$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa File: e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa (raw, json) Hash identifier: abafEuX+aSlankX1dS1LmW9hSZ0kXKIi23y5RR9LqSY= Subject key identifier: 6B:FE:D2:11:0A:C2:40:16:18:BC:BA:BD:3A:D1:1C:51:34:AB:F5:18 Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584AD23BB3D1D1EE10F23103F480 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 212071 IP address blocks: 140.235.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b3:d1:d1:ee:10:f2:31:03:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=66c5602c-0933-4dee-9716-c87e06333547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:50:96:82:16:cb:0c:cc:1b:8d:41:60:44: 8d:31:a5:a7:d0:88:ef:f9:32:27:90:5d:34:b8:bb: 36:9e:34:ca:33:52:a9:da:dc:44:9c:5b:f5:7d:d9: 99:65:5b:d9:2f:61:f4:f5:77:c7:37:3f:a2:6f:5b: a8:ef:2c:9d:cd:cf:e9:43:67:b0:a1:64:ae:b5:98: d9:18:03:80:c8:68:6f:f1:ed:dd:dd:00:02:15:01: 52:0e:c3:7c:67:84:f5:40:a1:90:51:c8:2b:ab:e9: 7f:97:3c:78:d6:ed:1d:14:ef:12:e4:67:14:86:c1: 7d:71:81:e2:0f:95:b4:d8:55:24:48:47:f4:ab:67: 56:6c:15:f6:1f:82:e4:c0:85:1b:29:1d:c6:12:62: dc:97:c4:d5:19:ef:e6:83:2f:ed:c2:3f:7f:49:ed: e9:02:79:63:a0:72:31:09:ef:d6:5d:cc:54:1f:da: 76:f9:77:9f:97:8e:4e:3b:8f:4c:5b:01:58:79:4c: c6:26:be:96:39:39:14:97:df:d9:6e:96:f2:bf:09: 56:af:52:4b:d4:7b:9d:ac:4f:df:ce:33:57:08:e4: 09:7a:5d:fd:af:77:9f:47:08:05:a6:a1:47:04:48: b4:88:75:3c:6d:0f:6c:02:e6:82:01:a0:ac:a9:13: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FE:D2:11:0A:C2:40:16:18:BC:BA:BD:3A:D1:1C:51:34:AB:F5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 140.235.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:93:bc:94:43:e2:05:6e:c7:8c:4d:9c:80:1d:56:58:c5:2b: 62:2d:60:8b:7c:f5:37:2e:dd:6c:5f:a4:9a:da:0e:a4:50:73: cf:15:16:2a:b5:cd:57:75:4d:18:90:cd:20:e0:b8:a2:da:81: 9d:18:db:0a:1c:36:68:8d:97:8f:53:07:64:b1:1f:32:0c:33: 6c:8e:10:02:1e:cb:93:6f:a2:c8:6a:46:88:14:4f:37:1a:79: af:4d:61:68:db:a8:cf:cb:99:b5:c8:64:7e:26:f3:04:c6:dd: 13:0d:26:f9:f3:78:3d:7b:a7:a7:49:90:88:a7:da:cd:1a:7c: 55:39:af:84:e0:ed:0e:c6:08:ca:b1:84:cc:2a:4b:e4:04:a0: c5:a1:ab:68:1e:f2:60:f1:f4:70:72:0f:e4:09:f6:b9:06:b6: 26:bd:3e:2a:e3:83:10:38:fd:fd:39:c7:a8:e7:45:39:20:37: fa:35:ad:a0:74:62:c0:0b:d9:89:59:7a:ed:b4:1b:d5:43:f1: e8:b9:61:86:94:09:74:90:8d:c1:a9:d1:e8:32:f2:69:2c:14: fa:56:12:ce:2d:c4:bf:94:1e:cc:85:56:a8:56:ec:d0:1c:f9: 90:85:da:a7:98:c9:99:f2:42:12:c2:a0:e7:b1:c9:1f:33:63: 91:9d:12:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7PR0e4Q8jED9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjZjNTYwMmMtMDkzMy00ZGVlLTk3MTYtYzg3ZTA2MzMzNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUZQloIWywzMG41BYESNMaWn0Ijv+TInkF00 uLs2njTKM1Kp2txEnFv1fdmZZVvZL2H09XfHNz+ib1uo7yydzc/pQ2ewoWSutZjZ GAOAyGhv8e3d3QACFQFSDsN8Z4T1QKGQUcgrq+l/lzx41u0dFO8S5GcUhsF9cYHi D5W02FUkSEf0q2dWbBX2H4LkwIUbKR3GEmLcl8TVGe/mgy/twj9/Se3pAnljoHIx Ce/WXcxUH9p2+Xefl45OO49MWwFYeUzGJr6WOTkUl9/ZbpbyvwlWr1JL1HudrE/f zjNXCOQJel39r3efRwgFpqFHBEi0iHU8bQ9sAuaCAaCsqROo8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv+0hEKwkAWGLy6vTrRHFE0q/UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvZTMxZjVjYjgtMDQzZC0z NmMwLWFiZTctMDMzZmI0YTYxY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOTvJRD4gVux4xNnIAdVljFK2ItYIt89Tcu3WxfpJraDqRQc88VFiq1 zVd1TRiQzSDguKLagZ0Y2wocNmiNl49TB2SxHzIMM2yOEAIey5NvoshqRogUTzca ea9NYWjbqM/LmbXIZH4m8wTG3RMNJvnzeD17p6dJkIin2s0afFU5r4Tg7Q7GCMqx hMwqS+QEoMWhq2ge8mDx9HByD+QJ9rkGtia9PirjgxA4/f05x6jnRTkgN/o1raB0 YsAL2YlZeu20G9VD8ei5YYaUCXSQjcGp0egy8mksFPpWEs4txL+UHsyFVqhW7NAc +ZCF2qeYyZnyQhLCoOexyR8zY5GdErI= -----END CERTIFICATE-----Generated at Sun Oct 26 03:28:12 2025 by rpki-client