$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9616b06c-2860-3568-af7e-0742ea2fc500.roa File: 9616b06c-2860-3568-af7e-0742ea2fc500.roa (raw, json) Hash identifier: tPPPnwRn34fI8KBHAdiIzS1F1TakXOlAca1JWBDXxug= Subject key identifier: 7C:C1:66:B2:8A:54:46:5D:5C:9A:71:CF:28:DB:6C:C4:6E:BF:B7:12 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E4FDEE3D968058E4F400 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9616b06c-2860-3568-af7e-0742ea2fc500.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.251.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e4:fd:ee:3d:96:80:58:e4:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=ac583f4f-1d7d-49c9-817d-661a79a05319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:fd:a7:6c:6b:7e:b0:a0:97:92:9d:e2:8d: fd:e5:48:b0:38:34:a2:56:9f:cc:09:f5:53:08:01: d6:8f:22:77:fb:06:d2:29:08:4b:92:e2:99:10:68: 42:e8:2a:c8:75:12:44:c9:25:ae:ea:5d:33:3e:9d: 99:dd:3b:0c:9e:41:ab:1f:ba:bc:92:2f:ab:d2:7d: 7c:95:46:62:88:da:67:e0:fa:95:ea:01:b8:8d:c4: 2c:90:f0:a7:7e:b3:28:b5:55:12:f8:43:92:af:41: 0d:06:ba:4f:15:76:24:9f:9c:8e:5f:39:91:c2:cf: 2e:72:4e:a3:8d:bd:40:1e:1e:d9:11:7d:08:5a:6b: b6:a6:f3:c0:ba:3e:ef:a1:19:ef:48:19:7e:65:21: 8e:eb:58:ab:42:0a:69:96:d9:7a:db:25:62:94:9d: 66:df:fb:ce:66:d9:1e:e7:5e:b7:6d:43:fc:af:c4: 46:c9:70:67:96:ac:d4:42:bf:e5:cf:fa:ec:5a:87: c1:32:ad:e5:e8:09:78:d5:a0:13:03:5b:e2:4a:79: de:0b:da:66:ee:59:d3:71:af:eb:76:9d:0a:b2:1c: f5:42:a0:26:20:7a:42:98:44:3f:be:da:0d:bb:5a: 6a:a5:67:64:bf:42:f2:a2:55:c7:06:5e:e2:2e:c6: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:66:B2:8A:54:46:5D:5C:9A:71:CF:28:DB:6C:C4:6E:BF:B7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9616b06c-2860-3568-af7e-0742ea2fc500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.251.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a2:34:b7:52:b7:7f:7f:22:41:ee:57:56:cf:09:5e:5f:2f: d6:32:a7:e2:29:38:04:37:19:2f:6b:96:93:a9:6a:69:91:04: 0c:92:d2:fe:2f:76:26:e0:b0:54:0f:3b:ac:b2:bc:52:75:20: e5:73:b0:e5:9e:75:87:12:0c:cd:f0:c2:3f:74:5a:72:a0:72: 85:f3:21:05:e9:bb:dd:09:d7:7d:02:c8:17:f5:da:84:01:b7: 09:6a:23:fb:81:7e:fb:3a:f7:77:2a:d5:07:df:1c:86:23:07: 48:3e:99:b6:9c:4d:b9:71:aa:66:d2:19:b7:51:af:b5:bf:52: e5:ed:8f:27:36:91:0d:44:c2:dc:90:1e:b6:7d:c6:95:88:8d: ab:ce:7f:ec:84:3f:1d:95:60:28:c2:38:4e:57:2d:57:7e:8e: 83:70:b0:59:b8:65:5a:54:18:49:7c:55:6a:6b:6a:bf:f1:4a: c8:1b:39:79:25:ee:98:d3:34:51:09:44:f0:d1:9e:05:f5:5d: 85:de:37:38:43:6a:b3:23:7f:24:39:2f:88:5c:b0:cc:69:3b: d2:4a:12:2a:ce:09:18:97:22:ab:c6:8c:cd:47:12:91:bc:90: 54:9c:70:ca:4d:33:ea:5a:10:fd:2d:2d:ec:89:eb:20:e6:30: 09:10:74:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uT97j2WgFjk9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWM1ODNmNGYtMWQ3ZC00OWM5LTgxN2QtNjYxYTc5YTA1MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNz9p2xrfrCgl5Kd4o395UiwODSiVp/MCfVT CAHWjyJ3+wbSKQhLkuKZEGhC6CrIdRJEySWu6l0zPp2Z3TsMnkGrH7q8ki+r0n18 lUZiiNpn4PqV6gG4jcQskPCnfrMotVUS+EOSr0ENBrpPFXYkn5yOXzmRws8uck6j jb1AHh7ZEX0IWmu2pvPAuj7voRnvSBl+ZSGO61irQgppltl62yVilJ1m3/vOZtke 5163bUP8r8RGyXBnlqzUQr/lz/rsWofBMq3l6Al41aATA1viSnneC9pm7lnTca/r dp0Kshz1QqAmIHpCmEQ/vtoNu1pqpWdkv0LyolXHBl7iLsaunwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHzBZrKKVEZdXJpxzyjbbMRuv7cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOTYxNmIwNmMtMjg2MC0z NTY4LWFmN2UtMDc0MmVhMmZjNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCeojS3Urd/fyJB7ldWzwleXy/WMqfiKTgENxkva5aTqWppkQQMktL+ L3Ym4LBUDzussrxSdSDlc7DlnnWHEgzN8MI/dFpyoHKF8yEF6bvdCdd9AsgX9dqE AbcJaiP7gX77Ovd3KtUH3xyGIwdIPpm2nE25capm0hm3Ua+1v1Ll7Y8nNpENRMLc kB62fcaViI2rzn/shD8dlWAowjhOVy1Xfo6DcLBZuGVaVBhJfFVqa2q/8UrIGzl5 Je6Y0zRRCUTw0Z4F9V2F3jc4Q2qzI38kOS+IXLDMaTvSShIqzgkYlyKrxozNRxKR vJBUnHDKTTPqWhD9LS3siesg5jAJEHRe -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:59 2025 by rpki-client