$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/58e44b25-f16c-3846-8267-2e36f1e8967c.roa File: 58e44b25-f16c-3846-8267-2e36f1e8967c.roa (raw, json) Hash identifier: ZYrlP8Skrmmqpur7MF+CrXdRvz+ylGYSAUUqnjcKP6U= Subject key identifier: 40:DC:60:5F:2E:9B:2E:A7:ED:0F:40:D2:F3:22:E3:19:8E:40:80:B2 Certificate issuer: /CN=d46946eb-f29d-4f00-bfbe-49adb9ecc76b Certificate serial: 010D0C9F4328584B8EACDA55DC17A4B15A378F00 Authority key identifier: A3:C4:57:39:CA:27:F2:06:2E:68:B8:E2:53:57:3C:3A:3E:47:43:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/58e44b25-f16c-3846-8267-2e36f1e8967c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22847 IP address blocks: 139.140.0.0/16 maxlen: 17 2602:fd40::/36 maxlen: 48 2620:0:2b70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:da:55:dc:17:a4:b1:5a:37:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46946eb-f29d-4f00-bfbe-49adb9ecc76b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a7d6df18-f95b-425d-a2d9-2b324c5e30a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:e0:d6:63:08:d3:d7:99:fb:d1:1f:06:41: 74:c5:88:4f:bf:c0:98:b1:c1:9b:f6:48:7c:6d:db: 3d:ee:6a:94:4d:8c:bc:d3:55:a1:08:97:e1:4e:d6: be:37:46:9d:f1:22:6a:01:f7:c0:85:25:9f:6d:4a: c0:97:23:93:75:04:76:8f:0b:95:da:7d:c8:81:d5: d3:a1:88:b4:6b:fc:81:96:0a:40:38:cf:71:68:6e: fb:3f:7e:f2:46:5c:33:7c:3a:2b:42:6d:e6:02:98: 75:85:43:8a:e1:4f:53:68:71:06:97:3f:87:c9:26: 5e:fb:65:07:2f:4b:02:11:25:99:e2:e7:42:c2:3d: 10:cc:dd:01:b0:51:60:82:12:c2:14:07:a0:5d:ac: 95:74:b2:7b:ce:d9:f3:f9:6b:39:c6:d6:2f:8c:7a: 62:02:d0:aa:ed:68:92:0f:fb:f6:e8:85:36:42:d8: 71:a0:42:ff:ae:6c:de:4a:64:41:5c:3a:cb:9e:14: 63:86:e5:1c:9d:b4:14:80:51:ed:ba:7e:40:29:21: de:4d:58:2a:ad:1a:4d:f5:1a:2c:9a:2c:17:54:93: f0:20:05:16:49:f6:e6:cd:8c:a2:86:33:01:d0:2f: c6:62:f9:b2:61:a7:89:cb:bb:11:69:69:1b:94:2f: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:60:5F:2E:9B:2E:A7:ED:0F:40:D2:F3:22:E3:19:8E:40:80:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/58e44b25-f16c-3846-8267-2e36f1e8967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.crl X509v3 Authority Key Identifier: keyid:A3:C4:57:39:CA:27:F2:06:2E:68:B8:E2:53:57:3C:3A:3E:47:43:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d46946eb-f29d-4f00-bfbe-49adb9ecc76b.cer sbgp-ipAddrBlock: critical IPv4: 139.140.0.0/16 IPv6: 2602:fd40::/36 2620:0:2b70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:0b:88:a0:7d:f0:94:9e:04:3a:92:9f:21:01:d8:d4:aa:ca: