$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa File: afacf306-7cf6-36d2-a604-be3e1443c68b.roa (raw, json) Hash identifier: 06mZwdHaG8ZlZWM6nj2lZ7FcDIoiYbgVMgbyfKmVeV8= Subject key identifier: AB:32:B1:75:F6:60:7A:DF:6C:00:31:7B:C4:34:CD:5F:9D:6A:25:6D Certificate issuer: /CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49 Certificate serial: 010D0C9F4328584AFC1BF23B5B353CDF86E13A00 Authority key identifier: E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 399266 IP address blocks: 165.140.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:3b:5b:35:3c:df:86:e1:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=b3f24604-34ec-4f34-8bfb-eca427513a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:e0:ac:72:9b:ce:90:37:e6:3f:ea:76:11: c0:e7:a7:dd:98:8a:af:e1:41:79:0a:61:3e:85:41: 92:bd:fc:b0:6c:5a:27:a4:0f:5a:fd:b9:91:d2:4f: 6b:de:7e:86:df:f0:87:57:7f:30:3e:42:e7:e4:9a: 59:ea:81:cf:82:57:3c:e0:76:5c:be:a2:4b:88:d3: 48:29:ef:80:69:8a:10:92:22:fc:c8:39:bc:8d:4b: 25:c2:d1:d2:bb:96:54:ce:2a:d0:dd:a6:d4:83:ed: 21:36:e1:e8:02:81:8b:7f:58:40:6b:30:c7:63:7a: 9e:ee:bf:54:90:c6:4c:71:82:42:a8:f0:97:59:a8: 2d:ff:b9:96:6b:9e:da:0f:ee:bc:63:a7:3b:81:51: e4:da:8a:7c:92:1a:fc:58:06:03:1e:55:9d:a8:a8: 97:43:89:2d:43:d3:09:ac:9e:20:08:c8:dc:b8:e9: ab:80:26:3c:8a:e6:20:c6:00:a4:3f:25:51:ff:ee: 4e:c6:1e:c3:8b:47:32:ce:5c:d7:55:8e:f5:5f:9e: c2:96:b1:59:0a:21:61:53:42:a3:8b:d5:f4:06:fb: 9b:18:08:a5:46:5a:16:64:5e:99:22:0d:ea:12:8e: fe:0f:6a:49:50:00:07:4f:d1:9d:d1:cf:60:a4:70: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:B1:75:F6:60:7A:DF:6C:00:31:7B:C4:34:CD:5F:9D:6A:25:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/afacf306-7cf6-36d2-a604-be3e1443c68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl X509v3 Authority Key Identifier: keyid:E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer sbgp-ipAddrBlock: critical IPv4: 165.140.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:15:47:60:ea:eb:8c:e6:fc:f8:98:f1:49:a5:a0:97:7a:f6: 6e:29:a6:dc:df:89:7e:28:7b:ea:a6:c0:bc:3f:c0:49:b2:c0: 45:17:f2:da:b0:9e:3b:89:14:38:82:95:19:41:e9:17:c7:8c: 26:9d:5c:1c:31:d8:3e:ea:34:27:c9:f3:9e:5e:2e:cf:f7:af: 89:33:c0:55:66:a4:32:0f:13:8e:00:50:fe:93:ba:b2:67:6d: 75:b3:b2:2f:21:73:7c:69:b4:f4:b6:f8:bc:28:34:a3:e4:f7: f0:e8:d4:e2:c8:53:d8:e8:75:df:dd:4a:8a:4c:91:de:4a:ec: d2:1b:95:1f:9d:6c:02:8a:90:ef:c5:70:69:88:d4:01:f5:5f: 4d:23:b6:d1:34:ac:9c:9d:08:d2:64:00:95:99:c0:b7:8d:9c: 9f:9c:17:d6:7d:0c:e4:7a:f1:9e:1a:bb:e7:61:84:01:59:ee: 1d:4b:4a:a8:4b:df:23:be:ab:d5:50:0a:f9:68:ea:1f:8b:3f: de:16:c6:62:66:db:e9:23:17:f8:7e:6d:45:11:b5:75:2d:33: f4:f2:ce:fc:da:5c:ea:3e:b1:aa:bd:37:5c:e2:88:fa:00:cf: bf:27:f8:39:65:28:e3:c7:a8:ff:0b:42:24:b1:80:c8:18:ba: ec:48:92:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/I7WzU834bhOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1ZWYwMmItOThhZi00MWRjLWI4NzQtMjNmN2U3NWI0 ZTQ5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YjNmMjQ2MDQtMzRlYy00ZjM0LThiZmItZWNhNDI3NTEzYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTHgrHKbzpA35j/qdhHA56fdmIqv4UF5CmE+ hUGSvfywbFonpA9a/bmR0k9r3n6G3/CHV38wPkLn5JpZ6oHPglc84HZcvqJLiNNI Ke+AaYoQkiL8yDm8jUslwtHSu5ZUzirQ3abUg+0hNuHoAoGLf1hAazDHY3qe7r9U kMZMcYJCqPCXWagt/7mWa57aD+68Y6c7gVHk2op8khr8WAYDHlWdqKiXQ4ktQ9MJ rJ4gCMjcuOmrgCY8iuYgxgCkPyVR/+5Oxh7Di0cyzlzXVY71X57ClrFZCiFhU0Kj i9X0BvubGAilRloWZF6ZIg3qEo7+D2pJUAAHT9Gd0c9gpHCUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsysXX2YHrfbAAxe8Q0zV+daiVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjVl ZjAyYi05OGFmLTQxZGMtYjg3NC0yM2Y3ZTc1YjRlNDkvYWZhY2YzMDYtN2NmNi0z NmQyLWE2MDQtYmUzZTE0NDNjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1ZWYwMmItOThhZi00MWRjLWI4 NzQtMjNmN2U3NWI0ZTQ5LzBmNWVmMDJiLTk4YWYtNDFkYy1iODc0LTIzZjdlNzVi NGU0OS5jcmwwHwYDVR0jBBgwFoAU5mdVO/EFbGEMUo8/pKfHSpZdkBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjVlZjAyYi05OGFmLTQxZGMtYjg3NC0yM2Y3 ZTc1YjRlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwVR2Dq64zm/PiY8UmloJd69m4pptzfiX4oe+qmwLw/wEmywEUX8tqw njuJFDiClRlB6RfHjCadXBwx2D7qNCfJ855eLs/3r4kzwFVmpDIPE44AUP6TurJn bXWzsi8hc3xptPS2+LwoNKPk9/Do1OLIU9jodd/dSopMkd5K7NIblR+dbAKKkO/F cGmI1AH1X00jttE0rJydCNJkAJWZwLeNnJ+cF9Z9DOR68Z4au+dhhAFZ7h1LSqhL 3yO+q9VQCvlo6h+LP94WxmJm2+kjF/h+bUURtXUtM/TyzvzaXOo+saq9N1ziiPoA z78n+DllKOPHqP8LQiSxgMgYuuxIkq4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:48 2025 by rpki-client