$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa File: 3115dfd7-974d-3faa-a564-738077a10f40.roa (raw, json) Hash identifier: mgufxWuHVJM+jQf+ghnf4ziT2SwvZcJZgLilMC6svQ4= Subject key identifier: 91:01:74:D7:BF:A9:2D:9C:B2:AC:81:8A:AB:6F:76:A4:A8:F7:97:CF Certificate issuer: /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Certificate serial: 010D0C9F4328584AC016493DF61E9B8C570A8C80 Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 136.175.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:49:3d:f6:1e:9b:8c:57:0a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=f8b0a38c-0c9e-489e-82bd-97c55e15e1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:71:24:f8:0c:5b:40:57:78:81:19:9b:bb: 65:75:92:dc:d9:85:ce:af:58:bd:31:72:d5:04:bb: f7:9d:51:ff:f3:30:66:a7:fd:c2:e5:e9:3f:cc:12: cb:fd:ed:3c:71:d0:cb:7d:27:44:b3:5d:af:39:0a: 08:a3:b7:d3:5b:a1:23:a2:0c:67:9d:7b:19:18:79: 11:a8:b8:c0:00:9d:4a:3a:25:b9:2a:c7:a5:bb:7e: a1:be:6c:e5:6a:d8:e9:ef:7a:40:82:d1:ce:5c:50: 22:70:01:f7:c1:d0:64:af:ed:d1:76:c4:58:df:e4: fa:42:0d:70:aa:7e:03:90:75:2b:97:fb:df:12:42: 2f:76:f3:f1:91:88:16:43:6e:22:34:19:8b:5a:02: 35:39:89:47:77:aa:59:df:e1:c5:16:66:dd:6c:70: a0:0e:c2:1f:12:ae:de:60:93:c0:88:b2:3f:59:8a: 17:da:3f:99:c9:c8:ed:b5:48:e8:90:f9:27:d9:a2: d6:d9:bc:54:6c:77:a4:a1:95:e9:ba:19:ab:24:0f: 93:9f:c5:82:19:7d:a0:19:af:0c:e6:b9:ab:a6:6c: 2d:16:1b:5d:d1:60:f8:d0:10:f8:79:bb:a4:8b:01: ee:a0:89:a0:2e:90:ad:46:df:d2:e9:b7:f4:69:19: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:01:74:D7:BF:A9:2D:9C:B2:AC:81:8A:AB:6F:76:A4:A8:F7:97:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl X509v3 Authority Key Identifier: keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer sbgp-ipAddrBlock: critical IPv4: 136.175.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d3:ad:d7:a0:14:31:5a:92:29:85:0a:51:4f:d4:b6:c5:45: 8f:b8:12:96:26:2d:3b:d5:6f:44:47:07:ae:30:02:0f:68:e5: 1c:6f:18:72:6a:a0:81:2e:41:27:10:eb:64:3a:85:b9:22:b4: 13:05:ee:89:c0:35:23:f2:23:d5:69:a2:00:b2:97:27:90:51: f4:90:97:ac:b8:85:a6:57:21:9a:76:c6:4d:cc:13:bd:97:32: f5:a7:e5:c7:dc:f1:35:16:33:97:07:87:c2:d6:ec:98:e9:64: 31:6d:f8:49:c8:1d:ab:f6:4d:b8:6a:46:55:5c:ab:38:dc:d2: 2f:d3:ed:60:bb:c6:36:ab:31:e7:17:63:da:1e:40:a9:f5:df: f0:f1:25:1f:ce:58:91:1d:6a:68:9a:59:c2:81:16:8b:d3:01: 54:88:e5:f9:29:bf:6f:08:32:20:96:4b:02:21:e0:80:16:f1: 93:ad:3b:2e:d0:a5:4a:37:0a:04:83:da:6b:cc:c3:c6:85:f9: aa:fe:e1:19:0e:75:75:0e:52:5a:94:b9:74:34:a9:6d:a1:63: 46:f6:36:d2:96:dd:4c:c0:1c:93:72:4f:64:b2:23:96:3d:89: 52:88:c5:08:d2:25:a7:e5:19:f4:23:75:d6:07:c1:d4:17:97: a9:63:24:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkk99h6bjFcKjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZmQxNGYtYjVjMy00NDFmLWIwOWMtZGFhZTJlYzQy NDcyMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZjhiMGEzOGMtMGM5ZS00ODllLTgyYmQtOTdjNTVlMTVlMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnepxJPgMW0BXeIEZm7tldZLc2YXOr1i9MXLV BLv3nVH/8zBmp/3C5ek/zBLL/e08cdDLfSdEs12vOQoIo7fTW6EjogxnnXsZGHkR qLjAAJ1KOiW5Kselu36hvmzlatjp73pAgtHOXFAicAH3wdBkr+3RdsRY3+T6Qg1w qn4DkHUrl/vfEkIvdvPxkYgWQ24iNBmLWgI1OYlHd6pZ3+HFFmbdbHCgDsIfEq7e YJPAiLI/WYoX2j+ZycjttUjokPkn2aLW2bxUbHekoZXpuhmrJA+Tn8WCGX2gGa8M 5rmrpmwtFhtd0WD40BD4ebukiwHuoImgLpCtRt/S6bf0aRn8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEBdNe/qS2csqyBiqtvdqSo95fPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFm ZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFlMmVjNDI0NzIvMzExNWRmZDctOTc0ZC0z ZmFhLWE1NjQtNzM4MDc3YTEwZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZmQxNGYtYjVjMy00NDFmLWIw OWMtZGFhZTJlYzQyNDcyLzhjMWZkMTRmLWI1YzMtNDQxZi1iMDljLWRhYWUyZWM0 MjQ3Mi5jcmwwHwYDVR0jBBgwFoAU0DKnv4ClaoU6OPWCa/ct2r1/fWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFmZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFl MmVjNDI0NzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjTrdegFDFakimFClFP1LbFRY+4EpYmLTvVb0RHB64wAg9o5RxvGHJq oIEuQScQ62Q6hbkitBMF7onANSPyI9VpogCylyeQUfSQl6y4haZXIZp2xk3ME72X MvWn5cfc8TUWM5cHh8LW7JjpZDFt+EnIHav2TbhqRlVcqzjc0i/T7WC7xjarMecX Y9oeQKn13/DxJR/OWJEdamiaWcKBFovTAVSI5fkpv28IMiCWSwIh4IAW8ZOtOy7Q pUo3CgSD2mvMw8aF+ar+4RkOdXUOUlqUuXQ0qW2hY0b2NtKW3UzAHJNyT2SyI5Y9 iVKIxQjSJaflGfQjddYHwdQXl6ljJEU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:47 2025 by rpki-client