$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa File: 1f9399f9-8607-3d69-88f2-92f70bb947b8.roa (raw, json) Hash identifier: iBlOEuw+gYHwQWXGQag+kgCC+tScl7Dsm/MaKeZbqi0= Subject key identifier: 07:DE:65:B7:B2:FA:36:83:4D:C6:B3:86:18:C7:FF:5F:F5:EE:25:9D Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584B48E1AD1BA2960339F5BDFA80 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14340 IP address blocks: 140.190.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ad:1b:a2:96:03:39:f5:bd:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ba668901-afbd-45ca-bcb1-96b173320821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:13:e0:ae:b0:d2:03:07:f7:5a:62:7e:f4: 7d:0f:89:a9:ba:a4:e1:29:4c:75:c1:af:00:23:bf: e1:95:7f:ea:3b:88:8f:06:e0:60:7e:98:3f:d8:54: 7e:67:0d:4b:94:b8:ff:9b:d9:6b:da:23:47:2d:5d: c7:75:9a:64:ac:c2:9f:d3:49:a1:a6:93:ed:8f:ac: 68:91:7f:92:bc:8d:f1:18:c9:2e:7e:ed:91:4b:05: 9c:7c:c8:99:44:40:be:de:2f:c7:0a:e0:81:8b:1b: d8:7f:dd:b0:26:f1:2a:fa:8f:18:7e:b1:81:7b:f4: d1:d2:97:53:9a:34:9e:85:1b:90:be:02:9a:50:16: f0:ed:19:b1:5d:be:a2:14:6a:aa:72:7b:ba:1a:c2: 6d:e8:a2:7b:0a:72:83:6c:51:f3:71:0e:06:67:e2: b9:7c:f1:da:6d:02:1a:3a:7f:fd:b3:6f:a8:80:1e: 9b:12:ad:1d:bf:9b:c1:0a:47:74:2b:3e:34:e6:59: 58:fc:c0:d6:5c:75:ba:56:dd:36:21:bb:21:dd:44: 9c:e5:95:40:2c:8a:e2:04:8c:1f:30:98:27:63:70: 05:ff:18:1a:c0:18:02:ed:c9:4a:64:f3:e8:6b:a7: 83:2a:a0:27:c7:a3:3c:ca:72:db:6a:a1:5b:bb:af: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DE:65:B7:B2:FA:36:83:4D:C6:B3:86:18:C7:FF:5F:F5:EE:25:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1f9399f9-8607-3d69-88f2-92f70bb947b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:24:7f:88:42:ff:96:24:9b:ef:d9:3e:c4:e2:31:01:9d:c4: c2:b2:97:51:6b:f9:ed:f1:35:eb:27:31:eb:82:3e:7f:d8:31: 03:51:2d:18:b1:cd:04:40:30:c0:d1:f2:0c:ae:4a:21:9b:2c: ad:ba:bf:b2:08:43:e5:99:3b:ea:f3:52:55:32:dc:01:6f:a5: 5c:cb:01:b0:0c:26:eb:b7:bb:4b:c4:de:df:08:23:bf:2b:bf: 8e:8d:93:49:10:fe:f2:5c:f2:2d:ef:7d:f3:19:0d:dc:50:c7: 86:0c:fa:6b:31:be:7b:43:91:ea:b6:68:87:56:72:98:9b:51: d4:af:7e:3c:22:6b:44:24:06:85:44:2e:f6:71:30:f7:79:f8: 86:93:10:93:c8:00:21:6c:4f:9a:24:9c:5c:ff:d2:81:35:40: 46:bb:4b:4c:fd:31:c0:8f:3e:49:33:52:55:06:3e:3a:07:ac: e3:59:e5:11:16:ba:04:fc:d8:47:98:0d:22:59:a9:1c:1a:52: 68:d0:3f:86:53:c7:b0:2b:51:ab:f7:eb:a9:5e:4e:b3:a2:dd: 4c:2e:87:92:4e:61:c1:92:42:e3:d1:62:da:b4:97:a1:d2:bd: ed:66:b8:69:6f:e8:df:8f:10:5c:d1:da:74:3b:64:4e:c0:77: 5e:ec:35:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4a0bopYDOfW9+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmE2Njg5MDEtYWZiZC00NWNhLWJjYjEtOTZiMTczMzIwODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpgT4K6w0gMH91pifvR9D4mpuqThKUx1wa8A I7/hlX/qO4iPBuBgfpg/2FR+Zw1LlLj/m9lr2iNHLV3HdZpkrMKf00mhppPtj6xo kX+SvI3xGMkufu2RSwWcfMiZREC+3i/HCuCBixvYf92wJvEq+o8YfrGBe/TR0pdT mjSehRuQvgKaUBbw7RmxXb6iFGqqcnu6GsJt6KJ7CnKDbFHzcQ4GZ+K5fPHabQIa On/9s2+ogB6bEq0dv5vBCkd0Kz405llY/MDWXHW6Vt02Ibsh3USc5ZVALIriBIwf MJgnY3AF/xgawBgC7clKZPPoa6eDKqAnx6M8ynLbaqFbu686gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfeZbey+jaDTcazhhjH/1/17iWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMWY5Mzk5ZjktODYwNy0z ZDY5LTg4ZjItOTJmNzBiYjk0N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjL5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMkf4hC/5Ykm+/ZPsTiMQGdxMKyl1Fr+e3xNesnMeuCPn/YMQNRLRix zQRAMMDR8gyuSiGbLK26v7IIQ+WZO+rzUlUy3AFvpVzLAbAMJuu3u0vE3t8II78r v46Nk0kQ/vJc8i3vffMZDdxQx4YM+msxvntDkeq2aIdWcpibUdSvfjwia0QkBoVE LvZxMPd5+IaTEJPIACFsT5oknFz/0oE1QEa7S0z9McCPPkkzUlUGPjoHrONZ5REW ugT82EeYDSJZqRwaUmjQP4ZTx7ArUav366leTrOi3Uwuh5JOYcGSQuPRYtq0l6HS ve1muGlv6N+PEFzR2nQ7ZE7Ad17sNSk= -----END CERTIFICATE-----Generated at Sat Oct 18 04:17:12 2025 by rpki-client