$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa File: 141291a2-0ed7-3337-b072-e0411a6bdf5c.roa (raw, json) Hash identifier: v3yLTNJwnQYL8tCjcIBn3kW2RJboUx+dJdIH+OCJ29k= Subject key identifier: 99:56:0C:C6:EB:3B:A3:66:BD:C1:23:81:0B:C6:37:B1:0D:46:0A:85 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584B1F016D6F7D3EAC8D99C533B0 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 30029 IP address blocks: 64.137.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6d:6f:7d:3e:ac:8d:99:c5:33:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=8529ea8d-61e7-4d4a-8e71-3528bc47a390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:67:66:30:3b:af:62:ea:2a:e6:33:8f:9f: ce:8f:0c:2e:ad:8d:17:b0:c6:ce:49:ca:cc:b2:d8: 19:d6:cc:32:31:61:65:05:55:9f:41:87:4a:02:2e: 17:14:d1:7c:04:41:d9:f3:15:83:77:cd:a9:42:78: da:5c:7a:1a:3a:f1:fd:ff:a9:18:c5:c3:35:f8:3d: 41:29:6f:73:65:4a:d7:42:2e:55:f1:6e:b0:77:39: 08:00:29:65:93:32:64:22:4c:b0:20:9a:24:90:3e: 19:32:f3:c0:ba:90:4b:00:5a:ae:3e:a8:11:6f:41: cc:25:67:c7:d3:b9:bb:36:9b:0b:09:62:3a:09:15: 4a:83:3b:62:d5:b8:a0:1c:78:91:10:cc:53:2d:d1: 7b:fd:70:46:19:90:c0:0d:57:5c:21:94:75:b0:7a: 23:cf:56:8f:09:43:b2:9f:35:52:bc:fa:85:dd:70: c9:f4:16:ee:15:bb:c6:08:13:37:fb:4c:ff:aa:b0: d9:99:01:b8:3f:1f:e8:37:d4:d2:9d:71:a9:bf:c6: 40:53:35:2e:23:6a:82:c6:d5:26:11:a5:8a:2c:ff: 64:93:36:4a:27:0b:fc:4d:72:b7:40:c6:94:3c:08: 4c:ed:e9:bb:6c:cb:52:41:b9:40:87:aa:52:71:4a: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:0C:C6:EB:3B:A3:66:BD:C1:23:81:0B:C6:37:B1:0D:46:0A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 64.137.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:80:b5:e8:48:17:9a:2f:76:10:cd:6b:b8:84:ef:4a:3b:5b: 24:b2:1f:a5:51:26:cd:e5:9e:17:33:67:35:74:b5:63:8f:f6: ba:6f:f2:07:5f:3d:be:10:07:6d:21:62:53:cd:b0:06:ab:97: 16:9b:9b:39:a5:13:a1:b4:d4:55:42:0c:f5:9f:da:e0:47:0d: 11:3a:83:9a:d8:5b:17:b3:60:8b:39:77:d5:87:d0:33:75:48: 90:f4:53:af:53:b9:cc:1c:a0:0a:83:39:a5:7a:49:6c:ff:a8: f6:9e:b5:f7:f0:ce:43:ea:61:2f:60:26:0f:c5:f8:99:27:62: 9e:77:30:58:49:32:f2:7f:a6:fa:d3:4a:a9:38:74:a0:ce:ff: a6:94:12:48:eb:d5:0c:7b:2a:bc:06:b5:38:b4:2a:4c:9a:b1: 7a:3a:52:50:bc:e4:7e:e5:80:ca:75:4f:1f:29:0e:00:f5:76: 7b:e1:cb:d8:31:83:22:7e:d2:50:2a:58:5a:07:7e:ce:12:fc: 08:84:b9:af:1b:35:ad:95:cd:1e:28:8b:de:10:db:6e:b1:89: 00:a8:51:48:02:16:70:c6:f6:4c:a0:d4:b6:42:45:f1:85:4d: f9:d6:28:1f:d0:ad:40:ca:d9:ca:dc:30:8f:ad:33:16:83:10: b1:d8:ae:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAW1vfT6sjZnFM7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODUyOWVhOGQtNjFlNy00ZDRhLThlNzEtMzUyOGJjNDdhMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2hnZjA7r2LqKuYzj5/OjwwurY0XsMbOScrM stgZ1swyMWFlBVWfQYdKAi4XFNF8BEHZ8xWDd82pQnjaXHoaOvH9/6kYxcM1+D1B KW9zZUrXQi5V8W6wdzkIACllkzJkIkywIJokkD4ZMvPAupBLAFquPqgRb0HMJWfH 07m7NpsLCWI6CRVKgzti1bigHHiREMxTLdF7/XBGGZDADVdcIZR1sHojz1aPCUOy nzVSvPqF3XDJ9BbuFbvGCBM3+0z/qrDZmQG4Px/oN9TSnXGpv8ZAUzUuI2qCxtUm EaWKLP9kkzZKJwv8TXK3QMaUPAhM7em7bMtSQblAh6pScUr7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlWDMbrO6NmvcEjgQvGN7ENRgqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMTQxMjkxYTItMGVkNy0z MzM3LWIwNzItZTA0MTFhNmJkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGAtehIF5ovdhDNa7iE70o7WySyH6VRJs3lnhczZzV0tWOP9rpv8gdf Pb4QB20hYlPNsAarlxabmzmlE6G01FVCDPWf2uBHDRE6g5rYWxezYIs5d9WH0DN1 SJD0U69TucwcoAqDOaV6SWz/qPaetffwzkPqYS9gJg/F+JknYp53MFhJMvJ/pvrT Sqk4dKDO/6aUEkjr1Qx7KrwGtTi0KkyasXo6UlC85H7lgMp1Tx8pDgD1dnvhy9gx gyJ+0lAqWFoHfs4S/AiEua8bNa2VzR4oi94Q226xiQCoUUgCFnDG9kyg1LZCRfGF TfnWKB/QrUDK2crcMI+tMxaDELHYri8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:35:57 2025 by rpki-client