$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/4b38af57-8664-3bcb-b335-3696f40538f0.roa File: 4b38af57-8664-3bcb-b335-3696f40538f0.roa (raw, json) Hash identifier: JgIX624CjbLRDdZhQILglBIj0pIbJ/Qq06Yi8RRBl5Q= Subject key identifier: 35:37:E6:EC:D2:7A:0E:1C:DB:AC:51:8F:4A:64:36:45:FB:61:CC:72 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F4328584BBCDAE59E2E84057399B28780 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/4b38af57-8664-3bcb-b335-3696f40538f0.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 140543 IP address blocks: 165.140.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e5:9e:2e:84:05:73:99:b2:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=c92537b7-2277-40c6-821c-e5f42efc809e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:d0:bf:f7:82:71:48:b5:2f:6a:87:4a:4b: fc:54:fa:f4:69:19:07:d1:fd:a8:66:e5:9d:12:f8: 75:5d:06:34:33:69:bc:1c:17:61:0e:cc:47:f2:14: 1b:66:90:ca:d8:75:97:38:d0:0e:d8:54:72:2a:93: 9e:eb:ae:94:0e:d2:0e:b9:3f:fa:8e:c4:50:68:2b: aa:a9:51:7a:9a:6d:4b:ec:19:71:55:cc:03:35:49: 69:c6:47:94:a9:53:0b:9e:71:d1:7e:7f:7f:78:f9: 6a:49:7e:ef:ec:7f:23:da:1e:dd:46:a5:e1:62:a4: 84:1f:4d:f2:af:5d:f0:cb:f0:ae:95:82:20:ca:83: d7:4e:94:da:18:82:93:62:d1:57:6e:8f:75:1f:9f: bd:7d:c6:07:72:3e:e8:d8:06:12:24:03:e7:40:34: 51:9e:31:dd:a9:6d:8e:95:da:a8:f2:c9:71:42:a6: 17:45:42:69:9d:ff:a1:ab:ff:0b:da:bb:15:73:4d: 40:ce:10:be:9c:32:db:99:de:d0:35:77:84:e7:81: c1:d0:33:e9:9b:8c:68:7f:26:20:1e:28:9a:b6:ad: 3e:6f:13:63:4b:b4:e0:d6:3b:98:23:64:76:35:84: 25:4b:ac:5d:82:ba:4c:3f:cc:4c:d1:c3:e1:28:81: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:E6:EC:D2:7A:0E:1C:DB:AC:51:8F:4A:64:36:45:FB:61:CC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/4b38af57-8664-3bcb-b335-3696f40538f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 165.140.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:a2:66:fd:e5:76:25:ab:6b:e4:09:b0:2f:2f:f9:8c:ab:3a: e8:a6:a8:8b:f3:61:4b:95:48:51:f9:6f:ea:87:34:f1:9c:fd: 03:13:be:d1:ad:02:49:91:33:c4:dd:e8:99:49:4f:db:7f:d5: 42:c4:b7:04:5c:47:67:ad:c3:65:21:1d:57:9d:08:a3:6a:ae: 93:fa:0f:d2:ec:0f:14:c2:36:66:bb:ab:a6:7c:1e:a7:8e:18: 33:ce:d2:20:e8:16:6f:18:ec:2b:22:2f:99:03:9a:86:26:02: 0d:46:8b:e8:1b:6b:bd:85:16:9d:39:7c:d7:b7:e9:da:5d:cf: ef:89:66:c7:ed:50:30:ca:f8:63:44:36:16:7f:7b:a5:79:ef: c8:da:6b:7a:01:78:2a:0c:f2:58:7d:80:e0:03:6e:3a:ea:4f: 3a:8b:8c:4a:89:0b:3d:55:d0:21:60:a8:ac:5b:3e:47:c5:02: 10:b0:7b:7c:21:d5:5f:2b:66:3a:c7:30:f2:87:a1:5c:f9:0c: 53:64:27:94:de:2e:b8:7a:19:4a:10:d2:e0:64:4a:16:bf:47: d7:12:3f:51:10:a8:f3:7b:ed:e7:1d:57:1f:c9:c3:28:21:68: 12:a0:2e:a6:72:82:be:41:d1:e8:95:05:b2:43:aa:81:b1:de: 8d:78:78:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uWeLoQFc5myh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk YzkyNTM3YjctMjI3Ny00MGM2LTgyMWMtZTVmNDJlZmM4MDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMjQv/eCcUi1L2qHSkv8VPr0aRkH0f2oZuWd Evh1XQY0M2m8HBdhDsxH8hQbZpDK2HWXONAO2FRyKpOe666UDtIOuT/6jsRQaCuq qVF6mm1L7BlxVcwDNUlpxkeUqVMLnnHRfn9/ePlqSX7v7H8j2h7dRqXhYqSEH03y r13wy/CulYIgyoPXTpTaGIKTYtFXbo91H5+9fcYHcj7o2AYSJAPnQDRRnjHdqW2O ldqo8slxQqYXRUJpnf+hq/8L2rsVc01AzhC+nDLbmd7QNXeE54HB0DPpm4xofyYg Hiiatq0+bxNjS7Tg1juYI2R2NYQlS6xdgrpMP8xM0cPhKIFQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU35uzSeg4c26xRj0pkNkX7YcxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvNGIzOGFmNTctODY2NC0z YmNiLWIzMzUtMzY5NmY0MDUzOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmiZv3ldiWra+QJsC8v+YyrOuimqIvzYUuVSFH5b+qHNPGc/QMTvtGt AkmRM8Td6JlJT9t/1ULEtwRcR2etw2UhHVedCKNqrpP6D9LsDxTCNma7q6Z8HqeO GDPO0iDoFm8Y7CsiL5kDmoYmAg1Gi+gba72FFp05fNe36dpdz++JZsftUDDK+GNE NhZ/e6V578jaa3oBeCoM8lh9gOADbjrqTzqLjEqJCz1V0CFgqKxbPkfFAhCwe3wh 1V8rZjrHMPKHoVz5DFNkJ5TeLrh6GUoQ0uBkSha/R9cSP1EQqPN77ecdVx/Jwygh aBKgLqZygr5B0eiVBbJDqoGx3o14eHU= -----END CERTIFICATE-----Generated at Sun Nov 9 01:50:54 2025 by rpki-client