$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa File: 9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa (raw, json) Hash identifier: 0TeemgaG03SCneGi2J0zYbve2ARWtnxxZIngjgfdtGM= Subject key identifier: E5:D5:74:65:7B:F9:5F:75:EF:4F:2E:E0:46:9A:65:2E:9C:D2:9C:30 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B7F521158EC57B5F0DE83A200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 19893 IP address blocks: 140.174.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:11:58:ec:57:b5:f0:de:83:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ed79fefb-4a37-4bbe-ab46-31186f123b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:a5:24:9d:d4:d8:7d:59:4c:68:60:5f:e8: bd:0e:63:d8:40:76:a6:5b:bf:23:b0:ad:de:e5:3f: e6:53:69:0f:53:fa:58:06:5b:0b:f0:ec:70:2b:84: c4:11:17:aa:4b:62:34:05:bb:0f:54:61:9f:06:fa: fa:8e:e6:9a:41:88:b6:4e:02:bd:06:e4:60:31:3b: 94:e9:97:5c:6b:1c:da:7e:6c:20:e7:50:9d:8d:76: a7:56:7c:da:d1:c8:90:ae:e7:56:78:a3:36:21:69: 99:92:ed:1a:c4:0e:09:f6:71:3c:26:8e:24:ae:75: 93:93:70:ae:57:0e:69:71:c5:47:8a:29:61:c4:4b: e2:ea:a8:c7:6d:8b:72:10:86:58:75:45:83:fd:a4: 51:2a:bb:e5:18:4a:7c:69:04:8b:12:bb:04:5f:1f: 8a:8c:a3:27:05:8d:40:10:83:25:3e:43:08:07:df: 50:1b:e0:ad:5c:29:84:58:e5:50:1c:55:10:34:21: 45:aa:7d:c9:80:d4:9f:f8:5c:37:fc:49:e0:fa:8c: d0:0a:36:47:d3:98:14:7e:ca:ab:17:78:0c:4a:ea: 0c:ce:a8:b1:98:6e:1b:f8:cf:25:de:92:63:37:a1: 18:83:85:99:6f:89:fe:f2:dd:60:22:bd:42:a1:a6: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D5:74:65:7B:F9:5F:75:EF:4F:2E:E0:46:9A:65:2E:9C:D2:9C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f2:f8:a8:49:f2:78:a5:cb:41:74:f5:6a:12:37:99:27:37: 8e:68:f6:b8:57:e9:f4:13:96:d4:cf:9a:a6:78:a9:76:52:4e: e2:f1:4b:d8:57:08:40:af:76:f6:75:31:e1:6a:9a:6b:2a:c3: af:1d:52:e9:13:78:94:ce:b6:fd:d0:53:4c:8c:35:1e:6e:16: 75:59:9d:86:1f:a7:4d:5d:d4:bc:59:ab:86:82:bb:cc:1a:4b: c5:68:3b:12:7d:d0:e5:90:d2:fb:61:b2:37:49:3c:d8:90:d3: ee:63:99:dd:fc:8a:58:b3:96:1d:f7:f1:06:7b:43:84:b8:b7: 61:4b:ba:af:1e:3f:f1:29:c0:67:4d:2c:2f:e4:41:1d:41:ef: 80:3c:4d:1e:4c:4b:b9:37:c7:95:a1:ab:46:1e:8d:63:9f:66: 6a:db:e4:22:5e:c8:62:bc:7c:3c:b8:72:4a:c0:09:b7:c7:84: 6b:48:31:9c:c4:92:52:87:96:ad:06:14:9d:5f:83:70:c1:1d: eb:1b:d8:18:d0:a1:7f:7e:9a:2a:c0:38:6e:1d:c5:ca:40:b2: 86:8b:98:75:9c:06:3c:a4:4c:9c:2b:86:4e:b6:88:44:6a:b5: ed:dc:a8:08:2b:55:84:b8:ab:1a:8f:2a:3a:8a:a7:a8:da:82: 0c:eb:3b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhFY7Fe18N6DogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWQ3OWZlZmItNGEzNy00YmJlLWFiNDYtMzExODZmMTIzYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtulJJ3U2H1ZTGhgX+i9DmPYQHamW78jsK3e 5T/mU2kPU/pYBlsL8OxwK4TEEReqS2I0BbsPVGGfBvr6juaaQYi2TgK9BuRgMTuU 6Zdcaxzafmwg51CdjXanVnza0ciQrudWeKM2IWmZku0axA4J9nE8Jo4krnWTk3Cu Vw5pccVHiilhxEvi6qjHbYtyEIZYdUWD/aRRKrvlGEp8aQSLErsEXx+KjKMnBY1A EIMlPkMIB99QG+CtXCmEWOVQHFUQNCFFqn3JgNSf+Fw3/Eng+ozQCjZH05gUfsqr F3gMSuoMzqixmG4b+M8l3pJjN6EYg4WZb4n+8t1gIr1Coab4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXVdGV7+V91708u4EaaZS6c0pwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWQ1M2EwYjgtYjZmOS0z NWMzLTlhOWQtOTQwMWNjMmMxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTy+KhJ8nily0F09WoSN5knN45o9rhX6fQTltTPmqZ4qXZSTuLxS9hX CECvdvZ1MeFqmmsqw68dUukTeJTOtv3QU0yMNR5uFnVZnYYfp01d1LxZq4aCu8wa S8VoOxJ90OWQ0vthsjdJPNiQ0+5jmd38ilizlh338QZ7Q4S4t2FLuq8eP/EpwGdN LC/kQR1B74A8TR5MS7k3x5Whq0YejWOfZmrb5CJeyGK8fDy4ckrACbfHhGtIMZzE klKHlq0GFJ1fg3DBHesb2BjQoX9+mirAOG4dxcpAsoaLmHWcBjykTJwrhk62iERq te3cqAgrVYS4qxqPKjqKp6jaggzrO/0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:02 2025 by rpki-client