$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/4d0bd089-c98c-3c40-972c-b453018b73d7.roa File: 4d0bd089-c98c-3c40-972c-b453018b73d7.roa (raw, json) Hash identifier: utv/dlgJsWJh3JNVaTdISITp56ODIKGHDge2k1Hk5rk= Subject key identifier: 81:69:3A:A4:A0:70:72:BD:09:B2:5E:35:54:6B:56:96:43:4F:4D:71 Certificate issuer: /CN=235d7f84-9186-4dd5-a197-87e823c53ed5 Certificate serial: 010D0C9F4328584BAA97A4D955759EBA9D41E500 Authority key identifier: 22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/4d0bd089-c98c-3c40-972c-b453018b73d7.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 36136 IP address blocks: 198.140.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:d9:55:75:9e:ba:9d:41:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235d7f84-9186-4dd5-a197-87e823c53ed5 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=d7727078-cf9b-4dff-98d5-472c22075c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:08:8a:1f:bb:59:30:14:06:9e:11:a9:11: 61:88:8a:ec:1b:98:15:4a:9c:9a:b0:30:11:c6:59: a4:24:d4:f4:c4:c6:e0:f6:6c:9e:8f:54:21:8d:8b: 74:fa:c2:01:5d:80:5e:a2:82:43:0f:b0:3b:4b:c4: 5d:5e:25:d2:ff:8b:d7:22:5a:43:cc:f3:39:33:f8: e0:30:d1:a1:fb:03:82:38:31:bd:c2:3a:cb:16:58: ee:6c:e1:2e:78:28:01:11:f9:da:17:1e:d5:14:58: 42:23:1d:8a:dd:a3:2b:87:25:32:21:37:8f:c8:b8: 3f:e4:85:14:1a:ac:65:2a:18:cc:8c:cd:9f:ae:2a: 65:76:d2:a9:ea:c7:fa:c4:4c:76:80:d8:d0:b8:87: 28:0f:26:e8:2f:59:4e:e7:f9:b1:da:08:98:b4:0d: 99:c7:7b:1b:be:c6:63:52:5d:a9:34:1d:67:19:5c: 2e:4e:d6:42:b1:28:a4:d3:ef:97:30:27:12:6a:89: fa:01:28:df:d0:a0:f5:15:9f:5d:63:c2:b6:a8:04: f8:ab:c4:6a:58:56:ce:4c:8c:7a:be:8e:9f:b4:98: 67:72:6b:f4:e1:ba:09:03:ab:5e:c4:2f:20:d4:ba: 34:df:87:02:e1:ef:7e:be:4c:c7:f3:51:b8:4e:af: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:69:3A:A4:A0:70:72:BD:09:B2:5E:35:54:6B:56:96:43:4F:4D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/4d0bd089-c98c-3c40-972c-b453018b73d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5/235d7f84-9186-4dd5-a197-87e823c53ed5.crl X509v3 Authority Key Identifier: keyid:22:A3:C5:EF:AA:7F:64:D8:F4:34:E5:44:1C:7E:96:34:5D:6E:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/235d7f84-9186-4dd5-a197-87e823c53ed5.cer sbgp-ipAddrBlock: critical IPv4: 198.140.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ac:be:a5:c0:18:7c:c8:88:d9:81:78:f1:a7:a6:5a:94:c9: 5a:8e:23:03:52:2e:ff:58:4d:9a:01:59:d4:ac:2f:19:27:86: c0:81:52:c7:22:1b:78:86:cb:18:0e:f7:5a:ba:c2:f4:d0:45: 5d:37:b4:a5:aa:6d:4a:99:b0:01:4c:86:85:27:f4:9b:2e:d1: 2e:29:6d:81:45:39:17:ee:f0:16:f6:d6:73:1b:7b:25:1c:9a: bd:da:27:56:48:68:83:d0:74:b0:67:0f:a7:a9:e9:cd:81:d8: 7b:02:0d:58:79:3d:a5:a8:99:15:29:44:4e:28:61:d0:c0:57: d6:14:7a:cc:08:f3:56:48:29:bc:eb:85:82:2c:2c:a0:bf:32: 11:9f:d0:fb:00:3b:23:53:e8:72:5e:bb:9c:20:b8:b8:b9:4d: 93:c8:d3:5b:c5:9e:24:6c:3d:78:69:38:d2:c0:cd:d5:2c:b7: c0:3e:84:74:7e:86:de:cb:17:c4:eb:30:5d:3d:1e:25:2b:17: c6:0b:10:78:aa:78:48:d1:35:c7:3e:2d:45:8c:2c:f4:21:34: 8d:fd:80:29:c4:27:ad:0a:07:d0:da:9c:43:fd:17:43:4b:7a: a6:c9:84:13:d6:2f:fe:75:b4:3c:25:95:b3:45:5f:57:2e:2f: 55:36:3b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6TZVXWeup1B5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM1ZDdmODQtOTE4Ni00ZGQ1LWExOTctODdlODIzYzUz ZWQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDc3MjcwNzgtY2Y5Yi00ZGZmLTk4ZDUtNDcyYzIyMDc1YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hgIih+7WTAUBp4RqRFhiIrsG5gVSpyasDAR xlmkJNT0xMbg9myej1QhjYt0+sIBXYBeooJDD7A7S8RdXiXS/4vXIlpDzPM5M/jg MNGh+wOCODG9wjrLFljubOEueCgBEfnaFx7VFFhCIx2K3aMrhyUyITePyLg/5IUU GqxlKhjMjM2fripldtKp6sf6xEx2gNjQuIcoDyboL1lO5/mx2giYtA2Zx3sbvsZj Ul2pNB1nGVwuTtZCsSik0++XMCcSaon6ASjf0KD1FZ9dY8K2qAT4q8RqWFbOTIx6 vo6ftJhncmv04boJA6texC8g1Lo034cC4e9+vkzH81G4Tq8abwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFpOqSgcHK9CbJeNVRrVpZDT01xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMzVk N2Y4NC05MTg2LTRkZDUtYTE5Ny04N2U4MjNjNTNlZDUvNGQwYmQwODktYzk4Yy0z YzQwLTk3MmMtYjQ1MzAxOGI3M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjM1ZDdmODQtOTE4Ni00ZGQ1LWEx OTctODdlODIzYzUzZWQ1LzIzNWQ3Zjg0LTkxODYtNGRkNS1hMTk3LTg3ZTgyM2M1 M2VkNS5jcmwwHwYDVR0jBBgwFoAUIqPF76p/ZNj0NOVEHH6WNF1uqBEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMzVkN2Y4NC05MTg2LTRkZDUtYTE5Ny04N2U4 MjNjNTNlZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoybMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHesvqXAGHzIiNmBePGnplqUyVqOIwNSLv9YTZoBWdSsLxknhsCBUsci G3iGyxgO91q6wvTQRV03tKWqbUqZsAFMhoUn9Jsu0S4pbYFFORfu8Bb21nMbeyUc mr3aJ1ZIaIPQdLBnD6ep6c2B2HsCDVh5PaWomRUpRE4oYdDAV9YUeswI81ZIKbzr hYIsLKC/MhGf0PsAOyNT6HJeu5wguLi5TZPI01vFniRsPXhpONLAzdUst8A+hHR+ ht7LF8TrMF09HiUrF8YLEHiqeEjRNcc+LUWMLPQhNI39gCnEJ60KB9DanEP9F0NL eqbJhBPWL/51tDwllbNFX1cuL1U2O/c= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:42 2025 by rpki-client