d8:d7:f4:68:6e:41:44:58:13:66:d8:03:b1:3f:57:3d:42:ee: c1:0a:43:bd:c6:39:70:8a:81:3b:dc:07:8a:44:cc:4a:35:f3: be:db:64:a8:a4:a3:6e:c4:16:09:31:77:7a:17:26:1c:8f:44: db:7a:ad:e7:af:25:8e:52:33:cf:dd:2c:8e:ca:d2:74:43:ec: cd:98:26:0f:83:f8:94:8e:d6:26:e2:49:61:da:35:06:59:c6: 7c:5b:6a:a7:ea:c5:b2:5d:d6:6b:8e:68:e3:42:a8:9b:cc:9c: 5d:53:f8:f8:0e:d8:bc:d1:1d:b6:ec:cf:db:b9:28:2a:12:26: 8a:c0:44:3c:e0:86:b1:00:e2:ba:de:e5:24:25:d7:64:36:72: 0e:bb:0d:d6:e6:76:52:2b:fa:38:0d:43:5b:be:3c:5f:e1:39: a3:a4:d3:ff:06:bb:bf:f0:6f:f9:d5:6f:43:42:85:85:d6:69: 41:40:86:b0:72:60:03:76:b3:e6:bf:84:0c:68:bb:7f:a3:c5: 56:0c:f6:aa:ad:ec:a2:89:42:4f:77:64:d6:fa:a6:91:23:d5: ab:22:43:36:d4:0d:47:85:f4:8b:a8:24:ea:31:52:d2:d9:d5: 83:6e:7d:b3 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEuOrNpV3BeksVo3jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ2OTQ2ZWItZjI5ZC00ZjAwLWJmYmUtNDlhZGI5ZWNj NzZiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTdkNmRmMTgtZjk1Yi00MjVkLWEyZDktMmIzMjRjNWUzMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarg1mMI09eZ+9EfBkF0xYhPv8CYscGb9kh8 bds97mqUTYy801WhCJfhTta+N0ad8SJqAffAhSWfbUrAlyOTdQR2jwuV2n3IgdXT oYi0a/yBlgpAOM9xaG77P37yRlwzfDorQm3mAph1hUOK4U9TaHEGlz+HySZe+2UH L0sCESWZ4udCwj0QzN0BsFFgghLCFAegXayVdLJ7ztnz+Ws5xtYvjHpiAtCq7WiS D/v26IU2QthxoEL/rmzeSmRBXDrLnhRjhuUcnbQUgFHtun5AKSHeTVgqrRpN9Ros miwXVJPwIAUWSfbmzYyihjMB0C/GYvmyYaeJy7sRaWkblC8FFwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFEDcYF8umy6n7Q9A0vMi4xmOQICyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDY5 NDZlYi1mMjlkLTRmMDAtYmZiZS00OWFkYjllY2M3NmIvNThlNDRiMjUtZjE2Yy0z ODQ2LTgyNjctMmUzNmYxZTg5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ2OTQ2ZWItZjI5ZC00ZjAwLWJm YmUtNDlhZGI5ZWNjNzZiL2Q0Njk0NmViLWYyOWQtNGYwMC1iZmJlLTQ5YWRiOWVj Yzc2Yi5jcmwwHwYDVR0jBBgwFoAUo8RXOcon8gYuaLjiU1c8Oj5HQ/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDY5NDZlYi1mMjlkLTRmMDAtYmZiZS00OWFk YjllY2M3NmIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjALBAIAATAFAwMAi4wwFwQC AAIwEQMGBCYC/UAAAwcEJiAAACtwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADkLiKB98JSeBDqSnyEB2NSq ytjX9GhuQURYE2bYA7E/Vz1C7sEKQ73GOXCKgTvcB4pEzEo1877bZKiko27EFgkx d3oXJhyPRNt6reevJY5SM8/dLI7K0nRD7M2YJg+D+JSO1ibiSWHaNQZZxnxbaqfq xbJd1muOaONCqJvMnF1T+PgO2LzRHbbsz9u5KCoSJorARDzghrEA4rre5SQl12Q2 cg67DdbmdlIr+jgNQ1u+PF/hOaOk0/8Gu7/wb/nVb0NChYXWaUFAhrByYAN2s+a/ hAxou3+jxVYM9qqt7KKJQk93ZNb6ppEj1asiQzbUDUeF9IuoJOoxUtLZ1YNufbM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:00 2025 by rpki-client