$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa File: db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa (raw, json) Hash identifier: 3pY8+wc/sbkMZUg695tEATlMUXloPoD5nGDhqYFPp0s= Subject key identifier: 1A:67:F7:4D:17:86:93:9B:F1:37:1C:18:5B:E3:6C:97:13:8A:45:4E Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6DA3E2E27920E22CEC770 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.210.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:da:3e:2e:27:92:0e:22:ce:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=df7db35c-055b-4791-b67c-395374c1f390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:b2:2b:8e:c0:a3:3f:1e:7c:b5:fe:08:d4: 91:57:2d:58:25:c6:5b:f6:ae:3d:82:9e:06:36:d9: c7:77:2f:ae:19:3e:ae:14:a2:9e:d2:d4:98:72:e1: d8:93:9e:bf:22:f3:52:7e:3e:ab:69:c4:a0:de:59: e4:d2:f6:f1:f6:2d:28:ec:5a:80:98:c3:ab:ab:0b: 9c:cf:42:41:dc:1e:f7:a4:ec:4d:f0:c5:5c:b8:b2: a5:6f:63:8a:45:8a:fb:f8:d3:9f:3e:9f:0f:a5:7b: b8:4b:4a:a5:52:b4:f0:a1:9a:42:c5:19:26:b0:de: 96:02:b9:c9:6a:be:44:90:65:09:ea:11:dc:a9:c7: 8d:86:90:c4:88:dd:d4:08:fc:0b:02:95:8b:4e:c1: b7:ad:75:01:61:43:1d:cf:d4:63:f7:7b:93:07:34: 9d:ce:f5:d7:76:c7:f1:ab:81:3c:56:a7:6f:48:38: 98:8d:fe:02:e9:db:68:cd:db:7a:4e:ac:c2:23:5e: ee:37:64:42:bb:8d:fb:bc:c9:27:6e:20:1d:7f:34: 68:76:a7:e7:ee:cc:4a:9e:8b:41:ff:f7:2b:a5:62: 7e:0c:34:ea:72:30:47:22:28:e0:ab:69:eb:d4:c6: 2c:b1:de:14:2b:44:65:57:1d:4d:fb:fb:a6:58:32: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:67:F7:4D:17:86:93:9B:F1:37:1C:18:5B:E3:6C:97:13:8A:45:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.210.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:1b:76:6d:31:d5:c8:ee:dd:e8:99:99:45:ae:cf:b6:66:dd: f9:b7:e5:57:24:34:4c:d2:10:76:04:ba:7a:0d:99:24:26:cc: 2c:98:0b:ab:78:74:59:57:1c:ae:78:25:ca:f0:3d:31:84:f0: 00:6e:c8:8f:b8:2e:3d:71:ac:60:91:3e:a2:7f:d2:92:7c:0c: 83:3e:cc:fc:77:f1:f6:6a:42:44:a0:e3:59:c9:ab:f3:3a:46: fe:5b:8c:be:5c:25:ae:12:96:34:bb:21:a2:da:8f:af:eb:a4: cc:04:77:7b:35:b0:2d:50:47:4b:a5:51:51:b6:75:f4:b8:6c: 61:05:57:8a:95:8d:d7:2e:be:fb:48:28:34:5c:9a:b3:11:96: ee:2c:b7:11:4a:37:aa:2f:d9:87:b9:f9:42:8f:8d:58:46:e0: ae:81:48:f4:c3:1e:1d:02:c8:92:6a:3f:ae:c2:fb:3b:e4:de: b6:c6:79:aa:f7:ff:7c:ba:d6:41:46:8f:a9:c5:8e:c2:c6:74: 62:c3:6c:e1:4a:9c:b4:64:0f:4c:a3:60:3f:00:42:c2:e9:d6: 52:f0:56:2d:d4:16:13:8e:27:e9:c8:51:81:30:07:2f:90:45: 0d:91:42:c8:4b:57:d3:5f:53:45:ea:e2:2f:20:9f:67:7b:04: 88:6a:72:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1to+LieSDiLOx3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZGY3ZGIzNWMtMDU1Yi00NzkxLWI2N2MtMzk1Mzc0YzFmMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlOyK47Aoz8efLX+CNSRVy1YJcZb9q49gp4G NtnHdy+uGT6uFKKe0tSYcuHYk56/IvNSfj6racSg3lnk0vbx9i0o7FqAmMOrqwuc z0JB3B73pOxN8MVcuLKlb2OKRYr7+NOfPp8PpXu4S0qlUrTwoZpCxRkmsN6WArnJ ar5EkGUJ6hHcqceNhpDEiN3UCPwLApWLTsG3rXUBYUMdz9Rj93uTBzSdzvXXdsfx q4E8VqdvSDiYjf4C6dtozdt6TqzCI17uN2RCu437vMknbiAdfzRodqfn7sxKnotB //crpWJ+DDTqcjBHIijgq2nr1MYssd4UK0RlVx1N+/umWDLnOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBpn900XhpOb8TccGFvjbJcTikVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGIwZmJlZmQtOTdmNS0z MWY2LWJkMGUtYmUxZDhkZDI0YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjSIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC5G3ZtMdXI7t3omZlFrs+2Zt35t+VXJDRM0hB2BLp6DZkkJswsmAur eHRZVxyueCXK8D0xhPAAbsiPuC49caxgkT6if9KSfAyDPsz8d/H2akJEoONZyavz Okb+W4y+XCWuEpY0uyGi2o+v66TMBHd7NbAtUEdLpVFRtnX0uGxhBVeKlY3XLr77 SCg0XJqzEZbuLLcRSjeqL9mHuflCj41YRuCugUj0wx4dAsiSaj+uwvs75N62xnmq 9/98utZBRo+pxY7CxnRiw2zhSpy0ZA9Mo2A/AELC6dZS8FYt1BYTjifpyFGBMAcv kEUNkULIS1fTX1NF6uIvIJ9newSIanJy -----END CERTIFICATE-----Generated at Thu Oct 9 05:44:26 2025 by rpki-client