$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90fc7ddd-072b-3da6-84a3-e28d1b235473.roa File: 90fc7ddd-072b-3da6-84a3-e28d1b235473.roa (raw, json) Hash identifier: hawssJ9Id0Qc5FHfb8hlX6shy30D62RAmqCmGmrtgFM= Subject key identifier: B0:27:9D:5B:B5:02:D3:89:DD:BE:10:35:7E:E9:C5:4E:F6:18:FC:9F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B7F5211B51419D2AA0E0C3BE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90fc7ddd-072b-3da6-84a3-e28d1b235473.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 204670 IP address blocks: 140.174.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:11:b5:14:19:d2:aa:0e:0c:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ed85f960-4f01-42be-abc0-19e3ea4af78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:84:84:8a:52:2d:76:41:17:6f:08:de:d6: 91:b4:51:53:bf:45:2e:4b:96:1a:da:60:ab:d6:3d: 7c:99:66:10:00:ee:0d:0a:1c:65:c2:db:de:f0:df: 43:7c:ab:5f:18:42:81:2c:fd:d3:03:52:b4:ec:f2: b2:22:e6:b5:53:19:a8:49:f5:25:3b:c2:7c:2a:e3: 2b:05:f9:58:2a:d5:86:11:16:d1:60:d5:15:d0:a2: c4:cd:51:df:9e:43:7e:f2:98:46:5e:ed:22:1f:9c: 57:67:a5:2d:99:79:6b:ed:59:67:b1:bc:d9:41:95: f3:42:a3:df:0f:75:4b:ef:84:44:2e:77:b6:28:3e: 9d:41:8c:60:25:c3:63:4d:16:38:43:62:22:50:fa: 83:11:3e:b5:ad:f6:8a:9b:5b:8b:cf:c5:da:9f:6e: 45:37:61:62:74:30:f2:b8:cb:54:1f:f9:5c:1b:3f: 2f:2a:88:e4:03:d8:3a:e2:5e:33:0d:45:89:55:4f: 13:07:54:67:8a:34:71:36:b2:d6:77:83:5b:0b:dc: 51:d8:ac:68:4f:27:03:81:bb:b0:c5:43:68:7b:f3: 71:05:87:20:bb:ac:64:59:08:61:a1:e0:eb:53:e6: 1a:ec:e1:11:09:b5:71:65:45:b2:d4:9b:35:7b:b3: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:27:9D:5B:B5:02:D3:89:DD:BE:10:35:7E:E9:C5:4E:F6:18:FC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90fc7ddd-072b-3da6-84a3-e28d1b235473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:7f:07:05:1e:de:72:86:d3:e6:e7:77:8f:a7:33:d4:0a:64: ca:c1:19:03:de:3d:d6:87:cf:47:fd:80:00:d7:1a:8d:bf:a9: 1f:a1:6c:77:63:1e:2a:43:83:2a:1a:8b:b8:b9:10:7a:1b:01: b5:59:ae:2f:e0:6f:aa:62:18:e4:1e:10:16:6d:86:bd:3e:1e: 68:e7:d5:00:35:45:e6:c0:00:d4:c2:1f:a0:0c:3c:a9:b9:df: c7:5a:03:6e:4d:ff:ba:16:a1:cd:4a:bc:87:19:86:79:1b:d6: 1d:63:10:42:4f:b7:66:9b:90:9a:9b:bf:e1:e2:b7:83:1c:bd: f0:6b:3a:ab:2c:89:94:0a:5a:86:7f:4d:46:18:27:51:54:b5: 07:a8:20:47:d5:c6:eb:68:51:bb:5a:a4:f3:e4:91:82:f9:38: c4:61:a3:6d:98:26:55:73:6c:5f:c6:78:ee:57:ca:36:ab:51: f0:6d:83:fd:d4:3e:9c:b1:d0:45:f7:2c:45:35:6e:f6:4f:1e: c8:ad:15:8c:a5:09:36:f2:69:9c:16:48:df:6e:22:c8:f2:11: 0a:09:71:85:a2:73:ac:a3:ad:6a:c1:4f:8f:f0:a4:e3:7e:4f: fc:8c:60:c0:9f:c3:77:0d:c4:3d:80:f3:0f:e0:94:55:15:1b: ef:d6:49:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhG1FBnSqg4MO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWQ4NWY5NjAtNGYwMS00MmJlLWFiYzAtMTllM2VhNGFmNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKWEhIpSLXZBF28I3taRtFFTv0UuS5Ya2mCr 1j18mWYQAO4NChxlwtve8N9DfKtfGEKBLP3TA1K07PKyIua1UxmoSfUlO8J8KuMr BflYKtWGERbRYNUV0KLEzVHfnkN+8phGXu0iH5xXZ6UtmXlr7VlnsbzZQZXzQqPf D3VL74RELne2KD6dQYxgJcNjTRY4Q2IiUPqDET61rfaKm1uLz8Xan25FN2FidDDy uMtUH/lcGz8vKojkA9g64l4zDUWJVU8TB1RnijRxNrLWd4NbC9xR2KxoTycDgbuw xUNoe/NxBYcgu6xkWQhhoeDrU+Ya7OERCbVxZUWy1Js1e7MrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAnnVu1AtOJ3b4QNX7pxU72GPyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTBmYzdkZGQtMDcyYi0z ZGE2LTg0YTMtZTI4ZDFiMjM1NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ/BwUe3nKG0+bnd4+nM9QKZMrBGQPePdaHz0f9gADXGo2/qR+hbHdj HipDgyoai7i5EHobAbVZri/gb6piGOQeEBZthr0+Hmjn1QA1RebAANTCH6AMPKm5 38daA25N/7oWoc1KvIcZhnkb1h1jEEJPt2abkJqbv+Hit4McvfBrOqssiZQKWoZ/ TUYYJ1FUtQeoIEfVxutoUbtapPPkkYL5OMRho22YJlVzbF/GeO5XyjarUfBtg/3U Ppyx0EX3LEU1bvZPHsitFYylCTbyaZwWSN9uIsjyEQoJcYWic6yjrWrBT4/wpON+ T/yMYMCfw3cNxD2A8w/glFUVG+/WSYY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:38 2025 by rpki-client