$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa File: 871a2ca0-ea8c-3747-9a56-e7822408b82b.roa (raw, json) Hash identifier: l9U667Vf8xMu0Z1I3Kt8DyCmZrZ+8D4kR9eQ3cxRr0Q= Subject key identifier: 4A:3C:A6:3C:59:10:68:7A:BC:D8:5A:17:B4:63:56:7D:63:0A:68:8D Certificate issuer: /CN=776cdb06-1306-4fbd-b690-680ab4fe3f19 Certificate serial: 010D0C9F4328584B21CC1A68BDC3B64DEB7AE7E0 Authority key identifier: CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 203380 IP address blocks: 165.140.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1a:68:bd:c3:b6:4d:eb:7a:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=1e2159f1-1412-4058-b8d9-e95b36c3bbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:63:5b:83:38:71:79:08:1e:85:32:74:f0: 38:b2:dd:b9:75:9e:ce:97:46:ac:2f:33:d6:e1:e1: 81:e2:0a:e6:ae:3e:a4:91:3f:55:99:60:c6:3e:87: 33:eb:96:fc:f2:95:46:df:43:36:6a:9f:24:17:03: 45:e6:35:d1:29:99:b7:d0:14:7a:30:84:93:6f:00: 38:41:69:40:65:09:31:64:4c:38:90:08:95:e2:dc: 9b:ce:b5:95:a6:a4:2b:12:63:45:b9:72:c4:c1:06: b6:2c:ea:74:4a:d5:b8:f4:47:cf:b2:81:b5:08:78: 42:c7:a4:fa:09:e5:83:c1:89:d5:5f:4e:6d:9b:1b: 01:dd:04:dd:89:19:65:f4:64:32:f4:4b:32:c0:2c: 80:af:a6:6f:bb:2d:13:43:3e:f1:6d:94:ce:9a:71: 4e:7d:02:91:c3:c1:de:36:8a:69:00:35:54:5a:3c: a3:cc:a9:93:4c:97:d1:13:93:ab:ef:45:fa:4c:f2: 53:47:c6:8a:ef:e6:db:af:14:18:d1:23:1e:78:ad: 68:58:9d:82:ae:46:6b:1c:3a:30:9e:48:d3:58:2e: 4a:f7:42:5e:de:bd:bb:22:0d:06:58:75:f5:a3:32: d5:97:62:b9:9e:c9:22:e5:24:5e:12:9f:61:03:ea: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:A6:3C:59:10:68:7A:BC:D8:5A:17:B4:63:56:7D:63:0A:68:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl X509v3 Authority Key Identifier: keyid:CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer sbgp-ipAddrBlock: critical IPv4: 165.140.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bd:1a:50:8f:13:3d:7d:09:a3:f5:c3:86:00:d3:5c:75:16: a7:e2:64:47:3b:21:d6:e0:27:7b:52:4c:87:85:3b:99:4e:ce: ec:d5:f8:21:f3:80:9e:2f:df:50:67:3d:9f:6c:45:0f:bb:ab: 5f:a4:89:bd:2c:9d:0b:59:eb:2a:0c:0c:b3:d1:da:68:48:70: db:d0:05:6f:3f:70:cb:c2:a3:c0:b5:eb:d4:54:28:cb:d2:26: 19:7c:fa:51:c3:e5:ea:de:57:cc:e8:b2:bd:25:46:ab:14:23: 4a:8f:24:c3:bf:54:d9:01:8e:90:26:85:fd:8e:b2:64:bd:e9: 55:8f:e9:8a:a0:7b:fc:1c:4b:5c:33:ed:ae:5b:fa:4c:2d:8a: 88:4b:5e:a6:dc:c0:07:ef:2d:a4:c7:7c:bc:bb:b5:a0:34:d8: 7f:61:69:b5:a7:a2:0b:7b:8c:1d:ae:88:ba:15:be:40:4f:0b: 15:25:43:07:26:db:c1:33:b7:b3:13:3c:fc:ca:90:3a:2a:22: f1:e3:1b:61:3a:c9:23:7c:a6:23:43:25:e1:9a:63:18:20:54: 21:f7:20:d3:c1:a7:ed:a7:b0:34:15:c0:48:f7:5c:05:f2:fc: 00:42:28:d5:38:52:1d:40:88:53:c3:35:29:af:40:bb:49:69: ef:f2:8f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBpovcO2Tet65+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc2Y2RiMDYtMTMwNi00ZmJkLWI2OTAtNjgwYWI0ZmUz ZjE5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MWUyMTU5ZjEtMTQxMi00MDU4LWI4ZDktZTk1YjM2YzNiYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJFjW4M4cXkIHoUydPA4st25dZ7Ol0asLzPW 4eGB4grmrj6kkT9VmWDGPocz65b88pVG30M2ap8kFwNF5jXRKZm30BR6MISTbwA4 QWlAZQkxZEw4kAiV4tybzrWVpqQrEmNFuXLEwQa2LOp0StW49EfPsoG1CHhCx6T6 CeWDwYnVX05tmxsB3QTdiRll9GQy9EsywCyAr6Zvuy0TQz7xbZTOmnFOfQKRw8He NoppADVUWjyjzKmTTJfRE5Or70X6TPJTR8aK7+bbrxQY0SMeeK1oWJ2CrkZrHDow nkjTWC5K90Je3r27Ig0GWHX1ozLVl2K5nski5SReEp9hA+qIOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo8pjxZEGh6vNhaF7RjVn1jCmiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NzZj ZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBhYjRmZTNmMTkvODcxYTJjYTAtZWE4Yy0z NzQ3LTlhNTYtZTc4MjI0MDhiODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzc2Y2RiMDYtMTMwNi00ZmJkLWI2 OTAtNjgwYWI0ZmUzZjE5Lzc3NmNkYjA2LTEzMDYtNGZiZC1iNjkwLTY4MGFiNGZl M2YxOS5jcmwwHwYDVR0jBBgwFoAUzy8YUc0vxjTsSMXYB/eI29D8joQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NzZjZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBh YjRmZTNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm9GlCPEz19CaP1w4YA01x1FqfiZEc7IdbgJ3tSTIeFO5lOzuzV+CHz gJ4v31BnPZ9sRQ+7q1+kib0snQtZ6yoMDLPR2mhIcNvQBW8/cMvCo8C169RUKMvS Jhl8+lHD5ereV8zosr0lRqsUI0qPJMO/VNkBjpAmhf2OsmS96VWP6Yqge/wcS1wz 7a5b+kwtiohLXqbcwAfvLaTHfLy7taA02H9habWnogt7jB2uiLoVvkBPCxUlQwcm 28Ezt7MTPPzKkDoqIvHjG2E6ySN8piNDJeGaYxggVCH3INPBp+2nsDQVwEj3XAXy /ABCKNU4Uh1AiFPDNSmvQLtJae/yjy0= -----END CERTIFICATE-----Generated at Tue Sep 16 09:16:02 2025 by rpki-client