$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa File: a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa (raw, json) Hash identifier: 1xwDPR/GQU+diuv0IoXvVOelYmg8AaERyTBFWRxsc5Q= Subject key identifier: 5F:23:39:49:DE:9E:B8:1E:C5:91:32:96:6E:57:57:72:88:8F:AE:9C Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Certificate serial: 010D0C9F4328584B2FC19BF90B68060A8E5F1400 Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 140.235.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:9b:f9:0b:68:06:0a:8e:5f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=e4518b8a-7cfb-4cc8-801c-2f5786556f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:f2:3d:1b:60:4a:72:ab:b2:3f:47:c9:a0: 9a:d2:1d:28:ef:f3:94:45:5e:b7:d0:c6:78:7c:07: 9e:4c:79:3a:07:b1:0d:61:4e:56:74:6a:34:22:e2: 08:62:bc:78:5f:ad:c7:4c:7a:29:a9:84:f2:e7:41: a1:ec:96:5e:12:99:53:a7:19:4a:f1:0a:69:eb:c2: 33:d5:da:28:9e:76:b2:d0:18:26:ca:49:6d:e6:c9: 92:33:68:c3:d4:3f:f6:6a:0c:c6:be:6b:9c:b5:f2: 17:09:e0:80:41:f5:01:c7:ce:ca:d3:a1:5f:fa:8f: f7:83:ad:ab:66:eb:c6:57:6e:4e:67:33:0a:9a:e9: 58:5a:04:d9:0e:c3:f8:67:53:12:9c:a8:c5:29:1f: f4:01:f1:05:5f:a4:6f:7e:45:d3:ec:9f:e9:99:ea: 82:03:95:40:f9:be:20:b2:e4:01:46:9a:3a:c2:49: 58:cc:9e:93:45:9e:60:5d:f0:7a:02:a7:b7:28:cc: b6:1d:dd:cc:49:8d:56:aa:7e:05:75:9f:ae:da:bc: cb:04:23:34:9b:2a:4b:df:8a:51:af:0f:ba:a9:4b: f1:08:e3:56:da:01:53:0b:e4:9f:c7:e9:a2:42:8d: 87:a7:13:c2:0b:43:b9:4d:84:38:9b:57:e9:36:82: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:23:39:49:DE:9E:B8:1E:C5:91:32:96:6E:57:57:72:88:8F:AE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/a84c16cb-cb0a-3039-9291-cc4f71a48db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl X509v3 Authority Key Identifier: keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:11:3f:0f:c7:e3:37:52:d3:75:e8:5f:29:52:af:fb:f5:d8: de:b9:d2:ec:5b:56:17:6a:8e:9f:5e:59:81:61:bb:ce:33:ee: 4d:07:a2:e6:83:ba:69:66:e9:11:af:ea:c8:75:71:6f:07:72: 28:e6:25:0a:b1:06:55:25:71:71:53:17:93:f1:57:75:39:8d: fd:c1:44:3a:a9:c9:23:3f:88:eb:89:4e:5b:23:3d:27:ac:ba: 50:64:b1:2f:3f:6e:cb:ef:1d:3e:92:f5:89:ee:d7:34:76:52: 2e:47:02:47:7c:a6:66:9f:a7:90:c7:bc:64:5e:e9:24:bc:5d: e6:2b:8b:56:47:57:eb:e2:2e:51:1f:8d:3d:0e:4a:c1:da:2c: ed:12:32:2f:03:41:56:ac:9c:6b:82:df:62:82:57:8b:86:8a: b8:89:d4:bb:ca:78:2b:5c:38:11:18:f9:c3:79:dc:9f:82:15: df:2d:9d:67:2f:a9:dd:83:56:20:5e:b2:c4:c7:25:96:0a:b9: 93:98:8a:ef:ec:3b:11:11:62:0a:ae:44:13:0c:22:a9:c3:89: 0f:35:d3:31:f4:97:49:f0:a1:4c:68:93:cf:b4:9f:e2:dc:55: 8a:89:e4:7b:2e:75:b4:38:48:7c:37:a9:d5:57:50:92:94:9d: 74:69:d6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZv5C2gGCo5fFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmNjg2NTQtMDFhOS00NjUzLWI5ODEtZDAzNDlmMzll MGE1MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ1MThiOGEtN2NmYi00Y2M4LTgwMWMtMmY1Nzg2NTU2ZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIryPRtgSnKrsj9HyaCa0h0o7/OURV630MZ4 fAeeTHk6B7ENYU5WdGo0IuIIYrx4X63HTHopqYTy50Gh7JZeEplTpxlK8Qpp68Iz 1doonnay0Bgmyklt5smSM2jD1D/2agzGvmuctfIXCeCAQfUBx87K06Ff+o/3g62r ZuvGV25OZzMKmulYWgTZDsP4Z1MSnKjFKR/0AfEFX6RvfkXT7J/pmeqCA5VA+b4g suQBRpo6wklYzJ6TRZ5gXfB6Aqe3KMy2Hd3MSY1Wqn4FdZ+u2rzLBCM0mypL34pR rw+6qUvxCONW2gFTC+Sfx+miQo2HpxPCC0O5TYQ4m1fpNoKQEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8jOUnenrgexZEylm5XV3KIj66cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2 ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0OWYzOWUwYTUvYTg0YzE2Y2ItY2IwYS0z MDM5LTkyOTEtY2M0ZjcxYTQ4ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWNmNjg2NTQtMDFhOS00NjUzLWI5 ODEtZDAzNDlmMzllMGE1LzljZjY4NjU0LTAxYTktNDY1My1iOTgxLWQwMzQ5ZjM5 ZTBhNS5jcmwwHwYDVR0jBBgwFoAUGCHq5dZWjPO7dqRLEibguOefkNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0 OWYzOWUwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACURPw/H4zdS03XoXylSr/v12N650uxbVhdqjp9eWYFhu84z7k0HouaD umlm6RGv6sh1cW8HcijmJQqxBlUlcXFTF5PxV3U5jf3BRDqpySM/iOuJTlsjPSes ulBksS8/bsvvHT6S9Ynu1zR2Ui5HAkd8pmafp5DHvGRe6SS8XeYri1ZHV+viLlEf jT0OSsHaLO0SMi8DQVasnGuC32KCV4uGiriJ1LvKeCtcOBEY+cN53J+CFd8tnWcv qd2DViBessTHJZYKuZOYiu/sOxERYgquRBMMIqnDiQ810zH0l0nwoUxok8+0n+Lc VYqJ5HsudbQ4SHw3qdVXUJKUnXRp1vA= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:22 2025 by rpki-client