$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa File: 25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json) Hash identifier: Oxny733cPPG+kADB1dYhloFZdGGkoi94pbrsOQ1SSDk= Subject key identifier: 49:0F:8B:E7:B3:EB:FE:2D:77:D1:94:7A:40:9D:14:53:C6:7A:DD:8A Certificate issuer: /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Certificate serial: 010D0C9F4328584A6290A0833060A0C04A5F3680 Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 14048 IP address blocks: 141.225.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a0:83:30:60:a0:c0:4a:5f:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=10132806-70cd-404a-99bc-8d8d0d01bfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:2b:8a:db:45:23:ae:5f:84:a3:e8:a9:aa: d4:cd:57:59:73:83:d8:80:4f:f9:1c:e7:63:0a:9a: 0b:f7:7c:94:4d:d3:12:9c:d9:04:db:e1:64:31:af: 45:d5:d6:d1:1d:24:41:c8:66:fa:71:e8:b4:46:6d: 42:50:e5:81:96:15:7d:3f:68:31:85:ab:c7:d5:a1: 44:dc:ba:44:5e:01:4a:f6:86:6c:b4:52:3b:97:59: e4:0c:72:a9:f7:36:22:c3:31:06:0b:a0:05:ae:7c: 66:ed:1f:69:4c:8b:56:e9:62:b1:5e:03:eb:8c:f2: 67:97:50:07:14:c5:7e:77:d7:50:f3:39:71:d0:3b: d6:e4:e7:be:29:18:8b:15:c7:d8:27:1f:08:bf:c4: 01:e2:10:48:d0:74:bb:44:10:e3:71:9f:27:50:66: 45:a7:7b:1b:7c:fa:9a:5d:c4:de:aa:06:45:f3:c1: 05:53:21:48:65:a7:ba:34:85:22:c0:c5:e5:bc:b4: 50:5c:80:c6:56:e1:e7:4f:c4:ea:48:1c:f7:de:40: f6:e1:43:b5:d4:11:8a:b7:87:8b:47:49:de:67:51: 02:dd:62:31:93:88:53:d3:5b:5e:d1:1f:56:c3:b6: 2c:f9:59:51:cc:a5:9d:8d:33:ed:b1:8e:0c:52:40: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0F:8B:E7:B3:EB:FE:2D:77:D1:94:7A:40:9D:14:53:C6:7A:DD:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl X509v3 Authority Key Identifier: keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer sbgp-ipAddrBlock: critical IPv4: 141.225.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b1:50:7c:9c:dd:7e:b2:72:68:6d:54:e2:ba:78:74:44:49: c8:7b:0a:4a:f8:92:ad:b5:c6:0b:b6:b0:bb:ea:fb:67:81:cd: e2:c5:9b:26:66:9b:fd:04:7e:8e:c7:97:e5:d8:e2:42:c4:e2: 23:e2:c2:c9:30:68:43:d6:b7:d6:d8:4a:13:4d:d5:bb:25:48: 23:35:73:50:fc:16:b3:cf:1d:4b:04:4e:c5:37:f9:02:ad:89: 6f:40:63:cf:c9:b6:25:03:29:a3:ab:87:7a:16:3f:7b:8e:0c: 9f:8b:98:ec:57:a5:e9:2a:d5:2b:d4:b2:f9:90:9b:99:b0:f3: b2:c5:4b:53:5a:08:bd:6d:d2:bb:ad:6e:02:72:f4:da:2a:01: 43:c7:df:de:81:41:d9:f0:15:89:69:ee:67:d1:e4:cd:49:c3: d9:bc:f2:1e:79:9a:6e:50:ce:a8:c2:45:95:c3:80:d1:9a:7d: 48:2c:10:38:65:41:ef:06:c3:8a:ae:d8:39:4b:81:c6:94:2e: 5d:33:4a:c5:34:34:8a:20:8e:a8:dd:4c:d8:79:09:3f:52:da: ab:a3:ca:75:5e:ee:8b:23:db:6e:85:de:4e:33:be:28:b4:c3: 58:6a:6e:90:e0:17:97:46:11:9a:19:a1:21:14:a9:bd:0c:83: d4:b8:ae:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKCDMGCgwEpfNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4 NDEyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MTAxMzI4MDYtNzBjZC00MDRhLTk5YmMtOGQ4ZDBkMDFiZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEcrittFI65fhKPoqarUzVdZc4PYgE/5HOdj CpoL93yUTdMSnNkE2+FkMa9F1dbRHSRByGb6cei0Rm1CUOWBlhV9P2gxhavH1aFE 3LpEXgFK9oZstFI7l1nkDHKp9zYiwzEGC6AFrnxm7R9pTItW6WKxXgPrjPJnl1AH FMV+d9dQ8zlx0DvW5Oe+KRiLFcfYJx8Iv8QB4hBI0HS7RBDjcZ8nUGZFp3sbfPqa XcTeqgZF88EFUyFIZae6NIUiwMXlvLRQXIDGVuHnT8TqSBz33kD24UO11BGKt4eL R0neZ1EC3WIxk4hT01te0R9Ww7Ys+VlRzKWdjTPtsY4MUkBw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkPi+ez6/4td9GUekCdFFPGet2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWVm ZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvMjViNThmODktOGVlOS0z NGRjLWI4MjMtMThjNGQ4MWEwZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVlZmRkNzktYTJjMi00ZmQ0LWFk MWEtNWQ1Mzg0MTM4NDEyLzY1ZWZkZDc5LWEyYzItNGZkNC1hZDFhLTVkNTM4NDEz ODQxMi5jcmwwHwYDVR0jBBgwFoAUrBLkmEvyBzypjD+IIQbdJmX8XKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUz ODQxMzg0MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjeGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSxUHyc3X6ycmhtVOK6eHRESch7Ckr4kq21xgu2sLvq+2eBzeLFmyZm m/0Efo7Hl+XY4kLE4iPiwskwaEPWt9bYShNN1bslSCM1c1D8FrPPHUsETsU3+QKt iW9AY8/JtiUDKaOrh3oWP3uODJ+LmOxXpekq1SvUsvmQm5mw87LFS1NaCL1t0rut bgJy9NoqAUPH396BQdnwFYlp7mfR5M1Jw9m88h55mm5QzqjCRZXDgNGafUgsEDhl Qe8Gw4qu2DlLgcaULl0zSsU0NIogjqjdTNh5CT9S2qujynVe7osj226F3k4zvii0 w1hqbpDgF5dGEZoZoSEUqb0Mg9S4rmU= -----END CERTIFICATE-----Generated at Wed Jul 9 20:15:09 2025 by rpki-client