$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa File: d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa (raw, json) Hash identifier: 8KgXpMRse2ZMQphS2jPEdlWoElUoTWeYVP7QugOMm7w= Subject key identifier: 54:EE:2A:E9:C2:3F:C3:07:BC:C7:86:6D:BD:A6:B1:45:E3:F1:D9:C4 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584B047BFDE564DF221CDC9CC180 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 88 IP address blocks: 140.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fd:e5:64:df:22:1c:dc:9c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6d262c6f-f120-4ca2-9d6a-3781f17648d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:b6:39:b5:2e:dc:41:03:b7:4a:6c:05:9c: 02:b1:42:5f:4d:b0:a9:43:de:62:59:12:0e:50:9a: bf:f6:da:54:76:58:b9:f4:b3:35:0d:62:cb:0e:4c: 21:55:73:2a:6b:04:c6:7d:4e:c2:c3:71:9f:ac:d1: 5e:ad:8d:98:23:7d:8b:95:e8:59:2b:21:6a:29:cc: 3f:b1:ca:a8:42:44:33:1b:dd:6e:40:a7:30:26:3f: f9:05:f7:d3:dd:e8:55:a1:3d:c5:6c:1a:9a:07:32: 67:c8:2b:dc:ac:07:57:ae:65:81:b1:8f:28:5e:d2: 27:d4:67:f3:6b:29:6f:06:62:ff:39:2a:34:fb:3a: 06:4e:d3:f6:c6:ec:ef:fb:a1:50:5a:ea:b0:88:ed: 69:8d:ec:5f:0a:dd:0b:c7:f9:eb:2e:41:51:04:e3: a8:e3:d1:35:9e:56:26:28:e4:71:f8:21:50:f1:03: 56:ff:70:06:9a:4d:62:8a:0b:7a:b6:bf:f0:08:72: b9:37:11:6b:0a:3e:04:56:bd:ec:7b:88:bc:e1:ea: 15:47:13:6d:a0:7e:c5:9e:4d:37:80:77:31:eb:0a: db:9d:c6:66:ae:f0:1b:f3:9f:ad:67:0a:23:c0:95: 1f:7e:19:50:5b:9c:8f:d2:93:b1:05:35:14:7f:64: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EE:2A:E9:C2:3F:C3:07:BC:C7:86:6D:BD:A6:B1:45:E3:F1:D9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 140.180.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b6:b5:ad:2d:e1:0d:d8:d5:ae:10:dd:98:bf:37:36:56:5e: 96:f1:5a:14:f5:95:30:f7:e8:7c:9c:8b:9c:5b:02:f6:e6:ca: 09:99:f8:f8:da:02:1e:55:3d:c4:cf:db:08:69:9e:7d:be:0d: c8:db:01:cc:84:f1:e2:88:09:ab:e0:d2:5b:c3:80:9a:3f:f0: 15:19:96:67:d1:52:b5:a1:4f:3d:f9:61:36:18:7f:01:6a:ac: 94:13:8d:b3:87:2f:6c:bd:f5:f5:cb:67:1c:bb:2d:ca:59:12: 30:fc:a5:37:bc:f0:36:19:67:d2:f9:14:ab:9c:43:30:b9:fd: 9b:bc:a6:7e:44:d1:12:73:84:f4:b7:99:82:31:4b:7b:dd:68: 84:58:b2:4b:b4:a0:40:e4:f7:59:fc:d7:b2:f0:41:bb:d2:09: e7:a1:11:9f:83:83:86:97:99:9f:0b:79:4a:55:5d:c6:a9:1f: 33:29:4e:ae:f3:62:3a:bd:73:25:a2:3a:04:31:c3:a7:85:e7: 84:65:9c:44:72:a3:f3:07:4a:b5:53:9a:7c:2e:a0:4f:15:4a: a5:0f:4b:9c:79:26:bf:3c:2b:32:7e:72:c3:3d:f6:1e:36:29: 66:ce:d9:f5:0e:fe:4b:95:44:c5:54:a3:69:61:73:f1:be:0e: 66:63:f8:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsEe/3lZN8iHNycwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmQyNjJjNmYtZjEyMC00Y2EyLTlkNmEtMzc4MWYxNzY0OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNe2ObUu3EEDt0psBZwCsUJfTbCpQ95iWRIO UJq/9tpUdli59LM1DWLLDkwhVXMqawTGfU7Cw3GfrNFerY2YI32LlehZKyFqKcw/ scqoQkQzG91uQKcwJj/5BffT3ehVoT3FbBqaBzJnyCvcrAdXrmWBsY8oXtIn1Gfz aylvBmL/OSo0+zoGTtP2xuzv+6FQWuqwiO1pjexfCt0Lx/nrLkFRBOOo49E1nlYm KORx+CFQ8QNW/3AGmk1iigt6tr/wCHK5NxFrCj4EVr3se4i84eoVRxNtoH7Fnk03 gHcx6wrbncZmrvAb85+tZwojwJUffhlQW5yP0pOxBTUUf2T/RwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFTuKunCP8MHvMeGbb2msUXj8dnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvZDcyN2Q1ZjQtOWEyOC0z NzMzLTlmNGYtYmQzNzE0ZDlmNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjLQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGba1rS3hDdjVrhDdmL83NlZelvFaFPWVMPfofJyLnFsC9ubKCZn4+NoC HlU9xM/bCGmefb4NyNsBzITx4ogJq+DSW8OAmj/wFRmWZ9FStaFPPflhNhh/AWqs lBONs4cvbL319ctnHLstylkSMPylN7zwNhln0vkUq5xDMLn9m7ymfkTREnOE9LeZ gjFLe91ohFiyS7SgQOT3WfzXsvBBu9IJ56ERn4ODhpeZnwt5SlVdxqkfMylOrvNi Or1zJaI6BDHDp4XnhGWcRHKj8wdKtVOafC6gTxVKpQ9LnHkmvzwrMn5ywz32HjYp Zs7Z9Q7+S5VExVSjaWFz8b4OZmP4lg== -----END CERTIFICATE-----Generated at Sun Nov 2 21:24:11 2025 by rpki-client