$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c0200db-4b19-3713-8b60-cbd9457ebeb6.roa File: 3c0200db-4b19-3713-8b60-cbd9457ebeb6.roa (raw, json) Hash identifier: 2oV7XC15S0eVkUk3Ta/HRNXQv/TJDbCwnDGIL9PXM8k= Subject key identifier: 5F:42:72:CE:71:BF:9F:19:6A:89:5B:CD:6A:80:40:59:FB:6C:08:76 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6EBD2B28829F87CA61E54 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c0200db-4b19-3713-8b60-cbd9457ebeb6.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:eb:d2:b2:88:29:f8:7c:a6:1e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b4d661a2-f7fd-4e06-8806-b7843da479c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:22:31:b0:d5:5c:74:c5:be:0c:e2:8b:43: 28:39:9f:58:aa:0f:60:d3:f0:b1:21:1f:83:a0:b0: c9:e1:4f:14:62:fd:e8:43:98:84:1a:6d:f3:a6:99: 4e:4c:b8:8b:2f:1d:66:f6:5f:0a:26:9f:73:95:04: f1:f5:33:eb:71:58:31:0f:0f:d2:44:37:0d:65:ac: 13:03:dc:85:c7:15:82:f0:ba:9c:26:d3:29:dd:e0: 42:b0:5a:ed:bf:f8:82:fb:bb:bd:b2:9c:9c:dd:be: 0a:81:e8:ed:4f:9f:6b:b6:0a:da:57:a3:9a:9a:20: eb:33:99:75:32:fd:7c:86:50:b8:c2:51:01:35:64: ed:5c:51:55:5d:a9:06:f8:20:82:ad:97:b6:c9:49: 58:a0:aa:64:d0:7a:50:3f:a0:d6:b5:0f:67:c3:55: 4d:8f:a9:ab:0a:e1:d9:07:64:0b:75:9d:99:00:a6: 70:47:78:63:5d:89:8f:6f:0e:b2:e0:2e:87:42:24: a3:e2:f8:53:24:15:d0:37:a9:6a:54:29:6f:00:f3: bf:18:97:15:b3:77:34:21:bd:c6:20:5b:45:b3:c3: 65:cc:ef:b7:15:df:fb:50:0e:70:0c:29:05:e6:6f: 71:23:ab:96:20:6f:42:e6:34:c1:5a:d5:fd:dd:47: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:72:CE:71:BF:9F:19:6A:89:5B:CD:6A:80:40:59:FB:6C:08:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c0200db-4b19-3713-8b60-cbd9457ebeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2b:65:0c:a3:27:90:62:f3:56:ba:c2:ba:cd:6e:f4:7b:65: ac:34:88:65:27:51:97:8e:5e:4e:fb:4f:78:a7:fb:aa:8f:40: 8d:2c:90:be:b0:36:48:05:03:64:1d:f7:9b:c2:e2:f5:27:51: a0:16:bc:0a:31:03:e5:67:bc:79:bb:a8:20:5d:4f:ca:4b:95: e8:a5:43:86:6c:e0:e8:23:e8:6d:a9:ec:5a:d6:17:9d:d6:b5: 9a:4d:aa:c7:b7:ad:a5:dd:4b:51:d7:c9:d8:83:ef:4c:3f:fc: ac:8c:fc:8c:06:3d:39:d7:6d:78:ea:01:19:26:d6:af:e9:0f: 27:8c:ea:71:1c:d3:53:6a:9b:1b:63:8f:4d:c5:17:03:e9:3a: d9:28:fa:14:b4:9b:be:ba:6c:34:99:46:0b:5e:3d:50:1a:02: b3:2d:22:cc:77:b3:54:0c:2e:fc:e7:c3:73:bf:e4:4f:b4:46: 97:b2:46:8b:9b:f8:66:bc:7a:ff:14:6a:37:4b:e8:d4:c3:20: a6:dd:05:2d:33:7c:47:4e:73:45:f7:ea:75:6f:ab:1a:b2:4a: 2b:25:75:4a:4d:eb:e4:a2:1c:40:4a:dd:60:e7:c5:2a:f2:9f: bf:d6:d8:1a:40:16:9f:bf:93:b5:4b:1c:76:25:1c:13:7d:6f: 6d:1a:e4:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1uvSsogp+HymHlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjRkNjYxYTItZjdmZC00ZTA2LTg4MDYtYjc4NDNkYTQ3OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNEiMbDVXHTFvgzii0MoOZ9Yqg9g0/CxIR+D oLDJ4U8UYv3oQ5iEGm3zpplOTLiLLx1m9l8KJp9zlQTx9TPrcVgxDw/SRDcNZawT A9yFxxWC8LqcJtMp3eBCsFrtv/iC+7u9spyc3b4KgejtT59rtgraV6OamiDrM5l1 Mv18hlC4wlEBNWTtXFFVXakG+CCCrZe2yUlYoKpk0HpQP6DWtQ9nw1VNj6mrCuHZ B2QLdZ2ZAKZwR3hjXYmPbw6y4C6HQiSj4vhTJBXQN6lqVClvAPO/GJcVs3c0Ib3G IFtFs8NlzO+3Fd/7UA5wDCkF5m9xI6uWIG9C5jTBWtX93UcfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9Ccs5xv58ZaolbzWqAQFn7bAh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvM2MwMjAwZGItNGIxOS0z NzEzLThiNjAtY2JkOTQ1N2ViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUrZQyjJ5Bi81a6wrrNbvR7Zaw0iGUnUZeOXk77T3in+6qPQI0skL6w NkgFA2Qd95vC4vUnUaAWvAoxA+VnvHm7qCBdT8pLleilQ4Zs4Ogj6G2p7FrWF53W tZpNqse3raXdS1HXydiD70w//KyM/IwGPTnXbXjqARkm1q/pDyeM6nEc01Nqmxtj j03FFwPpOtko+hS0m766bDSZRgtePVAaArMtIsx3s1QMLvznw3O/5E+0RpeyRoub +Ga8ev8UajdL6NTDIKbdBS0zfEdOc0X36nVvqxqySisldUpN6+SiHEBK3WDnxSry n7/W2BpAFp+/k7VLHHYlHBN9b20a5G4= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:20 2025 by rpki-client