$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bcf4b5a6-a1cb-36a1-99f9-13ea57920ad2.roa File: bcf4b5a6-a1cb-36a1-99f9-13ea57920ad2.roa (raw, json) Hash identifier: zY3HwuSl5NsW/0VGYRl61k1hLdOcFDuvtGejJzhe6mo= Subject key identifier: 9F:34:BC:A2:87:D8:5E:77:82:14:78:59:F8:E1:44:EF:44:A0:5F:6E Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6F295A3AF27C8AF3F6740 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bcf4b5a6-a1cb-36a1-99f9-13ea57920ad2.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:f2:95:a3:af:27:c8:af:3f:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=eab46074-f5c4-4fc3-8748-f46e4e3d0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:11:6a:80:02:18:ef:5d:9c:10:98:bf:4a: 1d:db:0a:01:f3:26:db:25:44:39:16:cb:50:d1:44: fd:4e:b9:17:a0:12:13:68:c9:03:7c:e6:4e:6c:c9: 57:41:a2:4a:fa:d6:53:85:33:fb:00:61:bf:49:da: 36:8a:2c:8f:37:b4:26:b0:73:c3:3e:ee:1e:47:6e: b5:7c:f7:83:8d:5f:dc:ea:12:22:68:a4:e8:d3:9e: f4:91:6a:c2:36:63:ff:00:1a:97:15:38:ca:53:ad: 8f:00:0e:26:45:c5:02:f3:e6:c9:1e:ae:0b:25:8a: c7:77:c2:fb:4b:ad:5d:78:22:f8:d9:67:06:fe:39: 34:3c:4d:ba:e0:8d:4e:1a:ff:d6:2c:f1:b1:8f:4c: 72:11:fe:ca:00:2e:5c:f3:c7:06:a1:04:57:7b:37: 05:be:0a:8a:db:44:0c:5d:d6:f7:67:02:3a:fa:2a: f3:cf:df:da:52:4a:13:ec:76:f9:57:32:6f:7c:b2: f2:93:38:6c:97:d2:43:07:78:e4:b6:74:71:9b:34: 17:c0:16:0a:b6:5a:b9:44:38:40:bb:26:41:1b:74: ce:7e:b4:f9:01:5b:48:2a:47:e3:5b:67:57:c3:2c: 01:20:5e:be:07:92:f2:be:bb:29:42:22:01:71:e8: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:BC:A2:87:D8:5E:77:82:14:78:59:F8:E1:44:EF:44:A0:5F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bcf4b5a6-a1cb-36a1-99f9-13ea57920ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fa:a2:a6:c1:e3:b7:d8:47:55:44:bd:93:1d:af:fb:e0:e7: 6c:e7:35:2b:ce:21:47:a1:a9:0a:62:06:8d:4e:ea:55:87:ac: 36:e7:02:1a:f8:c2:59:18:3c:6a:b7:35:7c:e5:5d:86:dd:99: a4:6d:b3:f7:c9:1b:fc:f7:ed:f4:97:ba:ed:72:39:4c:b8:0c: ff:1f:6c:80:9b:c6:5b:07:c0:af:84:f1:5b:8e:1b:58:5c:46: 76:88:c8:77:ed:44:27:c0:73:78:eb:2e:81:b1:5d:ea:74:3c: 41:0d:ae:39:bb:5e:b5:82:29:6c:43:e4:a7:b0:4e:ed:48:56: f5:47:0a:c3:dc:e7:03:1e:02:89:97:5e:11:71:5c:bf:d2:50: 42:3e:68:1f:eb:55:a5:f4:9d:91:b7:5f:5f:54:30:93:62:b8: 21:7e:42:fc:0e:82:f2:3f:3e:b2:55:37:1e:c1:9d:c2:b6:dd: a8:f8:bd:a4:55:de:c9:84:28:09:13:a1:72:60:1f:a5:49:98: 28:c3:8d:9d:79:ea:18:ff:eb:61:6c:45:a5:c7:86:3f:fa:74: 86:11:b3:23:c1:82:94:c2:81:d2:e9:62:30:84:f4:5e:04:71: 54:66:d2:9c:ea:e4:14:f0:cc:32:76:b6:59:90:be:06:70:db: de:1a:84:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vKVo68nyK8/Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZWFiNDYwNzQtZjVjNC00ZmMzLTg3NDgtZjQ2ZTRlM2QwZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY4RaoACGO9dnBCYv0od2woB8ybbJUQ5FstQ 0UT9TrkXoBITaMkDfOZObMlXQaJK+tZThTP7AGG/Sdo2iiyPN7QmsHPDPu4eR261 fPeDjV/c6hIiaKTo0570kWrCNmP/ABqXFTjKU62PAA4mRcUC8+bJHq4LJYrHd8L7 S61deCL42WcG/jk0PE264I1OGv/WLPGxj0xyEf7KAC5c88cGoQRXezcFvgqK20QM Xdb3ZwI6+irzz9/aUkoT7Hb5VzJvfLLykzhsl9JDB3jktnRxmzQXwBYKtlq5RDhA uyZBG3TOfrT5AVtIKkfjW2dXwywBIF6+B5LyvrspQiIBcehCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ80vKKH2F53ghR4WfjhRO9EoF9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmNmNGI1YTYtYTFjYi0z NmExLTk5ZjktMTNlYTU3OTIwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/6oqbB47fYR1VEvZMdr/vg52znNSvOIUehqQpiBo1O6lWHrDbnAhr4 wlkYPGq3NXzlXYbdmaRts/fJG/z37fSXuu1yOUy4DP8fbICbxlsHwK+E8VuOG1hc RnaIyHftRCfAc3jrLoGxXep0PEENrjm7XrWCKWxD5KewTu1IVvVHCsPc5wMeAomX XhFxXL/SUEI+aB/rVaX0nZG3X19UMJNiuCF+QvwOgvI/PrJVNx7BncK23aj4vaRV 3smEKAkToXJgH6VJmCjDjZ156hj/62FsRaXHhj/6dIYRsyPBgpTCgdLpYjCE9F4E cVRm0pzq5BTwzDJ2tlmQvgZw294ahK8= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:28 2025 by rpki-client