$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/552ebb15-d7c5-3845-869e-82fed9d5e0a2.roa File: 552ebb15-d7c5-3845-869e-82fed9d5e0a2.roa (raw, json) Hash identifier: 8haDzWHMDCsP9B+NuB/t7aBTnaQls0m+KEFlF0Fg0yw= Subject key identifier: 9A:38:1D:82:A8:EF:E5:94:FF:4F:E1:39:18:34:8C:DA:1B:15:0D:3B Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6DA8B273EE3A3DEB86558 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/552ebb15-d7c5-3845-869e-82fed9d5e0a2.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.210.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:da:8b:27:3e:e3:a3:de:b8:65:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=6b035540-f616-4118-8f50-1ad4b9c3fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:57:84:49:d7:b0:70:31:94:ef:36:72:ff: 88:29:83:bc:16:04:dc:42:8d:61:57:c6:50:03:80: 7c:a1:fb:d1:87:a4:f1:f5:5d:4b:d8:fe:20:ba:cf: 7f:d2:29:bb:0e:e5:43:42:fc:6b:3a:45:21:c3:58: f3:53:c8:3e:16:a5:90:14:8b:bc:1d:27:67:5d:4e: 04:6d:31:e7:79:e0:3b:36:6a:a9:1d:e6:7f:c2:a6: 82:d3:d8:dc:97:1a:64:fd:01:1d:db:61:d9:f7:d9: c1:c9:53:69:3c:2c:b2:03:7f:89:0c:e7:d3:1a:67: bf:e0:b2:ed:ab:82:6d:79:b8:22:cd:7d:b4:55:5f: 77:07:9d:6b:77:ae:80:da:63:37:b5:84:cb:af:56: 91:c7:30:53:2f:ae:ae:17:86:7e:8c:9c:6d:5d:e5: e9:bc:b8:4d:16:17:d5:89:0a:1f:47:6b:2a:c1:a1: 86:69:f8:a9:92:5c:94:d8:3c:92:5f:b5:d1:a2:86: 19:80:92:ac:32:56:a2:e0:86:6d:e2:4c:bb:2b:7f: 33:47:05:b6:35:db:d6:fd:4a:dc:d2:54:25:7c:6d: 0a:1c:33:ff:0c:e9:a5:a9:65:fa:df:c6:cc:bd:4e: 96:00:6c:24:1f:6b:24:f1:ae:e8:d8:d3:1d:e5:34: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:38:1D:82:A8:EF:E5:94:FF:4F:E1:39:18:34:8C:DA:1B:15:0D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/552ebb15-d7c5-3845-869e-82fed9d5e0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.210.240/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:eb:0c:c4:f5:46:ad:f5:8d:63:69:cd:59:81:aa:8c:25:1c: dd:92:00:d9:87:1e:a1:8f:40:69:5e:9c:b6:5f:d9:14:4c:43: 99:e4:27:99:66:f4:20:47:4a:b7:78:52:90:08:8a:24:cb:1d: 5d:ba:f6:4b:65:72:8c:93:ca:42:fd:c8:d7:51:59:89:21:b4: f1:95:1d:aa:88:6f:57:ea:b2:44:72:72:ac:b7:f3:9b:86:a0: 55:5e:b0:03:de:7b:ec:49:e5:5f:cb:52:4e:97:56:a1:6d:24: 1f:e0:2a:ff:4f:0d:75:7b:af:b7:7d:80:40:01:1f:e3:eb:bb: 73:33:31:ac:da:15:d4:e8:a3:06:db:ed:48:28:fe:49:ce:67: fb:09:4c:ea:b7:b8:86:cf:6e:fb:95:0c:85:fa:00:70:19:fe: 7a:49:01:92:43:6e:55:8d:c7:de:24:bd:5e:c1:f2:9c:a7:17: d6:30:6b:9c:e5:2e:f1:dc:07:52:b1:72:b6:b0:b3:3d:42:8c: b2:c7:49:11:1f:f1:1d:d3:a2:39:75:da:ed:ac:59:df:75:b0: 96:0d:87:fc:34:e0:1f:7d:5e:14:ea:4c:f6:9e:14:55:ca:22: 72:1a:5e:45:58:55:90:33:41:c2:48:77:cb:14:cb:54:29:d0: c3:d2:28:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tqLJz7jo964ZVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NmIwMzU1NDAtZjYxNi00MTE4LThmNTAtMWFkNGI5YzNmYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq9XhEnXsHAxlO82cv+IKYO8FgTcQo1hV8ZQ A4B8ofvRh6Tx9V1L2P4gus9/0im7DuVDQvxrOkUhw1jzU8g+FqWQFIu8HSdnXU4E bTHneeA7NmqpHeZ/wqaC09jclxpk/QEd22HZ99nByVNpPCyyA3+JDOfTGme/4LLt q4JtebgizX20VV93B51rd66A2mM3tYTLr1aRxzBTL66uF4Z+jJxtXeXpvLhNFhfV iQofR2sqwaGGafipklyU2DySX7XRooYZgJKsMlai4IZt4ky7K38zRwW2NdvW/Urc 0lQlfG0KHDP/DOmlqWX638bMvU6WAGwkH2sk8a7o2NMd5TTLoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJo4HYKo7+WU/0/hORg0jNobFQ07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTUyZWJiMTUtZDdjNS0z ODQ1LTg2OWUtODJmZWQ5ZDVlMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjS8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCy6wzE9Uat9Y1jac1ZgaqMJRzdkgDZhx6hj0BpXpy2X9kUTEOZ5CeZ ZvQgR0q3eFKQCIokyx1duvZLZXKMk8pC/cjXUVmJIbTxlR2qiG9X6rJEcnKst/Ob hqBVXrAD3nvsSeVfy1JOl1ahbSQf4Cr/Tw11e6+3fYBAAR/j67tzMzGs2hXU6KMG 2+1IKP5Jzmf7CUzqt7iGz277lQyF+gBwGf56SQGSQ25VjcfeJL1ewfKcpxfWMGuc 5S7x3AdSsXK2sLM9Qoyyx0kRH/Ed06I5ddrtrFnfdbCWDYf8NOAffV4U6kz2nhRV yiJyGl5FWFWQM0HCSHfLFMtUKdDD0iiw -----END CERTIFICATE-----Generated at Thu Oct 9 05:49:25 2025 by rpki-client