$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: NeVbvqbvc0fohFbTz7cG9jtRmRFlluYKOPPDZq9OkCw= Subject key identifier: B7:23:CE:38:DD:C8:4C:B7:2A:AD:73:60:8E:FC:8E:61:05:91:73:25 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F4328584B12F4A5CB316C56E09EDD7D00 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 833 IP address blocks: 165.140.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:f4:a5:cb:31:6c:56:e0:9e:dd:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=69e3be5b-6a67-4e34-8da8-8b24c0a48da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:04:5b:6f:71:d7:77:01:6d:7f:7c:06:15: 46:4c:f9:cb:77:26:3f:d6:48:60:f0:fc:ba:e0:9d: 10:45:33:90:3d:ad:ae:05:8c:46:05:01:c1:c1:b5: 00:8b:48:05:9b:c3:07:82:10:42:c4:41:c9:c2:eb: 0f:21:00:6f:11:68:4e:90:98:cb:02:00:3d:85:a8: a0:2e:c5:a5:bc:60:44:33:9d:70:73:4c:ad:9b:91: 1c:49:8c:a7:f0:87:16:40:7d:98:93:e7:dd:9c:ec: f0:89:ea:52:35:92:a1:d7:64:2b:ee:04:d8:7d:85: b3:18:48:78:1c:cb:ff:10:c5:04:b9:2f:f7:44:10: e7:5d:98:b5:31:7f:e7:84:e1:e8:bd:33:89:c0:96: cc:d3:f4:22:e8:75:9d:f7:46:dd:5a:ca:f1:15:93: 94:05:8f:cb:d9:67:c3:98:e0:74:9e:20:dc:9c:53: 82:db:1b:58:ef:5f:fb:e8:f6:6a:56:6a:48:48:f4: 43:60:96:86:cb:c3:3c:ff:07:5f:9f:7e:28:d0:fd: 87:32:9d:f8:71:45:4b:c3:0c:d9:b9:f4:3d:a6:7e: 09:1c:92:22:10:2d:dd:71:20:64:69:0e:f0:74:a7: 84:77:f3:78:1d:2b:ef:9b:bd:27:7b:4e:02:a2:e3: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:CE:38:DD:C8:4C:B7:2A:AD:73:60:8E:FC:8E:61:05:91:73:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:99:3d:59:e6:5d:18:cd:5d:7d:53:ac:04:5c:73:e9:53:0d: 0c:67:14:b4:41:f4:06:43:d1:14:36:48:36:cf:68:f9:14:72: ff:86:ed:18:a1:ac:1e:3f:73:df:87:6f:00:f1:21:59:17:92: 24:d2:d7:1e:ca:58:4d:6f:fa:04:db:8e:5d:c8:9b:e3:4c:f2: 8a:54:cd:f1:d8:af:1f:ac:2f:80:d3:81:95:4b:fe:7f:06:56: 23:ef:9d:ea:bd:5a:60:43:c2:7e:c8:cf:a1:a2:84:ca:b7:67: 25:6a:ca:b3:78:43:ac:99:ea:5a:64:be:64:45:a0:29:d3:f7: 68:67:fe:c9:3c:bc:05:cb:7b:18:34:fb:26:f8:97:fa:24:24: fe:ba:81:0e:d7:61:9f:06:a1:05:36:e7:da:e3:27:13:2a:db: 23:96:ca:cc:8d:df:b9:0c:c5:41:e5:9d:4a:9a:1d:21:65:82: 75:55:08:7a:2f:64:02:3c:6c:37:e0:f5:ec:d4:bd:35:df:87: f1:a4:85:77:b0:53:f8:9b:4b:2a:33:55:3c:6c:57:9f:09:09: c7:88:c0:8c:00:fc:5c:bd:56:3a:21:f3:92:ac:48:73:e0:09: 75:c1:5e:d4:6b:34:d4:53:d4:75:c8:a0:d1:95:d7:70:a2:7b: 6f:fa:b1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsS9KXLMWxW4J7dfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjllM2JlNWItNmE2Ny00ZTM0LThkYTgtOGIyNGMwYTQ4ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxIEW29x13cBbX98BhVGTPnLdyY/1khg8Py6 4J0QRTOQPa2uBYxGBQHBwbUAi0gFm8MHghBCxEHJwusPIQBvEWhOkJjLAgA9haig LsWlvGBEM51wc0ytm5EcSYyn8IcWQH2Yk+fdnOzwiepSNZKh12Qr7gTYfYWzGEh4 HMv/EMUEuS/3RBDnXZi1MX/nhOHovTOJwJbM0/Qi6HWd90bdWsrxFZOUBY/L2WfD mOB0niDcnFOC2xtY71/76PZqVmpISPRDYJaGy8M8/wdfn34o0P2HMp34cUVLwwzZ ufQ9pn4JHJIiEC3dcSBkaQ7wdKeEd/N4HSvvm70ne04CouO2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcjzjjdyEy3Kq1zYI78jmEFkXMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGZPVnmXRjNXX1TrARcc+lTDQxnFLRB9AZD0RQ2SDbPaPkUcv+G7Rih rB4/c9+HbwDxIVkXkiTS1x7KWE1v+gTbjl3Im+NM8opUzfHYrx+sL4DTgZVL/n8G ViPvneq9WmBDwn7Iz6GihMq3ZyVqyrN4Q6yZ6lpkvmRFoCnT92hn/sk8vAXLexg0 +yb4l/okJP66gQ7XYZ8GoQU259rjJxMq2yOWysyN37kMxUHlnUqaHSFlgnVVCHov ZAI8bDfg9ezUvTXfh/GkhXewU/ibSyozVTxsV58JCceIwIwA/Fy9Vjoh85KsSHPg CXXBXtRrNNRT1HXIoNGV13Cie2/6sTY= -----END CERTIFICATE-----Generated at Wed Oct 22 20:12:30 2025 by rpki-client