$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa File: 0436e288-ef8c-340a-97d6-710cb375a578.roa (raw, json) Hash identifier: Zn6B79FnsM3gj7s3WbgWYiOyI38cP+kT7gopLCXIohg= Subject key identifier: F1:1A:CB:56:81:67:04:45:1C:35:0E:90:4B:D2:BC:F5:14:F4:5D:E0 Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584B33F1B738D9F2FF9A220A1580 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 401243 IP address blocks: 140.235.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b7:38:d9:f2:ff:9a:22:0a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=d1548dea-2be4-4399-b450-99e2998fe6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:17:bc:d8:cc:b5:44:9e:5c:ad:b7:8f:fa: d6:73:e3:1e:c8:ea:e4:41:7c:26:f5:a0:fd:b9:3b: 3a:08:9e:a6:59:a8:4f:ca:09:91:78:18:ad:c0:7a: 0d:96:6d:49:59:aa:0b:ac:0a:ea:3a:42:78:76:c7: e3:26:55:1a:12:e6:0c:a2:9e:2e:4a:83:78:f6:37: 30:be:7c:20:ad:dd:21:6e:56:88:f3:bf:48:df:b3: 36:7c:ce:4b:72:07:48:8b:7a:6a:eb:95:27:9b:56: 75:d5:12:6a:3c:e3:8f:5a:0e:60:e7:07:07:e8:9f: d6:df:27:0d:16:f9:e2:90:f7:08:b3:83:5c:17:df: 43:44:a6:36:93:74:80:f6:2c:de:ff:72:46:44:e1: 13:f8:eb:bf:9e:f6:12:43:00:a1:1e:92:55:d5:f9: 8e:64:84:a3:f3:38:e9:48:21:86:25:c2:84:b1:7e: 05:b2:80:4c:56:71:e3:0a:fb:42:1b:a6:77:3b:27: 55:72:9d:e8:34:21:d1:60:4f:ad:52:7e:5a:85:e0: ff:8c:ab:a7:fd:08:ee:96:cd:57:18:4b:fd:1f:6a: 03:f2:c9:36:39:c7:bb:af:04:9b:0c:f7:2d:3a:56: bd:b4:b3:1d:c5:df:56:68:f6:d6:d9:d1:b3:c2:89: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1A:CB:56:81:67:04:45:1C:35:0E:90:4B:D2:BC:F5:14:F4:5D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0436e288-ef8c-340a-97d6-710cb375a578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a3:f3:8f:f6:3d:a3:7d:19:2e:51:23:89:e1:7e:77:5d:f9: 64:db:56:fd:d3:57:a7:ad:cd:c4:4f:bd:46:63:79:2b:15:27: 60:f0:db:b8:2f:23:eb:2b:05:7b:15:33:ec:09:56:1b:f9:e3: db:03:0b:6b:99:7a:49:64:0b:2b:cd:fa:73:cc:ce:8d:dc:b9: fb:cd:3f:15:11:68:d6:42:56:f9:23:54:79:fb:6c:d8:08:c0: c8:ab:4d:ff:25:c4:a2:f9:1f:dd:07:f4:71:4d:94:1b:eb:22: 00:a4:17:12:08:9f:80:98:1f:46:b0:85:1b:22:a4:6b:df:84: 9e:63:ab:ff:f3:99:1b:96:43:b0:72:15:2e:b8:f7:9f:51:ae: 26:a8:b4:4c:61:97:cd:a3:31:96:fd:81:d0:df:9d:52:39:a0: 7a:af:70:02:8f:b1:9c:fb:df:1a:01:ec:b8:c6:8d:37:24:84: 03:ee:e3:0d:6a:01:76:68:30:2b:97:f4:7e:63:3e:9a:94:87: d6:cc:fb:91:c8:d7:35:13:36:8a:66:f6:aa:79:58:27:ae:d0: b6:ea:72:84:36:30:04:f2:40:9a:c1:b5:6a:de:54:b6:2e:a4: ec:28:ae:ec:0a:e1:ac:34:05:60:c8:c2:b4:af:7b:f9:16:b0: 80:c1:b9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bc42fL/miIKFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZDE1NDhkZWEtMmJlNC00Mzk5LWI0NTAtOTllMjk5OGZlNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMsXvNjMtUSeXK23j/rWc+MeyOrkQXwm9aD9 uTs6CJ6mWahPygmReBitwHoNlm1JWaoLrArqOkJ4dsfjJlUaEuYMop4uSoN49jcw vnwgrd0hblaI879I37M2fM5LcgdIi3pq65Unm1Z11RJqPOOPWg5g5wcH6J/W3ycN FvnikPcIs4NcF99DRKY2k3SA9ize/3JGROET+Ou/nvYSQwChHpJV1fmOZISj8zjp SCGGJcKEsX4FsoBMVnHjCvtCG6Z3OydVcp3oNCHRYE+tUn5aheD/jKun/Qjuls1X GEv9H2oD8sk2Oce7rwSbDPctOla9tLMdxd9WaPbW2dGzwok34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEay1aBZwRFHDUOkEvSvPUU9F3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvMDQzNmUyODgtZWY4Yy0z NDBhLTk3ZDYtNzEwY2IzNzVhNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECj84/2PaN9GS5RI4nhfndd+WTbVv3TV6etzcRPvUZjeSsVJ2Dw27gv I+srBXsVM+wJVhv549sDC2uZeklkCyvN+nPMzo3cufvNPxURaNZCVvkjVHn7bNgI wMirTf8lxKL5H90H9HFNlBvrIgCkFxIIn4CYH0awhRsipGvfhJ5jq//zmRuWQ7By FS64959RriaotExhl82jMZb9gdDfnVI5oHqvcAKPsZz73xoB7LjGjTckhAPu4w1q AXZoMCuX9H5jPpqUh9bM+5HI1zUTNopm9qp5WCeu0LbqcoQ2MATyQJrBtWreVLYu pOworuwK4aw0BWDIwrSve/kWsIDBuYY= -----END CERTIFICATE-----Generated at Wed Sep 17 00:50:25 2025 by rpki-client