$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf230cef-d70c-3309-b88f-7471495b44e6.roa File: cf230cef-d70c-3309-b88f-7471495b44e6.roa (raw, json) Hash identifier: aFY4Ridej/VshnNTtvD4eZgERAzvJZlL1Pgm1KEO3iQ= Subject key identifier: C4:6E:70:00:C5:3F:13:DD:BA:A2:AB:E0:38:B2:0F:BD:07:3F:2A:AA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E8BB3AD9E4E847CF0EA0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf230cef-d70c-3309-b88f-7471495b44e6.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e8:bb:3a:d9:e4:e8:47:cf:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c50fca03-88e6-49f3-8ed4-4fa0776bf695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:f0:21:47:24:d4:34:50:ef:d4:6a:87:ee: 81:56:62:02:f4:09:d4:38:7b:de:2d:f7:38:b2:b5: 81:dd:57:e6:91:08:56:c0:f8:d6:f1:9b:57:f0:9f: b2:57:ce:d4:da:a5:be:39:81:0b:18:c8:3e:10:95: d4:35:ed:79:9d:32:06:4b:71:72:21:2b:fe:7d:36: 29:96:7e:ef:44:b4:0a:02:29:81:e4:b8:b3:6c:79: a3:73:4e:41:9f:0c:fe:b8:74:91:5e:8d:ea:57:76: e8:b2:a0:39:e8:28:10:16:df:cd:2d:9f:ed:a6:2c: 4b:09:4b:c0:21:1b:ec:02:61:01:58:60:47:8b:4d: f4:01:00:1d:62:6a:8a:d5:30:4d:b6:54:b9:31:b6: 9d:96:e3:78:94:23:41:ad:93:26:0b:7a:e0:5c:36: ad:60:66:7b:8b:e7:8f:6e:ea:09:b0:c4:b2:fa:02: 6b:dd:f3:1d:a4:ab:dd:af:5e:2d:b1:92:ef:d1:96: f9:6f:db:8c:b9:35:c0:d6:bc:ce:6a:bc:55:74:57: d6:59:3c:dd:55:c7:e0:0e:90:ca:ed:23:68:ef:0b: 82:03:b6:3a:d5:9f:a4:5d:62:67:0a:1f:da:a5:61: d9:7c:15:e8:94:4e:6c:23:82:a1:34:49:f0:a8:73: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6E:70:00:C5:3F:13:DD:BA:A2:AB:E0:38:B2:0F:BD:07:3F:2A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf230cef-d70c-3309-b88f-7471495b44e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ca:45:9f:c2:5a:b3:f8:b4:8c:dc:5c:46:b7:cc:c9:45:a6: 3c:ee:21:b0:0a:ed:61:35:2b:35:d4:0c:a1:34:0f:49:25:4f: d0:f8:c4:66:35:bc:81:72:8d:e8:52:1c:ba:ed:1d:18:65:e3: 2e:db:7d:ed:e8:22:57:b5:bc:39:56:79:f9:20:c0:da:9b:9e: 63:10:a5:e3:64:70:52:ca:85:0d:68:98:60:92:8d:5b:10:f9: 33:80:76:ab:67:97:6f:3a:54:91:99:c5:db:c7:e4:70:ab:ea: 27:46:4f:a0:34:66:bb:53:80:24:77:f5:83:99:61:b4:a1:03: 38:d2:c8:dd:4f:86:3d:0b:3c:bf:9b:43:80:e6:fc:98:57:61: ce:1a:57:c9:2d:20:80:dd:d0:f1:a5:92:62:bb:e8:99:5c:19: f4:ac:75:06:92:20:7f:77:2e:9b:78:a3:b5:18:a0:b0:5f:85: bf:98:c5:bc:77:84:5d:82:a9:f4:2f:62:2b:10:2c:16:c0:6d: 96:26:4a:ad:28:d6:19:a2:99:5b:7d:48:06:d4:7d:7e:a2:dc: 4f:d1:eb:1e:15:1f:d8:92:93:1a:fb:60:4d:cd:ec:11:d4:8b: 1b:72:83:b1:8a:7f:4e:0a:91:e0:3e:1c:61:27:e2:53:9c:bb: 2a:68:e2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1ui7Otnk6EfPDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzUwZmNhMDMtODhlNi00OWYzLThlZDQtNGZhMDc3NmJmNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglDwIUck1DRQ79Rqh+6BVmIC9AnUOHveLfc4 srWB3VfmkQhWwPjW8ZtX8J+yV87U2qW+OYELGMg+EJXUNe15nTIGS3FyISv+fTYp ln7vRLQKAimB5LizbHmjc05Bnwz+uHSRXo3qV3bosqA56CgQFt/NLZ/tpixLCUvA IRvsAmEBWGBHi030AQAdYmqK1TBNtlS5MbadluN4lCNBrZMmC3rgXDatYGZ7i+eP buoJsMSy+gJr3fMdpKvdr14tsZLv0Zb5b9uMuTXA1rzOarxVdFfWWTzdVcfgDpDK 7SNo7wuCA7Y61Z+kXWJnCh/apWHZfBXolE5sI4KhNEnwqHPwWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRucADFPxPduqKr4DiyD70HPyqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2YyMzBjZWYtZDcwYy0z MzA5LWI4OGYtNzQ3MTQ5NWI0NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETKRZ/CWrP4tIzcXEa3zMlFpjzuIbAK7WE1KzXUDKE0D0klT9D4xGY1 vIFyjehSHLrtHRhl4y7bfe3oIle1vDlWefkgwNqbnmMQpeNkcFLKhQ1omGCSjVsQ +TOAdqtnl286VJGZxdvH5HCr6idGT6A0ZrtTgCR39YOZYbShAzjSyN1Phj0LPL+b Q4Dm/JhXYc4aV8ktIIDd0PGlkmK76JlcGfSsdQaSIH93Lpt4o7UYoLBfhb+Yxbx3 hF2CqfQvYisQLBbAbZYmSq0o1hmimVt9SAbUfX6i3E/R6x4VH9iSkxr7YE3N7BHU ixtyg7GKf04KkeA+HGEn4lOcuypo4lw= -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:09 2025 by rpki-client