$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f73d9ecc-395a-370c-8de4-75d29311ae3f.roa File: f73d9ecc-395a-370c-8de4-75d29311ae3f.roa (raw, json) Hash identifier: n54h+6i1sdvPca8fclSte62fj34i/eGYNn6+Gt/q71s= Subject key identifier: 44:9C:10:85:E0:C8:6E:0B:26:1D:1A:0C:7F:65:1C:2D:87:F5:11:7F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6DAE1641CCE40AA69E200 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f73d9ecc-395a-370c-8de4-75d29311ae3f.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.214.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:da:e1:64:1c:ce:40:aa:69:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e8341eba-7cc0-4137-8d0f-7727a19b43cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:4a:f4:ac:13:c2:ce:5e:88:50:cd:6f:3f: b2:f8:d8:c7:d6:f4:32:78:98:ed:c7:48:44:66:da: 37:01:f2:52:23:54:f8:3e:ea:07:8c:44:a6:92:a9: 42:00:cb:69:e2:cd:db:d9:1a:7d:44:30:80:af:4e: 1a:1e:e5:4a:f6:ea:3d:66:71:ef:8e:22:95:11:07: 44:c9:74:6b:fd:be:9b:52:75:03:21:f7:20:78:d2: 65:75:e1:72:bd:2d:d0:d6:ca:0e:7b:f4:55:15:18: c3:62:6d:23:fd:df:2e:c5:84:af:65:2b:68:4d:8e: 92:bb:92:f1:9b:14:0b:3b:b4:e2:fb:bd:94:5c:48: f4:b5:18:53:83:27:ed:dd:4e:b8:6d:4d:60:da:2f: f7:c0:d8:6d:20:59:b2:04:c1:13:ab:d1:fa:1b:d9: bd:6a:2b:89:0c:13:45:e8:cd:38:90:54:17:2a:47: 2e:64:b1:7a:3e:0f:70:24:85:73:1d:d5:d9:a3:58: 79:34:4d:73:07:53:0f:ea:92:34:09:ae:79:10:98: 11:5e:46:78:23:42:6c:ff:11:a2:7a:8c:49:a8:92: 1c:d2:24:32:95:69:b2:44:f5:5d:29:71:f2:87:84: 79:8c:fe:de:74:33:0f:1a:1a:f6:24:dc:32:3e:ea: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:10:85:E0:C8:6E:0B:26:1D:1A:0C:7F:65:1C:2D:87:F5:11:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f73d9ecc-395a-370c-8de4-75d29311ae3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.214.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a4:8e:ee:5b:6c:d9:ab:de:45:16:1a:93:a0:54:cc:10:23: a3:d0:db:5d:a0:c1:b2:62:1d:06:3c:da:fc:46:56:c1:c8:0f: 70:c8:f9:ee:ee:5f:55:74:c2:17:71:66:fe:75:6d:4b:6f:b2: f5:d1:fa:f5:de:98:1a:bc:95:a4:4c:06:eb:5e:80:83:ce:62: 2a:81:dd:8c:4f:fc:25:dc:8b:1c:4a:b2:da:c0:8e:6c:e9:5f: 8c:d7:8c:8e:82:d5:e5:97:56:31:e8:9f:e6:b6:12:1d:0a:fe: 83:7c:55:24:04:26:1d:f2:7c:98:23:c0:ce:a1:a8:77:06:76: 85:fb:a5:6a:6a:a9:2d:79:e6:34:72:8c:fc:81:9f:41:22:b1: 9e:11:0b:05:fa:19:aa:63:24:0c:79:0a:53:4d:12:8e:73:e9: 96:3d:d3:75:b8:ee:99:16:a8:cd:d1:c6:80:09:70:5c:87:03: 03:99:c3:51:d1:c1:9a:d3:21:9a:29:9a:73:b4:63:ba:38:a1: af:5e:0d:a0:69:3b:25:e2:22:03:d8:c3:87:3c:66:80:e7:7f: 8d:fa:db:e7:00:09:9e:32:a5:2f:00:fa:e6:bf:a7:7f:d7:6a: d6:ac:19:83:cb:a1:00:69:4d:72:6a:9d:34:2f:73:8b:1a:d6: 47:23:f3:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1trhZBzOQKpp4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTgzNDFlYmEtN2NjMC00MTM3LThkMGYtNzcyN2ExOWI0M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgatK9KwTws5eiFDNbz+y+NjH1vQyeJjtx0hE Zto3AfJSI1T4PuoHjESmkqlCAMtp4s3b2Rp9RDCAr04aHuVK9uo9ZnHvjiKVEQdE yXRr/b6bUnUDIfcgeNJldeFyvS3Q1soOe/RVFRjDYm0j/d8uxYSvZStoTY6Su5Lx mxQLO7Ti+72UXEj0tRhTgyft3U64bU1g2i/3wNhtIFmyBMETq9H6G9m9aiuJDBNF 6M04kFQXKkcuZLF6Pg9wJIVzHdXZo1h5NE1zB1MP6pI0Ca55EJgRXkZ4I0Js/xGi eoxJqJIc0iQylWmyRPVdKXHyh4R5jP7edDMPGhr2JNwyPuo76QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEScEIXgyG4LJh0aDH9lHC2H9RF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZjczZDllY2MtMzk1YS0z NzBjLThkZTQtNzVkMjkzMTFhZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjWIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnpI7uW2zZq95FFhqToFTMECOj0NtdoMGyYh0GPNr8RlbByA9wyPnu 7l9VdMIXcWb+dW1Lb7L10fr13pgavJWkTAbrXoCDzmIqgd2MT/wl3IscSrLawI5s 6V+M14yOgtXll1Yx6J/mthIdCv6DfFUkBCYd8nyYI8DOoah3BnaF+6VqaqkteeY0 coz8gZ9BIrGeEQsF+hmqYyQMeQpTTRKOc+mWPdN1uO6ZFqjN0caACXBchwMDmcNR 0cGa0yGaKZpztGO6OKGvXg2gaTsl4iID2MOHPGaA53+N+tvnAAmeMqUvAPrmv6d/ 12rWrBmDy6EAaU1yap00L3OLGtZHI/MW -----END CERTIFICATE-----Generated at Thu Oct 9 05:47:04 2025 by rpki-client