$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa File: 3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa (raw, json) Hash identifier: yYP4H0cAvUwV0d8qmRKFRTOqUBWqYqgVeK+cM/sUT7w= Subject key identifier: 6E:74:E4:24:41:51:16:81:26:BF:CA:9E:B4:06:3A:AC:D0:72:3D:00 Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584B01B14C2525D122AA56F5A620 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 401243 IP address blocks: 140.235.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:4c:25:25:d1:22:aa:56:f5:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=52dcc7f2-be39-4fa2-99cb-8fd47d9d45d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b5:9a:ca:dc:b6:de:c2:c6:c8:22:bd:99:78: 80:0d:96:5c:cf:a8:79:bb:42:17:bf:2b:9a:dd:62: f8:c7:31:eb:eb:c7:6c:e2:5d:1c:5e:c0:3b:6f:fe: 77:03:79:85:d4:8b:7a:10:60:62:1b:01:7a:65:5c: 9b:26:0c:f8:75:9e:98:e8:77:67:f7:d5:e8:4d:69: d4:b6:0d:ba:3a:d4:27:a4:07:a4:ee:07:f8:91:7b: 9b:d5:87:cb:3c:88:f1:09:41:f4:af:3c:ee:2c:0f: 86:ee:de:e5:79:ad:ec:c1:f0:96:c0:33:88:9c:39: 45:80:48:0b:50:35:3b:48:09:2a:1e:59:08:ad:0a: 17:2f:d5:7e:93:2c:9c:ef:0b:d9:01:1c:4b:e8:cf: 09:cf:21:eb:cf:05:27:f7:b1:51:15:c7:68:d2:ac: 99:38:92:21:18:f0:12:5b:4a:c6:32:7c:c6:b0:f1: 47:66:44:fe:9b:3d:05:98:5a:c5:bb:46:e2:4f:6a: 17:c3:68:34:dc:db:aa:c1:f7:4e:85:6d:38:01:3d: 6c:38:51:c2:28:98:84:4c:fc:3a:1f:b9:35:71:26: 0b:ec:ce:f9:80:73:1b:fe:6d:29:c2:fb:94:41:0a: 5d:5d:1e:a1:28:7d:6a:2f:b4:5f:6a:a0:0a:1c:22: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:74:E4:24:41:51:16:81:26:BF:CA:9E:B4:06:3A:AC:D0:72:3D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:36:cc:a7:f0:06:40:14:bb:e4:b8:e2:48:58:0e:9f:1c:3b: 12:fb:33:f9:68:f4:ec:a4:ff:d0:75:36:f1:d9:40:f5:a7:c1: ca:8c:f2:02:f1:38:c6:f4:e7:e7:03:b6:32:04:f7:dd:11:45: 1f:ed:22:8f:49:4f:a1:53:03:40:2c:74:23:46:d9:bf:f9:d1: 8b:e8:d3:2e:86:04:7a:1b:cf:23:fd:47:55:d9:d9:69:eb:7a: 8a:40:9b:35:bd:bc:48:e5:41:dd:da:e1:76:86:cd:4b:84:29: 6a:cd:52:88:14:cf:0c:43:ee:79:cd:c4:c3:a2:0c:57:40:ba: 5a:f8:a4:9e:f0:2f:9e:71:38:71:10:99:2f:eb:37:1f:dd:bb: ac:96:6b:cb:72:e2:f4:0e:47:69:b0:53:9d:a6:43:15:59:ef: 6e:61:33:a2:13:80:99:87:21:9d:8b:0f:23:d8:73:85:e5:7e: 1e:b2:a4:cf:1c:ab:53:8a:65:47:f5:6a:4e:d8:ea:88:fa:90: eb:b6:b3:68:d2:f3:e6:6e:a7:a6:88:a6:11:44:0e:82:e4:c7: 1e:54:f3:fd:cc:d2:99:fa:22:fc:7a:9e:80:2e:44:70:6a:b6: 8a:84:06:a6:21:ac:42:c2:a5:a3:62:34:f8:19:e5:14:14:44: d2:e5:9b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUwlJdEiqlb1piAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk NTJkY2M3ZjItYmUzOS00ZmEyLTk5Y2ItOGZkNDdkOWQ0NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Wayty23sLGyCK9mXiADZZcz6h5u0IXvyua 3WL4xzHr68ds4l0cXsA7b/53A3mF1It6EGBiGwF6ZVybJgz4dZ6Y6Hdn99XoTWnU tg26OtQnpAek7gf4kXub1YfLPIjxCUH0rzzuLA+G7t7lea3swfCWwDOInDlFgEgL UDU7SAkqHlkIrQoXL9V+kyyc7wvZARxL6M8JzyHrzwUn97FRFcdo0qyZOJIhGPAS W0rGMnzGsPFHZkT+mz0FmFrFu0biT2oXw2g03NuqwfdOhW04AT1sOFHCKJiETPw6 H7k1cSYL7M75gHMb/m0pwvuUQQpdXR6hKH1qL7RfaqAKHCIe7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG505CRBURaBJr/KnrQGOqzQcj0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvM2FmMGIzYTgtMjE3NS0z ZmY1LTlhNGEtZTEzNGE0ZjE2ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg2zKfwBkAUu+S44khYDp8cOxL7M/lo9Oyk/9B1NvHZQPWnwcqM8gLx OMb05+cDtjIE990RRR/tIo9JT6FTA0AsdCNG2b/50Yvo0y6GBHobzyP9R1XZ2Wnr eopAmzW9vEjlQd3a4XaGzUuEKWrNUogUzwxD7nnNxMOiDFdAulr4pJ7wL55xOHEQ mS/rNx/du6yWa8ty4vQOR2mwU52mQxVZ725hM6ITgJmHIZ2LDyPYc4Xlfh6ypM8c q1OKZUf1ak7Y6oj6kOu2s2jS8+Zup6aIphFEDoLkxx5U8/3M0pn6Ivx6noAuRHBq toqEBqYhrELCpaNiNPgZ5RQURNLlm5o= -----END CERTIFICATE-----Generated at Wed Sep 17 00:44:55 2025 by rpki-client