$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa File: fd1ed52a-b712-37ae-9e08-625a0869dd53.roa (raw, json) Hash identifier: KpMSeh7PgxK/LjPiIebGgeaFaJp6ONvlAeBkUsK/KC8= Subject key identifier: CB:49:E6:3F:BC:82:B2:31:BB:8E:7B:0D:0B:AE:C0:F7:5E:C9:12:7E Certificate issuer: /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Certificate serial: 010D0C9F4328584B276180E61FC549FC6399C600 Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 63129 IP address blocks: 140.235.164.0/22 maxlen: 24 2602:f7d5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:80:e6:1f:c5:49:fc:63:99:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=a35fe939-4b6d-4b3f-a681-7c18dded9e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:16:9f:30:c7:9e:f3:07:1a:22:55:3c:03: 79:b2:ac:87:3f:e5:94:ae:81:45:d6:e2:d3:a9:b7: c6:25:d3:eb:2c:ae:9f:83:49:17:d1:b1:b9:e9:7b: 27:16:c8:ad:e7:b5:42:e4:2d:b8:eb:a0:2f:a6:30: 8a:2a:b9:94:5d:5e:8c:f5:95:d3:a8:39:da:65:85: 6c:5a:df:0b:ce:74:56:34:3c:81:41:fd:9a:36:a7: 5c:53:c8:84:94:82:a1:58:d2:fb:80:7c:02:ca:6d: 72:b9:8e:de:4c:82:d3:0e:60:c7:90:84:a2:3e:dd: d8:a3:2d:2b:99:99:1c:3b:82:a3:27:cb:7e:96:81: 6c:3f:aa:4f:b5:c5:eb:8f:2c:e0:f0:cf:69:4b:fe: a1:f5:bd:a1:5f:d9:c4:7b:3f:25:bc:00:e8:90:46: 1e:fb:a5:1f:5e:88:66:b2:61:31:fa:bb:4d:e8:05: d5:33:c6:30:34:c3:ad:b1:b1:f2:5b:eb:a6:ea:29: 95:04:23:df:c9:00:b2:b7:66:5b:b0:6d:88:56:d0: 85:1c:69:92:35:ec:6b:0b:c1:97:31:61:bc:dd:63: e4:fb:2f:b4:65:8e:95:24:03:fd:4e:38:f0:0a:81: f7:87:39:26:f1:e2:f5:5e:c0:e0:50:1c:13:bc:63: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:E6:3F:BC:82:B2:31:BB:8E:7B:0D:0B:AE:C0:F7:5E:C9:12:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl X509v3 Authority Key Identifier: keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer sbgp-ipAddrBlock: critical IPv4: 140.235.164.0/22 IPv6: 2602:f7d5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:36:c7:f6:fd:fb:76:41:1f:03:92:bb:d3:8c:86:8f:bf:25: e2:fd:ae:0d:bb:56:6f:04:59:d5:2a:92:7f:05:47:80:df:63: c1:94:4e:b6:40:8f:3c:89:c0:44:8d:d1:78:9d:39:91:4e:09: 51:e4:eb:15:b7:86:2e:01:c3:ec:fd:8b:90:c3:1e:99:5b:1c: c1:1c:db:c6:74:91:05:e3:92:22:d8:46:94:4b:ec:6d:69:55: a6:8c:6a:20:01:08:37:f2:bc:97:5f:37:53:b5:ea:7f:ee:f0: 79:14:fb:45:94:5a:b3:16:51:08:d8:d8:de:33:a5:d9:89:67: 6d:84:f6:26:e5:c0:ee:a6:7e:bb:87:71:56:3c:6b:3c:ab:18: fd:c4:44:ad:68:88:6e:32:19:7e:bb:90:cf:cd:13:a0:b4:0c: 65:eb:df:06:ae:0d:e0:0e:29:a5:ba:55:c5:5c:b6:90:a3:64: 13:f3:2d:09:60:94:0d:32:bb:4b:48:49:49:d0:b6:b8:70:f1: a4:65:ad:cc:56:6f:46:8a:7f:d2:b4:76:c5:17:aa:3e:f2:25: f2:9f:b4:ab:15:ac:fc:f1:d4:64:cb:d3:7c:17:13:cc:61:4b: 81:c9:a4:4a:48:5c:cc:02:08:4b:96:0e:3a:7c:b2:c9:59:c0: cf:e3:6d:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsnYYDmH8VJ/GOZxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1NWMwYTYtZWFhOC00MDM5LWJlMTUtMjIwZjI4OGFj ZDVhMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YTM1ZmU5MzktNGI2ZC00YjNmLWE2ODEtN2MxOGRkZWQ5ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYUWnzDHnvMHGiJVPAN5sqyHP+WUroFF1uLT qbfGJdPrLK6fg0kX0bG56XsnFsit57VC5C2466AvpjCKKrmUXV6M9ZXTqDnaZYVs Wt8LznRWNDyBQf2aNqdcU8iElIKhWNL7gHwCym1yuY7eTILTDmDHkISiPt3Yoy0r mZkcO4KjJ8t+loFsP6pPtcXrjyzg8M9pS/6h9b2hX9nEez8lvADokEYe+6UfXohm smEx+rtN6AXVM8YwNMOtsbHyW+um6imVBCPfyQCyt2ZbsG2IVtCFHGmSNexrC8GX MWG83WPk+y+0ZY6VJAP9TjjwCoH3hzkm8eL1XsDgUBwTvGOduwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMtJ5j+8grIxu457DQuuwPdeyRJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1 YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBmMjg4YWNkNWEvZmQxZWQ1MmEtYjcxMi0z N2FlLTllMDgtNjI1YTA4NjlkZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGE1NWMwYTYtZWFhOC00MDM5LWJl MTUtMjIwZjI4OGFjZDVhLzRhNTVjMGE2LWVhYTgtNDAzOS1iZTE1LTIyMGYyODhh Y2Q1YS5jcmwwHwYDVR0jBBgwFoAURirgY4Fi4qp0fCDiyWoUYJkiNaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBm Mjg4YWNkNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjOukMA4E AgACMAgDBgQmAvfVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoNsf2/ft2QR8DkrvTjIaPvyXi/a4Nu1Zv BFnVKpJ/BUeA32PBlE62QI88icBEjdF4nTmRTglR5OsVt4YuAcPs/YuQwx6ZWxzB HNvGdJEF45Ii2EaUS+xtaVWmjGogAQg38ryXXzdTtep/7vB5FPtFlFqzFlEI2Nje M6XZiWdthPYm5cDupn67h3FWPGs8qxj9xEStaIhuMhl+u5DPzROgtAxl698Grg3g DimlulXFXLaQo2QT8y0JYJQNMrtLSElJ0La4cPGkZa3MVm9Gin/StHbFF6o+8iXy n7SrFaz88dRky9N8FxPMYUuByaRKSFzMAghLlg46fLLJWcDP4222 -----END CERTIFICATE-----Generated at Thu Sep 18 04:12:36 2025 by rpki-client