$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa File: ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa (raw, json) Hash identifier: ncwSeTwqyloiwdA34LNPA3WLmoL6rOFQwgsVcqXuSK0= Subject key identifier: 8B:3F:00:7E:E1:92:E0:D7:8D:05:3C:EE:1D:42:93:30:25:EA:D1:2A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B2FC1B8F5507022B1E24D3100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 3949 IP address blocks: 140.174.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b8:f5:50:70:22:b1:e2:4d:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=b03a573c-fbb3-45eb-bb1a-02ebd1819ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:ae:df:e9:6f:cd:92:b7:47:9e:62:64:e8: c7:77:55:04:3c:82:4e:f1:a8:83:a7:d2:95:8a:cc: ec:36:79:c5:74:b6:18:15:8c:94:0c:5c:04:71:8d: 5c:b3:b3:d0:f5:07:d8:d6:72:f0:1c:dd:77:51:4c: 87:bf:31:9e:9a:0b:d7:b9:19:75:6d:3f:52:49:08: bb:28:76:74:cd:69:a6:ae:95:d4:0c:44:31:ca:e6: 59:2d:b4:cf:5e:27:b7:69:23:d1:23:93:cd:44:9f: d1:21:98:a5:b0:5a:fe:11:2d:31:98:d3:f0:e2:93: ce:3b:6b:6d:3e:58:ae:a9:04:17:14:f7:b1:d4:e0: 29:7a:e1:f5:04:63:d9:7e:d3:5b:c2:ef:40:22:4a: f9:96:7b:78:48:ac:46:c7:48:b5:4a:6a:b8:dd:05: a8:d4:96:6d:a6:ae:6e:75:92:ea:30:ba:0a:04:39: 88:7e:00:e4:15:79:15:84:19:ae:3d:26:31:dd:7a: 0a:7a:0f:7f:a3:2a:92:63:ff:80:55:5e:8e:3e:a3: 10:d7:a3:dc:9c:7c:07:67:f0:57:39:0f:9f:52:e7: b4:ed:39:5e:c4:71:a9:b8:d0:40:46:db:7b:0c:8e: 30:d2:a8:7f:c2:3d:e2:6a:8d:34:0e:0a:d6:00:c3: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:00:7E:E1:92:E0:D7:8D:05:3C:EE:1D:42:93:30:25:EA:D1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff6d221e-60d5-394e-b217-afb75d9b0d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:99:37:f0:81:0d:0e:bc:ce:13:ee:33:87:9b:60:3f:c1:8a: b7:01:6f:12:94:f3:c2:d7:f4:08:4d:e5:8f:74:32:fd:d6:e3: a1:cb:d2:d3:40:41:d0:cb:96:9c:77:a5:52:12:87:6a:36:48: f2:0c:02:8a:f3:01:27:c6:2a:80:66:85:59:2f:ec:63:e2:93: 39:29:b2:27:04:f8:ed:45:2e:c1:86:47:32:ea:91:27:3a:b3: 9c:d3:4e:83:14:54:f2:03:46:6f:c2:5a:8d:65:59:0e:b4:32: 46:51:0d:c9:f8:56:7b:9a:90:95:3c:1e:40:04:7b:59:14:a4: f3:be:76:63:8f:d8:85:2d:9b:27:16:d1:76:ca:9b:77:b3:b8: 9d:37:be:c2:99:7e:05:e2:11:70:60:29:34:f7:2e:69:7d:6f: dc:45:83:27:02:24:dd:57:e2:69:c7:97:02:01:17:fb:2f:c6: 8c:6b:a8:97:97:d6:06:79:36:9e:37:87:0c:23:e8:48:18:dc: a3:d4:71:e3:d7:f6:c4:ad:d9:ab:74:7e:df:9c:2e:ca:d7:3e: e8:25:ee:f7:b6:5f:da:1b:cd:74:7c:ae:00:bd:66:7f:40:98: ca:18:94:4f:00:5e:ef:46:af:49:6e:b5:c0:dc:f2:e4:dc:4b: 3c:2d:30:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbj1UHAiseJNMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YjAzYTU3M2MtZmJiMy00NWViLWJiMWEtMDJlYmQxODE5ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApumu3+lvzZK3R55iZOjHd1UEPIJO8aiDp9KV iszsNnnFdLYYFYyUDFwEcY1cs7PQ9QfY1nLwHN13UUyHvzGemgvXuRl1bT9SSQi7 KHZ0zWmmrpXUDEQxyuZZLbTPXie3aSPRI5PNRJ/RIZilsFr+ES0xmNPw4pPOO2tt PliuqQQXFPex1OApeuH1BGPZftNbwu9AIkr5lnt4SKxGx0i1Smq43QWo1JZtpq5u dZLqMLoKBDmIfgDkFXkVhBmuPSYx3XoKeg9/oyqSY/+AVV6OPqMQ16PcnHwHZ/BX OQ+fUue07TlexHGpuNBARtt7DI4w0qh/wj3iao00DgrWAMPi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/AH7hkuDXjQU87h1CkzAl6tEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmY2ZDIyMWUtNjBkNS0z OTRlLWIyMTctYWZiNzVkOWIwZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjK5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiZN/CBDQ68zhPuM4ebYD/BircBbxKU88LX9AhN5Y90Mv3W46HL0tNA QdDLlpx3pVISh2o2SPIMAorzASfGKoBmhVkv7GPikzkpsicE+O1FLsGGRzLqkSc6 s5zTToMUVPIDRm/CWo1lWQ60MkZRDcn4VnuakJU8HkAEe1kUpPO+dmOP2IUtmycW 0XbKm3ezuJ03vsKZfgXiEXBgKTT3Lml9b9xFgycCJN1X4mnHlwIBF/svxoxrqJeX 1gZ5Np43hwwj6EgY3KPUcePX9sSt2at0ft+cLsrXPugl7ve2X9obzXR8rgC9Zn9A mMoYlE8AXu9Gr0lutcDc8uTcSzwtMLQ= -----END CERTIFICATE-----Generated at Tue Oct 14 10:42:09 2025 by rpki-client