$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa File: 2acf3f1b-eacb-3746-939b-0407dc034a39.roa (raw, json) Hash identifier: wp70ATxqOXfHPYpg5vC5f/2Ly0YKtVBJQm7P5Lv0xC4= Subject key identifier: 61:BA:B4:82:A8:0B:C4:EB:A0:68:F9:FD:5F:8B:E5:FC:13:50:82:07 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC453CBA81042E3327080 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 192.58.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:53:cb:a8:10:42:e3:32:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=1d27b3bb-4dd4-4d5b-9f3b-06e2cbe9045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:a8:24:a6:40:44:92:c1:13:8c:f8:05:ae: 70:ba:36:d6:78:dd:3b:c6:d6:8b:77:e9:7e:ff:89: 04:78:64:0e:f8:11:3e:ef:c3:ab:24:e0:ce:0e:e7: bb:80:76:ba:29:72:e2:d8:52:9c:af:2f:01:04:5f: 2f:04:71:9f:15:ae:c8:0d:5d:c4:c0:5a:d1:78:c8: bc:27:49:46:63:5a:b7:ba:0c:49:39:60:74:f9:cd: e6:b7:dc:02:0b:dc:1c:69:08:7b:e2:45:4d:a0:4b: 00:85:80:81:c6:2b:a9:3c:04:8f:cd:d9:8b:13:ac: 71:2d:dd:1c:a6:b3:ff:43:2d:03:b5:72:7d:39:04: 7d:dc:ba:38:cc:f1:ef:00:15:4f:2e:a4:da:1b:24: d1:79:63:7c:7b:38:25:5f:85:2f:d9:0b:be:6f:b8: bb:d8:fe:09:7e:7a:d3:76:34:fd:bc:8e:c9:62:f7: d2:c5:2f:ee:29:ef:3f:b8:96:93:a1:63:07:f7:18: 88:bf:dc:a6:9b:d4:0e:71:90:56:42:02:5c:d8:17: 81:b4:f8:8a:b0:d1:46:a8:7b:ed:b0:f0:c3:01:a3: 16:da:16:6e:dc:98:dd:b7:b2:1e:9f:29:20:2f:7b: 33:f5:7d:d8:76:7f:f8:c4:25:cb:ba:5c:f8:d0:69: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BA:B4:82:A8:0B:C4:EB:A0:68:F9:FD:5F:8B:E5:FC:13:50:82:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/2acf3f1b-eacb-3746-939b-0407dc034a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 192.58.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:22:64:d7:47:79:b3:3b:ea:52:2f:96:cf:92:fd:dd:a9:49: 6c:b5:e3:4a:81:5e:0f:a3:69:14:db:b0:a6:af:19:5a:e6:df: 95:1b:4b:a4:3e:53:d5:9e:d7:50:56:99:5d:29:a6:20:ff:d4: 6c:ad:d9:2b:ba:c7:c2:3d:3b:d2:14:eb:8a:41:46:40:c9:44: 4f:0b:88:da:f3:58:78:22:49:f4:64:52:ba:62:40:f1:35:ab: ca:b4:6b:f5:cc:6a:14:6f:f5:59:aa:15:cc:53:e2:db:ae:9b: a0:7e:d8:30:72:52:8b:fc:98:76:4d:a5:e7:6d:6a:f8:68:4c: 2e:5e:95:6a:a0:0b:e8:a7:2c:b5:16:73:33:11:e6:28:84:cc: 45:f1:eb:27:85:fd:d4:e0:96:9f:6a:49:1a:cd:cb:9c:33:71: f5:69:9c:b9:f4:13:76:e1:67:92:93:ee:f7:5d:0f:6d:39:88: e0:95:9a:39:ad:60:a3:37:62:5c:de:81:e3:cd:8b:29:ef:b7: 31:a4:d0:36:ee:3a:2f:68:79:ce:f5:56:74:d4:6f:a8:13:84: 57:18:2c:ab:55:db:0f:a5:47:fa:6d:37:a1:83:1e:2c:c7:ea: 0f:36:cf:54:e9:ca:3b:24:18:e7:c4:e7:e5:84:b4:9c:60:fb: c8:9b:47:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMRTy6gQQuMycIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MWQyN2IzYmItNGRkNC00ZDViLTlmM2ItMDZlMmNiZTkwNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhomoJKZARJLBE4z4Ba5wujbWeN07xtaLd+l+ /4kEeGQO+BE+78OrJODODue7gHa6KXLi2FKcry8BBF8vBHGfFa7IDV3EwFrReMi8 J0lGY1q3ugxJOWB0+c3mt9wCC9wcaQh74kVNoEsAhYCBxiupPASPzdmLE6xxLd0c prP/Qy0DtXJ9OQR93Lo4zPHvABVPLqTaGyTReWN8ezglX4Uv2Qu+b7i72P4JfnrT djT9vI7JYvfSxS/uKe8/uJaToWMH9xiIv9ymm9QOcZBWQgJc2BeBtPiKsNFGqHvt sPDDAaMW2hZu3Jjdt7IenykgL3sz9X3Ydn/4xCXLulz40Gnl0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG6tIKoC8TroGj5/V+L5fwTUIIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMmFjZjNmMWItZWFjYi0z NzQ2LTkzOWItMDQwN2RjMDM0YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIiZNdHebM76lIvls+S/d2pSWy140qBXg+jaRTbsKavGVrm35UbS6Q+ U9We11BWmV0ppiD/1Gyt2Su6x8I9O9IU64pBRkDJRE8LiNrzWHgiSfRkUrpiQPE1 q8q0a/XMahRv9VmqFcxT4tuum6B+2DByUov8mHZNpedtavhoTC5elWqgC+inLLUW czMR5iiEzEXx6yeF/dTglp9qSRrNy5wzcfVpnLn0E3bhZ5KT7vddD205iOCVmjmt YKM3YlzegePNiynvtzGk0DbuOi9oec71VnTUb6gThFcYLKtV2w+lR/ptN6GDHizH 6g82z1TpyjskGOfE5+WEtJxg+8ibR70= -----END CERTIFICATE-----Generated at Sun Oct 26 08:19:13 2025 by rpki-client