$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa File: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (raw, json) Hash identifier: r4JDyeenICzWS+HiBh8mrqq5bP4JhN8kxsKso/MPd0Q= Subject key identifier: 27:51:F2:73:FC:F0:5A:FB:04:A1:D6:27:2C:B9:DA:EA:4B:AB:4F:FA Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F4328584B41E70D9BAD9D76B3EC3F8040 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 22941 IP address blocks: 168.245.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0d:9b:ad:9d:76:b3:ec:3f:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=946d0935-2447-4a2d-b09f-3284df8baaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:70:8e:7d:c2:bf:aa:16:34:bc:01:f5:c9: 09:aa:36:2f:08:8d:b4:26:0b:25:41:5e:ad:c9:70: de:89:1a:6c:48:d8:88:f9:7e:1d:b0:3e:ac:fb:f5: a6:11:15:34:b9:45:eb:ea:89:31:d2:bd:29:f1:30: 85:0b:87:93:ba:f5:df:4e:6e:f5:32:b3:ca:4b:8e: e8:84:f0:e2:39:fa:e0:31:26:3e:ec:bd:b7:a4:b3: 3a:93:65:17:0b:a0:1f:b9:68:bf:7a:db:3e:b8:2e: fb:87:40:a1:cb:d8:2e:4b:6d:31:27:c5:19:b9:8e: 27:ba:cb:3d:75:a5:3e:2c:c1:bb:81:fb:b4:8b:67: f4:5e:b2:72:9c:93:50:b9:8f:4d:a7:68:af:32:02: d8:c5:ce:d1:58:0d:af:0f:ff:52:93:57:8d:62:60: 3b:2b:ad:24:b3:02:9e:06:15:f8:f8:f6:fa:9d:e9: fe:28:a5:f3:e0:9e:7d:72:c0:18:36:5e:f3:fc:bf: 87:6a:75:68:d8:0b:55:48:bd:36:ef:e8:e6:3b:8f: 63:a6:0e:15:59:c9:94:1b:6d:33:98:c7:75:06:6c: 73:e1:ef:f5:db:e3:bb:1c:3b:32:0f:73:2e:fa:61: 0d:87:b3:f2:72:a1:71:bd:f5:e5:7d:88:e3:17:63: f5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:F2:73:FC:F0:5A:FB:04:A1:D6:27:2C:B9:DA:EA:4B:AB:4F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f9:c2:cd:06:f8:3d:06:f6:4f:3b:f2:81:fc:5b:6b:fd:d4: 6d:ec:37:47:f1:fd:fa:11:e6:20:10:d1:8c:22:bf:95:15:41: fe:5f:ff:76:b1:22:fb:ee:1a:08:96:f8:2e:8f:6a:fa:9f:c6: d1:85:9a:3b:bb:9d:8b:a6:65:40:1a:1f:f1:bc:10:b1:9f:cb: 9c:a0:b0:01:17:0e:f1:81:9e:5d:c3:3d:23:66:e6:3c:f7:4a: 6d:27:73:ae:10:98:89:12:cc:f4:e0:9d:1a:0b:ef:7a:5e:80: ac:84:cf:eb:fa:cd:08:c8:72:99:aa:5e:6e:f1:e5:b6:35:82: 2c:e8:12:6f:54:48:30:a9:cb:4a:a1:e5:09:f9:64:38:99:df: 1a:48:06:cb:87:b5:41:db:9b:ef:52:60:d7:f2:1a:81:e7:9d: b1:09:34:62:a0:2f:c0:b1:0f:05:b8:e7:00:e7:45:0c:db:87: 83:49:e0:54:53:a2:56:f4:af:6f:13:32:90:7b:ff:55:36:3a: 08:78:47:3c:6d:a7:61:44:13:cd:72:d0:6f:ea:a0:91:4e:2d: 33:48:68:32:21:e6:26:1c:83:8f:1d:51:28:fb:f5:46:2e:8e: 20:e1:aa:7e:7f:a3:ed:7f:5e:1b:ea:9e:e3:4a:ea:f7:91:83: 15:3f:5c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5w2brZ12s+w/gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OTQ2ZDA5MzUtMjQ0Ny00YTJkLWIwOWYtMzI4NGRmOGJhYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhglwjn3Cv6oWNLwB9ckJqjYvCI20JgslQV6t yXDeiRpsSNiI+X4dsD6s+/WmERU0uUXr6okx0r0p8TCFC4eTuvXfTm71MrPKS47o hPDiOfrgMSY+7L23pLM6k2UXC6AfuWi/ets+uC77h0Chy9guS20xJ8UZuY4nuss9 daU+LMG7gfu0i2f0XrJynJNQuY9Np2ivMgLYxc7RWA2vD/9Sk1eNYmA7K60kswKe BhX4+Pb6nen+KKXz4J59csAYNl7z/L+HanVo2AtVSL027+jmO49jpg4VWcmUG20z mMd1Bmxz4e/12+O7HDsyD3Mu+mENh7PycqFxvfXlfYjjF2P1MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdR8nP88Fr7BKHWJyy52upLq0/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvNTM5YjVlZTUtN2RkMi0z Yjk4LWI3OWItZThhZGU4MzI1MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG35ws0G+D0G9k878oH8W2v91G3sN0fx/foR5iAQ0Ywiv5UVQf5f/3ax IvvuGgiW+C6PavqfxtGFmju7nYumZUAaH/G8ELGfy5ygsAEXDvGBnl3DPSNm5jz3 Sm0nc64QmIkSzPTgnRoL73pegKyEz+v6zQjIcpmqXm7x5bY1gizoEm9USDCpy0qh 5Qn5ZDiZ3xpIBsuHtUHbm+9SYNfyGoHnnbEJNGKgL8CxDwW45wDnRQzbh4NJ4FRT olb0r28TMpB7/1U2Ogh4Rzxtp2FEE81y0G/qoJFOLTNIaDIh5iYcg48dUSj79UYu jiDhqn5/o+1/XhvqnuNK6veRgxU/XAw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:45 2025 by rpki-client