$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa File: 9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa (raw, json) Hash identifier: DAjpSt7dq7GBwC0gNjttl/atSEenGQ3jB0WChK/h1c0= Subject key identifier: DB:E0:E5:AB:6E:4F:5A:65:2C:24:C9:C3:52:65:E0:28:5A:52:6E:53 Certificate issuer: /CN=b3f53674-93ef-439e-9019-e6308b1c1738 Certificate serial: 010D0C9F4328584ADA9BB45EEAF410C218A1FA80 Authority key identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 397156 IP address blocks: 141.193.239.0/24 maxlen: 24 148.59.73.0/24 maxlen: 24 216.116.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:b4:5e:ea:f4:10:c2:18:a1:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f53674-93ef-439e-9019-e6308b1c1738 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=ba529af3-9ca8-4ce8-9494-e43c1cea6e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:c5:ac:b9:cc:b6:3d:c0:35:9d:75:93:33: 08:53:76:b3:0e:16:a6:27:0e:ea:88:85:fb:1a:bd: ac:2e:bd:e8:04:60:6b:2a:8f:90:1a:85:05:ba:39: 9f:bb:a9:fc:98:ad:df:b1:6e:48:9b:97:68:d0:f0: eb:b5:20:d0:a4:0f:3f:28:66:4e:16:29:be:cf:a4: 23:7b:bf:1f:54:b2:9b:1f:f2:e9:08:7e:07:be:dc: 27:bb:8c:2c:8f:95:f1:ae:eb:4e:36:de:a1:e4:ca: ad:47:4b:9f:c8:34:c4:88:f7:82:37:05:4f:69:59: ba:8b:66:fd:cd:c3:83:a5:03:11:56:1f:ca:39:a8: 43:67:a9:f2:84:4a:ea:2c:41:f2:7e:ee:0c:e2:86: 6c:38:ac:87:ff:bf:dd:88:d0:fb:c4:96:c1:1b:eb: a7:d5:44:7a:5d:09:96:6f:9f:1a:09:66:74:ba:a2: 44:3e:59:11:dd:ba:9e:a7:d1:fc:a4:b2:55:cc:65: fb:ce:b5:94:c5:2e:ca:f3:f4:87:63:b8:20:8e:8e: f7:b7:90:94:ca:cb:95:7e:4a:33:06:80:9c:b2:d2: b7:9b:78:ce:8f:74:f4:47:e2:9d:65:17:0a:6b:2e: 59:26:6c:e0:75:f5:b8:4a:ab:79:e6:a2:17:83:e6: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E0:E5:AB:6E:4F:5A:65:2C:24:C9:C3:52:65:E0:28:5A:52:6E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl X509v3 Authority Key Identifier: keyid:16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer sbgp-ipAddrBlock: critical IPv4: 141.193.239.0/24 148.59.73.0/24 216.116.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:46:67:bf:30:9c:51:ad:8d:f7:eb:56:5b:de:2f:ad:9c:78: 79:28:05:da:5a:09:6e:1b:05:06:34:21:10:fe:96:25:c9:ff: 92:e1:2f:71:94:61:9c:1f:5d:e5:45:c4:ab:32:0a:97:70:3c: af:87:e4:f0:17:92:43:bd:4b:fd:0d:3c:52:2e:2a:7b:f3:d2: 15:d7:4d:f1:4a:ed:ab:f1:4a:98:5e:e1:37:cb:2e:89:72:01: 4e:4d:ca:96:d4:da:fc:e2:ed:f3:53:e5:89:ad:81:8f:56:0c: bb:6d:99:2f:d4:7d:2a:8b:3f:4f:bc:38:fc:76:d1:86:30:15: b5:16:ec:80:77:f8:f4:28:df:6d:b0:f0:1c:be:75:84:1c:3f: a2:58:22:ea:16:34:0d:ab:c5:f7:6c:03:1a:03:09:ef:2b:4d: 72:a9:2b:17:ae:5e:2f:0a:12:28:ff:94:da:28:b5:f0:53:11: 72:fc:49:6a:3b:bc:27:f9:d3:f6:20:45:7e:cc:5f:2a:f7:8a: c2:c1:c9:db:19:2a:32:89:37:8f:a2:8c:a9:29:da:ed:a3:17: 28:5f:22:9d:0c:62:6c:8a:1c:00:3f:54:8e:bb:9b:aa:0a:6b: a6:bf:e8:6a:ef:9a:eb:81:d2:37:cd:f1:98:c5:4a:62:f5:c4: 77:f7:e4:4c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEram7Re6vQQwhih+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNTM2NzQtOTNlZi00MzllLTkwMTktZTYzMDhiMWMx NzM4MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YmE1MjlhZjMtOWNhOC00Y2U4LTk0OTQtZTQzYzFjZWE2ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBvFrLnMtj3ANZ11kzMIU3azDhamJw7qiIX7 Gr2sLr3oBGBrKo+QGoUFujmfu6n8mK3fsW5Im5do0PDrtSDQpA8/KGZOFim+z6Qj e78fVLKbH/LpCH4Hvtwnu4wsj5XxrutONt6h5MqtR0ufyDTEiPeCNwVPaVm6i2b9 zcODpQMRVh/KOahDZ6nyhErqLEHyfu4M4oZsOKyH/7/diND7xJbBG+un1UR6XQmW b58aCWZ0uqJEPlkR3bqep9H8pLJVzGX7zrWUxS7K8/SHY7ggjo73t5CUysuVfkoz BoCcstK3m3jOj3T0R+KdZRcKay5ZJmzgdfW4Sqt55qIXg+asVQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNvg5atuT1plLCTJw1Jl4ChaUm5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1 MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIxYzE3MzgvOWRlMThmNmYtY2RkZC0z ODg4LWFhM2YtNmUwZTdjMmYzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjNmNTM2NzQtOTNlZi00MzllLTkw MTktZTYzMDhiMWMxNzM4L2IzZjUzNjc0LTkzZWYtNDM5ZS05MDE5LWU2MzA4YjFj MTczOC5jcmwwHwYDVR0jBBgwFoAUFkKd+N+5lk6lpBTmtkJxrpv/LMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMw OGIxYzE3MzguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjcHvAwQA lDtJAwQA2HSGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIhGZ78wnFGtjffrVlveL62ceHkoBdpaCW4bBQY0 IRD+liXJ/5LhL3GUYZwfXeVFxKsyCpdwPK+H5PAXkkO9S/0NPFIuKnvz0hXXTfFK 7avxSphe4TfLLolyAU5NypbU2vzi7fNT5YmtgY9WDLttmS/UfSqLP0+8OPx20YYw FbUW7IB3+PQo322w8By+dYQcP6JYIuoWNA2rxfdsAxoDCe8rTXKpKxeuXi8KEij/ lNootfBTEXL8SWo7vCf50/YgRX7MXyr3isLBydsZKjKJN4+ijKkp2u2jFyhfIp0M YmyKHAA/VI67m6oKa6a/6GrvmuuB0jfN8ZjFSmL1xHf35Ew= -----END CERTIFICATE-----Generated at Thu Aug 21 01:29:52 2025 by rpki-client