$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa File: 3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa (raw, json) Hash identifier: 2u9vkY1/66TT96jpbgKK8K3Yz7alVggS+yK9KNZ9v0A= Subject key identifier: A1:57:0F:70:D5:48:9D:2A:C8:3B:EC:90:4E:CF:D9:BD:B6:11:62:7B Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584B48E1B564DE9CB321C2D48900 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14340 IP address blocks: 140.190.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b5:64:de:9c:b3:21:c2:d4:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cdcffc55-1092-4cdc-b438-620586e64610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:5e:2d:58:9c:44:ec:c0:52:8d:4e:73:c5: 9a:b7:70:eb:96:6f:19:b7:e5:71:2d:c1:72:5b:88: 61:07:45:60:8c:97:a3:f9:d6:ba:21:c1:c8:f9:54: d9:3a:d8:ea:47:da:a7:75:bf:50:8f:ff:b9:61:8c: c6:dc:40:f2:30:25:10:3e:34:95:f5:88:e4:bc:3d: 6b:09:5b:d6:ff:9e:45:48:3a:3b:b0:b0:d2:b3:fb: 11:81:80:d9:09:96:4c:95:de:4c:e7:b4:f9:ad:21: 91:97:27:95:79:0a:9b:33:63:5b:e2:e2:b1:ab:1f: 3f:c7:2b:ea:ad:66:11:8f:e3:4d:51:ce:92:70:10: 0f:1f:99:46:45:35:a3:dd:06:4c:7d:45:08:52:ea: 23:bf:b4:77:72:b8:7f:d9:43:17:75:4c:ae:34:4c: c6:ec:69:52:e3:5a:76:15:b6:14:37:d9:60:e0:be: 49:c9:a3:3a:0f:9e:31:de:bd:0e:58:1d:82:95:db: fa:9a:4e:84:f4:60:fc:27:b8:c7:6c:9c:a6:35:e7: f4:93:d9:7c:56:71:99:03:c4:fa:4f:65:93:f3:cd: d6:a8:e5:50:80:e2:c5:87:dc:5f:76:ef:5b:82:c8: 99:8f:73:b7:ed:89:7f:ec:7e:78:d2:ed:c5:a4:70: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:0F:70:D5:48:9D:2A:C8:3B:EC:90:4E:CF:D9:BD:B6:11:62:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:a6:67:76:ff:69:0d:21:1a:68:f8:df:48:d2:1a:58:96:a9: c0:8e:1f:bb:62:99:b7:96:cf:71:ac:bc:23:6b:08:f7:f8:85: d5:33:b3:9c:38:07:11:15:5f:f6:f8:a8:60:83:b3:1d:72:d6: e6:f6:de:7f:b4:9b:7f:03:b8:4e:34:1b:15:af:f4:57:b6:40: c4:df:65:c6:e4:bb:36:e4:f7:d7:b0:1b:c1:b1:7b:63:c6:f7: 53:9a:b4:56:89:c7:00:90:be:86:01:1e:6a:a3:95:95:c0:74: c8:f5:14:d8:64:1c:b6:e2:ca:c8:3d:1a:fe:7c:bb:21:e3:04: be:07:7e:17:48:32:cc:57:74:52:b6:52:69:db:7e:5e:71:48: 57:a2:4c:b4:bc:11:f0:a2:82:7e:dd:f7:98:36:38:ec:1e:a2: 35:54:95:2b:c7:6c:e7:d7:ce:9d:db:2d:98:13:13:0d:2c:b9: dd:1d:31:40:73:e9:a6:aa:1c:63:dc:f5:5a:f6:8f:2f:08:b0: dd:b9:2d:44:2b:e0:b5:86:c8:db:2c:91:5e:a1:b4:79:3d:f7: d8:d0:43:cd:88:65:7d:4a:39:ce:3a:01:81:0c:cf:28:3e:26: f8:34:c9:55:85:6c:6c:bf:7a:bf:2d:d1:41:e8:76:e0:38:b6: 01:55:f2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bVk3pyzIcLUiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2RjZmZjNTUtMTA5Mi00Y2RjLWI0MzgtNjIwNTg2ZTY0NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BteLVicROzAUo1Oc8Wat3Drlm8Zt+VxLcFy W4hhB0VgjJej+da6IcHI+VTZOtjqR9qndb9Qj/+5YYzG3EDyMCUQPjSV9YjkvD1r CVvW/55FSDo7sLDSs/sRgYDZCZZMld5M57T5rSGRlyeVeQqbM2Nb4uKxqx8/xyvq rWYRj+NNUc6ScBAPH5lGRTWj3QZMfUUIUuojv7R3crh/2UMXdUyuNEzG7GlS41p2 FbYUN9lg4L5JyaM6D54x3r0OWB2Cldv6mk6E9GD8J7jHbJymNef0k9l8VnGZA8T6 T2WT883WqOVQgOLFh9xfdu9bgsiZj3O37Yl/7H540u3FpHBXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFXD3DVSJ0qyDvskE7P2b22EWJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvM2M2MTcxYjUtZjIwMC0z OTAyLTk1MDQtNmI1ZjllYjRmYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN6mZ3b/aQ0hGmj430jSGliWqcCOH7timbeWz3GsvCNrCPf4hdUzs5w4 BxEVX/b4qGCDsx1y1ub23n+0m38DuE40GxWv9Fe2QMTfZcbkuzbk99ewG8Gxe2PG 91OatFaJxwCQvoYBHmqjlZXAdMj1FNhkHLbiysg9Gv58uyHjBL4HfhdIMsxXdFK2 Umnbfl5xSFeiTLS8EfCign7d95g2OOweojVUlSvHbOfXzp3bLZgTEw0sud0dMUBz 6aaqHGPc9Vr2jy8IsN25LUQr4LWGyNsskV6htHk999jQQ82IZX1KOc46AYEMzyg+ Jvg0yVWFbGy/er8t0UHoduA4tgFV8sI= -----END CERTIFICATE-----Generated at Sat Oct 18 04:18:14 2025 by rpki-client