$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa File: 5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa (raw, json) Hash identifier: MbXc9QgY1dX16cKQgsHJx/T4nphA7o5Y85yW/Bni3xM= Subject key identifier: 02:68:2C:E9:1D:12:88:D2:E5:85:F7:15:90:7C:0D:2E:E7:22:21:6A Certificate issuer: /CN=4047a12d-1fef-4e6b-b868-76444464eabf Certificate serial: 010D0C9F4328584B5B073D8EEE36B949AAA39280 Authority key identifier: EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 15199 IP address blocks: 140.160.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3d:8e:ee:36:b9:49:aa:a3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4047a12d-1fef-4e6b-b868-76444464eabf Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7ecdc8b6-ebb8-4cb9-b61c-43d7bfecdfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:af:b5:03:7b:bd:cc:bd:62:5e:a0:a3:48: 3b:03:27:cf:44:81:41:69:bb:e1:f6:74:46:7e:90: 68:a1:7e:da:71:8d:0a:f9:23:5c:fd:8c:16:d8:91: 74:de:a8:23:a8:20:b4:7b:55:17:e6:4f:dc:cc:ad: 61:a2:94:f7:3e:b4:a9:49:26:7d:7a:26:71:7b:1b: 60:68:fe:8a:0b:a2:fa:6a:90:3a:65:c5:d8:44:4c: 05:98:f4:e4:a7:c8:cc:d5:fb:50:d0:85:6f:44:23: 44:c6:09:9a:05:4e:31:41:75:86:19:4e:a7:bf:d4: 1f:d1:60:05:66:23:67:f7:90:6b:03:30:ad:fa:3e: a0:45:f1:5e:78:5a:59:b2:90:10:2d:63:6d:b1:72: 90:65:5d:46:e6:ba:10:c9:90:68:6a:78:b0:3c:8c: 34:9d:1f:e1:e4:d0:15:17:23:26:5b:ba:38:95:95: e4:98:b3:06:40:57:42:b4:93:19:d9:0c:88:7c:d0: dd:23:96:9b:8a:0c:7f:6d:a6:23:a7:1e:bb:d0:c6: f2:b9:74:ed:bb:df:ad:df:ba:84:1c:65:87:7e:a0: 92:96:c9:53:b3:9e:e4:8a:e8:32:88:b4:e5:fa:7e: e8:f8:7a:a2:5f:f7:65:6b:ba:68:44:5f:d5:dc:d7: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:2C:E9:1D:12:88:D2:E5:85:F7:15:90:7C:0D:2E:E7:22:21:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/5c5d12ca-b367-386d-9b3f-b25d83661e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf/4047a12d-1fef-4e6b-b868-76444464eabf.crl X509v3 Authority Key Identifier: keyid:EE:75:5F:E6:69:EB:AB:68:40:B3:9C:0D:51:95:B9:70:FF:E5:31:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4047a12d-1fef-4e6b-b868-76444464eabf.cer sbgp-ipAddrBlock: critical IPv4: 140.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b0:56:aa:aa:5d:4c:22:08:3e:15:7e:32:59:10:d3:3e:00: 79:68:f0:2e:9a:a3:5a:bd:81:9a:a3:7b:28:74:09:32:69:45: 98:d3:ed:89:95:af:1c:c3:25:7b:00:17:88:81:8b:55:1e:5c: 10:20:66:7d:50:0d:67:ae:5b:e6:6b:a1:17:ab:df:c8:d3:2c: b6:72:33:17:46:fc:9d:ba:a2:a5:83:97:70:5e:82:00:53:1d: 00:66:d1:99:18:f4:70:98:71:48:b8:56:6f:61:5c:24:af:9c: 2e:19:87:d0:05:a6:08:ef:31:06:61:ec:16:4b:55:eb:db:de: f4:39:0a:37:14:1e:c3:e5:06:68:f8:47:2a:9a:63:ea:a8:d2: 90:1f:9d:2b:88:c4:5f:a2:79:da:2a:35:b0:56:b1:71:0b:df: b2:a2:2f:7e:b6:7b:7d:84:02:1c:51:d8:c2:4d:05:63:20:82: 96:be:fb:34:b0:5a:9d:12:ab:9b:da:79:a7:1b:1a:5d:67:0e: 2d:16:1d:05:56:4e:25:fa:4b:c2:44:6b:7c:90:f4:86:82:7b: 0b:8a:ff:ad:88:da:7d:3f:cb:8a:ac:c9:8e:1f:3e:fa:1d:74: ba:b7:25:73:a0:3d:5e:d5:8c:e0:06:7f:ba:70:e4:44:d1:cb: 77:55:a2:71 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBz2O7ja5SaqjkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA0N2ExMmQtMWZlZi00ZTZiLWI4NjgtNzY0NDQ0NjRl YWJmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2VjZGM4YjYtZWJiOC00Y2I5LWI2MWMtNDNkN2JmZWNkZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C2vtQN7vcy9Yl6go0g7AyfPRIFBabvh9nRG fpBooX7acY0K+SNc/YwW2JF03qgjqCC0e1UX5k/czK1hopT3PrSpSSZ9eiZxextg aP6KC6L6apA6ZcXYREwFmPTkp8jM1ftQ0IVvRCNExgmaBU4xQXWGGU6nv9Qf0WAF ZiNn95BrAzCt+j6gRfFeeFpZspAQLWNtsXKQZV1G5roQyZBoaniwPIw0nR/h5NAV FyMmW7o4lZXkmLMGQFdCtJMZ2QyIfNDdI5abigx/baYjpx670MbyuXTtu9+t37qE HGWHfqCSlslTs57kiugyiLTl+n7o+HqiX/dla7poRF/V3NeUVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAJoLOkdEojS5YX3FZB8DS7nIiFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDQ3 YTEyZC0xZmVmLTRlNmItYjg2OC03NjQ0NDQ2NGVhYmYvNWM1ZDEyY2EtYjM2Ny0z ODZkLTliM2YtYjI1ZDgzNjYxZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDA0N2ExMmQtMWZlZi00ZTZiLWI4 NjgtNzY0NDQ0NjRlYWJmLzQwNDdhMTJkLTFmZWYtNGU2Yi1iODY4LTc2NDQ0NDY0 ZWFiZi5jcmwwHwYDVR0jBBgwFoAU7nVf5mnrq2hAs5wNUZW5cP/lMc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDQ3YTEyZC0xZmVmLTRlNmItYjg2OC03NjQ0 NDQ2NGVhYmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjKAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI7BWqqpdTCIIPhV+MlkQ0z4AeWjwLpqjWr2BmqN7KHQJMmlFmNPtiZWv HMMlewAXiIGLVR5cECBmfVANZ65b5muhF6vfyNMstnIzF0b8nbqipYOXcF6CAFMd AGbRmRj0cJhxSLhWb2FcJK+cLhmH0AWmCO8xBmHsFktV69ve9DkKNxQew+UGaPhH Kppj6qjSkB+dK4jEX6J52io1sFaxcQvfsqIvfrZ7fYQCHFHYwk0FYyCClr77NLBa nRKrm9p5pxsaXWcOLRYdBVZOJfpLwkRrfJD0hoJ7C4r/rYjafT/LiqzJjh8++h10 urclc6A9XtWM4AZ/unDkRNHLd1WicQ== -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:28 2025 by rpki-client