$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1209f95c-3d79-3df9-ac31-de01928cf0d8.roa File: 1209f95c-3d79-3df9-ac31-de01928cf0d8.roa (raw, json) Hash identifier: GLG8Jy2Q0oaW8JsMmJGh/D0bGmrppUY07WNctPmKb+E= Subject key identifier: BC:FA:C0:03:D1:98:14:F2:61:BB:5F:73:56:6F:38:0E:8A:20:D9:1F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E33830F5830A3BE89B00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1209f95c-3d79-3df9-ac31-de01928cf0d8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.213.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e3:38:30:f5:83:0a:3b:e8:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=7497c89e-20b7-46ba-a446-80334e64e6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:dd:5a:60:ce:aa:41:90:9d:73:f3:ce:65: 99:29:08:fc:b5:f3:24:ab:d4:bf:9e:0a:27:a4:e1: a1:3c:00:3c:39:6c:6c:a3:e1:91:b8:d1:db:4e:f3: fa:73:52:5e:f9:d0:40:29:4c:2e:34:55:48:df:d2: fe:ac:59:1b:d0:5e:9d:30:fc:18:15:18:53:c4:08: 84:05:e9:5d:f4:a6:64:6a:95:f6:9b:58:1b:75:19: b3:87:1e:f5:a0:63:1e:22:d6:09:87:02:4a:ad:79: 4b:3f:24:04:36:8d:df:ae:9e:4e:cc:8a:1e:43:51: 19:5e:a4:b5:69:68:70:6a:e1:90:cb:21:e4:35:11: 4a:83:4b:41:91:c4:eb:87:7d:1c:90:c7:a0:db:5a: db:51:2d:0e:e0:be:f6:61:70:dc:f3:02:db:8e:d2: 33:50:2e:23:e1:91:a2:81:3c:f5:b5:49:f0:6b:19: 9c:42:91:68:ea:47:3e:32:78:b6:f5:de:9f:20:d6: 5b:42:2b:2b:55:6b:65:66:cb:17:ce:e6:a8:10:23: 75:2b:8c:0b:10:62:8c:b3:f3:15:cf:0e:ca:ba:6a: eb:be:2a:66:53:a5:fd:74:76:32:f2:63:94:8e:14: 2f:f6:e9:7b:1b:b8:5b:d2:23:fb:77:7e:32:33:99: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FA:C0:03:D1:98:14:F2:61:BB:5F:73:56:6F:38:0E:8A:20:D9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1209f95c-3d79-3df9-ac31-de01928cf0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.213.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d7:3d:11:47:ba:5d:14:40:04:25:77:18:19:62:78:be:7b: 4e:c3:ba:fa:fb:7b:64:c5:ee:26:eb:07:39:34:15:d4:65:79: c9:d5:4e:97:b1:33:d7:8f:f7:35:91:9c:a4:f8:38:74:fe:d8: 00:93:71:e7:25:4c:1f:fb:ed:57:02:71:f2:90:46:a2:bc:dd: 20:5b:23:90:12:44:1a:58:0f:0e:06:1d:8f:07:fa:7c:0c:02: 1d:0c:bb:ca:97:1d:6c:b6:c6:b3:28:3d:ce:34:cc:aa:d6:ba: 1e:d9:2c:e6:ed:f7:45:12:d6:ad:ba:4c:8e:24:79:96:e4:20: d1:7c:54:e0:ae:9f:77:3d:e6:56:7a:4a:8d:76:1a:ac:27:82: 89:e9:43:b2:2a:af:9c:1f:b1:d1:99:d0:d5:06:e5:99:cc:7c: f0:d9:8e:7a:83:48:c3:eb:36:e5:ff:34:db:50:df:8f:e8:e2: 17:60:ca:e7:49:d5:a1:58:0b:bd:c2:6b:58:d0:f0:d6:ab:1e: 9d:e8:29:fc:42:a7:61:4d:3a:d6:86:39:08:ab:24:ed:c3:b0: 5c:04:eb:b7:1d:9a:23:2b:07:cc:21:34:38:58:1d:3b:ad:34: 4d:25:1c:fd:b1:ff:d1:2a:71:4a:6b:9b:54:29:71:12:af:fe: 83:20:f9:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uM4MPWDCjvomwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NzQ5N2M4OWUtMjBiNy00NmJhLWE0NDYtODAzMzRlNjRlNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAXdWmDOqkGQnXPzzmWZKQj8tfMkq9S/ngon pOGhPAA8OWxso+GRuNHbTvP6c1Je+dBAKUwuNFVI39L+rFkb0F6dMPwYFRhTxAiE Beld9KZkapX2m1gbdRmzhx71oGMeItYJhwJKrXlLPyQENo3frp5OzIoeQ1EZXqS1 aWhwauGQyyHkNRFKg0tBkcTrh30ckMeg21rbUS0O4L72YXDc8wLbjtIzUC4j4ZGi gTz1tUnwaxmcQpFo6kc+Mni29d6fINZbQisrVWtlZssXzuaoECN1K4wLEGKMs/MV zw7KumrrvipmU6X9dHYy8mOUjhQv9ul7G7hb0iP7d34yM5kKuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLz6wAPRmBTyYbtfc1ZvOA6KINkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMTIwOWY5NWMtM2Q3OS0z ZGY5LWFjMzEtZGUwMTkyOGNmMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCK1z0RR7pdFEAEJXcYGWJ4vntOw7r6+3tkxe4m6wc5NBXUZXnJ1U6X sTPXj/c1kZyk+Dh0/tgAk3HnJUwf++1XAnHykEaivN0gWyOQEkQaWA8OBh2PB/p8 DAIdDLvKlx1stsazKD3ONMyq1roe2Szm7fdFEtatukyOJHmW5CDRfFTgrp93PeZW ekqNdhqsJ4KJ6UOyKq+cH7HRmdDVBuWZzHzw2Y56g0jD6zbl/zTbUN+P6OIXYMrn SdWhWAu9wmtY0PDWqx6d6Cn8QqdhTTrWhjkIqyTtw7BcBOu3HZojKwfMITQ4WB07 rTRNJRz9sf/RKnFKa5tUKXESr/6DIPk2 -----END CERTIFICATE-----Generated at Thu Oct 9 05:49:26 2025 by rpki-client