea:bd:86:29:67:57:b9:38:39:1a:8a: 8d:fe:ce:fb:53:ec:c5:b9:e5:ae:10:17:9f:62:4c:7d:72:91: 9c:26:c0:ff:c8:8b:92:09:f3:69:3b:48:74:18:71:83:b3:4c: e2:ce:96:7c:af:46:7a:7e:95:e7:f1:e0:8a:82:e3:e1:25:f7: 56:7d:c8:ce:1a:37:f2:ba:d0:08:30:99:92:75:90:6e:02:f1: 47:0c:1a:0b:70:c9:17:4c:59:c9:76:62:22:6d:43:9e:db:50: 66:2e:b7:14:a7:18:bd:04:a9:8c:6c:6b:d3:2f:ff:0b:bb:5b: d5:d0:54:51:43:f8:8a:07:2b:0b:d5:0b:65:a8:be:d4:a0:9f: 08:a8:6a:6c:bf:f8:e3:6f:bf:a2:2e:9a:1c:f4:a9:39:06:b8: 06:3e:ce:6f:d8:f7:e5:b7:d8:93:ea:6f:b2:50:0f:94:d9:bd: 80:39:6f:cb:6b:80:2c:1c:63:fe:a7:a7:45:1a:d6:41:e3:86: 01:a4:bc:b9:75:4b:8e:be:b6:10:65:2d:84:a1:45:41:9a:63: 55:d6:3b:ea:d6:bc:73:99:cf:d8:da:0c:b5:8a:31:15:76:a2: 08:a3:6d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+A5O18+IhKoZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjQ2N2E4ZDEtYTdlMC00YTdiLWE3OTYtMThiYmY2Y2M0ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KFBZN8EICPRzVKDveR+UWRZRtpmLHUoIhNV Bm9+6LRWeO2H2a+phz2rkuKV8D8dtkTokJgpmTK4US+v5Vc7BCzHDa3OCRu5erdM 2Hu/KbRE28Qu+YDSK/1ux5R9ZiKoHHVhdD2Z42zZzjlC+a+lwOfkzFsLf9RuVhUq 9F0mqdHyx6fJpL7M8w2n519kFobWSzfbBfWtfeTHYny70j8e/q9hhPmeqbWyyzLy qdi8LTS/GxSZMhq2M3+njZ2Gal3k1JMSgap3jyOfJswGyD9xvKInjQRtVgNEMLJS vdtBtjtBcwgT3eR9+E1C6SNDaVxgDCxXcX5fnaVOJAQhWO7E8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRcfgX8aoAS+81VJ/GhiZrm20pDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTg3NWVhNmYtMzlhMS0z MTdkLWExNzctODY1ZjhiMGVkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjK6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXuPxx5zdS27BVc1HaKVmTx2tkr4X89cunqvYYpZ1e5ODkaio3+zvtT 7MW55a4QF59iTH1ykZwmwP/Ii5IJ82k7SHQYcYOzTOLOlnyvRnp+lefx4IqC4+El 91Z9yM4aN/K60AgwmZJ1kG4C8UcMGgtwyRdMWcl2YiJtQ57bUGYutxSnGL0EqYxs a9Mv/wu7W9XQVFFD+IoHKwvVC2WovtSgnwioamy/+ONvv6Iumhz0qTkGuAY+zm/Y 9+W32JPqb7JQD5TZvYA5b8trgCwcY/6np0Ua1kHjhgGkvLl1S46+thBlLYShRUGa Y1XWO+rWvHOZz9jaDLWKMRV2ogijbdM= -----END CERTIFICATE-----Generated at Fri Sep 19 01:23:01 2025 by rpki-client