$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/14e9c7bd-0f00-378d-884e-af32c1f0c520.roa File: 14e9c7bd-0f00-378d-884e-af32c1f0c520.roa (raw, json) Hash identifier: lnwdkgyznalohsgGabgEYPrt6L8qMXLKzDdWSAZ8sCE= Subject key identifier: AE:20:B1:2E:B7:88:05:44:05:13:E1:40:D8:94:A9:F2:AF:55:BC:44 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E466AC0DBABB0CED9F00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/14e9c7bd-0f00-378d-884e-af32c1f0c520.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.245.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e4:66:ac:0d:ba:bb:0c:ed:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=a219c6a0-767c-486b-943b-202bed36f9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:48:2e:dd:c7:c8:31:8a:4c:27:2f:fb:58:92: ce:07:64:7e:7e:d7:7b:4a:a6:e9:31:05:86:36:47: 0e:06:ba:cd:ff:58:18:23:61:13:24:a7:97:8c:85: ea:06:8d:b2:e1:5e:fc:d4:95:98:3d:40:2d:46:2b: de:ee:46:d5:a8:78:4c:d9:07:76:e6:d7:55:e6:70: bf:50:9b:78:f3:26:68:1a:2d:f4:51:c9:2a:3a:36: 31:92:c0:37:9c:94:fc:09:10:61:d0:b8:17:0d:1d: 5a:44:bf:91:44:4c:46:cb:0a:7c:be:06:f0:0a:98: df:4a:2d:62:8e:44:4f:bf:37:32:1c:af:d9:1d:a9: 11:a9:37:34:8c:6e:42:6c:35:1a:2c:11:a1:c8:0f: ef:89:a8:4d:20:6a:47:e2:53:75:99:b2:8a:7a:27: f0:9b:7d:8a:60:f8:d9:e7:0b:4c:08:12:7c:bc:a4: 08:d8:05:21:dd:f7:1f:52:2b:48:02:0e:c1:31:6e: d1:85:a0:2a:f5:a7:e4:ee:7d:4e:bd:75:2e:b2:0f: 1f:aa:5a:d0:5e:4f:6a:e8:ee:66:c5:27:7f:de:e6: 52:3f:3b:13:08:ff:6b:53:5a:e7:6e:76:31:1b:f1: bd:c7:dc:48:27:22:6e:ba:8f:22:dd:48:87:7e:c5: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:B1:2E:B7:88:05:44:05:13:E1:40:D8:94:A9:F2:AF:55:BC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/14e9c7bd-0f00-378d-884e-af32c1f0c520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.245.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:17:de:2d:a2:e3:81:49:53:6d:f2:75:d6:d1:56:a3:14:fe: a8:43:9b:cb:b6:68:c0:52:e4:a8:71:73:e8:f3:2c:4c:db:11: 2f:84:1e:8d:a3:82:6d:a0:45:f9:1e:b1:3c:e3:59:41:86:97: 8f:ae:3b:de:20:50:19:ff:c7:4d:83:46:5b:e0:d4:f3:7e:23: 9c:dc:7d:bb:c4:96:fa:45:a7:76:50:18:10:69:ac:c4:1c:c4: 8c:b1:d3:84:eb:56:cb:b3:59:df:5f:9c:f1:82:75:58:c8:23: 07:04:2d:42:4a:20:7b:9b:34:f7:32:86:84:4f:e7:f3:fe:05: e4:b2:93:82:dc:2c:8b:d2:ba:01:2b:ba:41:fb:47:86:aa:6e: dc:c8:24:d7:18:72:34:31:92:de:8a:50:dc:20:36:f5:05:24: d6:d5:42:0d:ff:75:b2:7f:fc:fc:bc:29:c9:57:97:a1:1b:48: 6f:30:93:15:ba:2f:94:f7:30:c2:73:ff:21:58:a1:26:fe:5e: 52:06:ec:8a:07:55:6e:11:05:45:a2:87:b8:ac:13:cb:9e:e6: a8:06:70:91:b3:99:f8:83:92:c2:da:e5:b1:d6:ee:c6:53:9b: 37:78:67:ff:2b:92:13:a4:2f:cd:ac:b0:ad:59:f7:2e:d1:5d: 99:66:18:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uRmrA26uwztnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YTIxOWM2YTAtNzY3Yy00ODZiLTk0M2ItMjAyYmVkMzZmOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkgu3cfIMYpMJy/7WJLOB2R+ftd7SqbpMQWG NkcOBrrN/1gYI2ETJKeXjIXqBo2y4V781JWYPUAtRive7kbVqHhM2Qd25tdV5nC/ UJt48yZoGi30UckqOjYxksA3nJT8CRBh0LgXDR1aRL+RRExGywp8vgbwCpjfSi1i jkRPvzcyHK/ZHakRqTc0jG5CbDUaLBGhyA/viahNIGpH4lN1mbKKeifwm32KYPjZ 5wtMCBJ8vKQI2AUh3fcfUitIAg7BMW7RhaAq9afk7n1OvXUusg8fqlrQXk9q6O5m xSd/3uZSPzsTCP9rU1rnbnYxG/G9x9xIJyJuuo8i3UiHfsVL2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4gsS63iAVEBRPhQNiUqfKvVbxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMTRlOWM3YmQtMGYwMC0z NzhkLTg4NGUtYWYzMmMxZjBjNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj1gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7F94touOBSVNt8nXW0VajFP6oQ5vLtmjAUuSocXPo8yxM2xEvhB6N o4JtoEX5HrE841lBhpePrjveIFAZ/8dNg0Zb4NTzfiOc3H27xJb6Rad2UBgQaazE HMSMsdOE61bLs1nfX5zxgnVYyCMHBC1CSiB7mzT3MoaET+fz/gXkspOC3CyL0roB K7pB+0eGqm7cyCTXGHI0MZLeilDcIDb1BSTW1UIN/3Wyf/z8vCnJV5ehG0hvMJMV ui+U9zDCc/8hWKEm/l5SBuyKB1VuEQVFooe4rBPLnuaoBnCRs5n4g5LC2uWx1u7G U5s3eGf/K5ITpC/NrLCtWfcu0V2ZZhgx -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:12 2025 by rpki-client