$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa File: f160b561-0982-3f28-a837-26a6c11a2e6c.roa (raw, json) Hash identifier: +qXFFn0dBtkQsdOxJ1NoNsaEcvsPHrdc5QEwEaEuGLs= Subject key identifier: 1A:B8:07:C4:07:6F:BE:60:1A:2F:98:EE:BF:B3:E0:AD:0F:B5:FA:14 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B5DD1F6F9070E9FB733FAA500 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 26955 IP address blocks: 65.121.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f6:f9:07:0e:9f:b7:33:fa:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=0276ad77-227d-436e-8fc4-0feab2edc039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:87:cd:2e:ed:0f:77:46:89:b1:6f:87:22:83: 3a:67:28:f3:85:a5:60:0e:4c:f0:d5:ac:1f:0f:cc: 89:2c:46:de:f4:46:51:cf:89:2e:2a:d3:c2:fd:e3: e0:8a:5c:d8:61:06:04:5d:2e:2f:65:6c:32:62:fb: 82:d4:d4:e9:f0:47:15:cf:c4:27:de:b3:36:77:4e: 19:c7:4b:a9:ff:78:f8:e1:ac:b6:db:c1:93:ae:0f: 8d:f5:1e:6b:f4:1e:35:af:d5:00:e2:d5:4d:de:e5: b5:7b:18:cd:36:ad:ca:ea:89:3c:23:54:50:7a:39: 2f:35:fb:51:be:65:19:a1:55:78:22:b2:65:6b:ca: 9c:70:39:83:8a:35:d8:53:a2:3a:47:40:ff:61:6f: 27:a6:c0:7d:68:3f:47:26:9a:dc:e1:bd:03:db:30: 96:03:e1:d6:1b:94:b9:c6:1c:8f:08:c7:d6:97:c6: 62:4c:c9:6b:63:f1:3c:bc:df:68:b0:ac:e5:1a:d8: e8:b4:dc:ef:1c:e9:dd:e3:b3:32:1b:c8:86:c8:92: bf:53:1d:83:9d:7e:f1:26:92:28:3b:e1:b3:73:3c: 38:b8:5c:77:19:10:61:a4:6e:12:dc:1e:d6:93:87: 42:42:ed:5e:94:6d:b9:e0:87:dd:eb:2c:ad:18:d3: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:07:C4:07:6F:BE:60:1A:2F:98:EE:BF:B3:E0:AD:0F:B5:FA:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.121.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c7:92:2d:48:97:96:7d:8d:e0:03:85:d7:dc:ee:01:78:73: 9e:15:80:71:d9:f2:ca:4b:d1:5e:66:14:4e:7a:3d:23:29:bf: 21:7a:82:1a:7e:00:4c:af:1a:bf:f6:4e:2a:46:87:1b:bf:14: 61:10:ba:c3:34:a9:d0:c2:8f:45:ad:b5:13:2f:9d:a6:31:f8: 05:b9:36:37:73:0f:02:7d:1a:bb:68:87:84:94:66:48:42:36: 33:0a:ff:a8:9c:b9:9f:3b:59:42:dd:e7:a4:4f:17:9a:99:7f: c0:95:65:1f:fe:53:f6:63:e7:88:50:51:b8:62:1d:8b:ee:19: 8e:1c:47:4f:34:25:5b:78:91:f5:e6:c3:a2:03:9a:bd:57:15: 72:48:57:47:3c:49:a5:75:d8:04:17:3e:75:44:42:60:0e:1e: 07:dd:94:7e:27:45:0e:57:03:09:3c:f3:46:bd:1e:c6:a4:dc: 9f:14:46:71:64:43:ad:ec:40:73:c5:cd:57:26:e6:50:22:ef: 4e:ff:a1:aa:92:fd:c7:1f:18:36:71:f6:7f:7a:4e:b5:f2:b4: d2:5c:21:a1:0d:b6:7d:05:5d:0b:5b:2c:f1:aa:f5:76:23:9b: 38:aa:02:eb:10:e4:bf:aa:b8:34:f3:a6:29:17:c6:b5:85:5f: a0:e6:28:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fb5Bw6ftzP6pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDI3NmFkNzctMjI3ZC00MzZlLThmYzQtMGZlYWIyZWRjMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIfNLu0Pd0aJsW+HIoM6ZyjzhaVgDkzw1awf D8yJLEbe9EZRz4kuKtPC/ePgilzYYQYEXS4vZWwyYvuC1NTp8EcVz8Qn3rM2d04Z x0up/3j44ay228GTrg+N9R5r9B41r9UA4tVN3uW1exjNNq3K6ok8I1RQejkvNftR vmUZoVV4IrJla8qccDmDijXYU6I6R0D/YW8npsB9aD9HJprc4b0D2zCWA+HWG5S5 xhyPCMfWl8ZiTMlrY/E8vN9osKzlGtjotNzvHOnd47MyG8iGyJK/Ux2DnX7xJpIo O+Gzczw4uFx3GRBhpG4S3B7Wk4dCQu1elG254Ifd6yytGNOe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq4B8QHb75gGi+Y7r+z4K0PtfoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjE2MGI1NjEtMDk4Mi0z ZjI4LWE4MzctMjZhNmMxMWEyZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQXmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvHki1Il5Z9jeADhdfc7gF4c54VgHHZ8spL0V5mFE56PSMpvyF6ghp+ AEyvGr/2TipGhxu/FGEQusM0qdDCj0WttRMvnaYx+AW5NjdzDwJ9Grtoh4SUZkhC NjMK/6icuZ87WULd56RPF5qZf8CVZR/+U/Zj54hQUbhiHYvuGY4cR080JVt4kfXm w6IDmr1XFXJIV0c8SaV12AQXPnVEQmAOHgfdlH4nRQ5XAwk880a9Hsak3J8URnFk Q63sQHPFzVcm5lAi707/oaqS/ccfGDZx9n96TrXytNJcIaENtn0FXQtbLPGq9XYj mziqAusQ5L+quDTzpikXxrWFX6DmKKc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:28:55 2025 by rpki-client