$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa File: 2cf973ac-9292-3942-9252-f179184447a4.roa (raw, json) Hash identifier: UjiC5cTEfl/v0oFkn733sOryuHBkVY7163C5viUrqXA= Subject key identifier: 53:EB:73:98:DD:84:55:25:D4:E5:30:B8:CD:81:D8:B0:8A:5E:53:70 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F4328584B4FDC788515C1FF785211B680 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 1002 IP address blocks: 165.140.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:78:85:15:c1:ff:78:52:11:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=25fed521-2331-4590-a1e0-296de86b8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:c7:c9:69:56:a0:64:ec:26:72:da:6a:88: 6d:ea:83:66:57:15:ef:42:ef:9b:a1:a3:e7:de:43: f3:1f:b5:0a:dc:57:2b:3a:a6:40:57:3b:e7:8d:33: 37:0b:da:23:e5:f5:a7:a5:56:fc:11:6c:db:80:60: 7e:be:28:2b:84:51:e8:b2:d5:99:c8:22:39:64:04: 85:12:db:b1:b2:00:1d:9b:63:2b:0a:51:8f:77:a4: ab:99:74:40:a8:c5:10:90:4b:90:39:57:9b:58:ee: a7:3c:fd:78:ed:36:9e:c8:6b:3a:d9:f0:42:fb:53: 4f:a4:2e:b4:0e:c4:11:fc:0a:88:89:e7:73:4c:81: ea:4a:e9:54:78:24:0e:38:16:4e:3e:e0:b8:ca:45: 9b:75:d9:16:54:50:aa:48:51:78:8a:01:be:d9:a9: d7:2d:5b:a8:df:b5:01:13:b9:97:85:ec:05:e3:2a: cb:74:84:a4:07:bb:55:18:da:f9:d1:40:3f:07:85: c6:c8:4d:03:d5:e4:34:d8:6d:84:f6:e1:81:c5:f6: 63:d8:47:04:f5:64:6f:09:bd:c5:8f:23:6b:2b:22: 0d:77:71:de:b0:5e:1e:97:82:c4:8a:42:c7:0c:fa: 15:6b:99:4f:a4:01:a8:08:12:ab:a9:79:25:a9:0a: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:73:98:DD:84:55:25:D4:E5:30:B8:CD:81:D8:B0:8A:5E:53:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:03:0b:c6:49:c0:94:6a:4b:8c:0b:5d:fc:c6:11:f4:b1:dc: b0:82:4e:fe:0d:2b:c3:bb:de:cf:f8:85:2a:6d:88:4c:c4:24: 7c:de:09:38:c4:3b:f9:d5:b4:2d:d2:f6:2c:27:b7:5f:9e:4e: 62:59:55:01:a1:d0:b3:a8:1a:3d:90:cc:87:b3:82:07:c9:6b: 2a:89:39:77:5f:3f:53:bf:c8:bb:32:74:81:6b:07:65:8a:d9: 6c:f2:c9:47:6a:e1:c3:7c:32:39:f9:f3:64:f2:f1:e5:d2:be: 7c:18:e8:9a:70:0c:76:24:1f:a8:50:83:2e:19:3c:83:4a:06: 2c:63:6c:d7:7a:c3:20:a0:58:60:b5:97:91:96:5a:d8:c3:02: bf:e0:54:8d:d6:c6:13:80:12:31:1e:61:0b:b2:0a:24:c6:f5: 24:3c:65:72:ca:7f:11:b7:d4:7f:3f:7d:f0:21:31:20:ce:14: 83:b1:7b:67:2c:49:4b:a0:ad:91:27:23:df:92:9a:94:0a:38: 01:9c:29:35:e6:68:0c:0d:b1:f3:bb:b0:3c:0e:ec:cf:a0:b9: 8a:28:08:d3:6e:16:93:8e:e3:d6:a7:41:d5:8a:67:77:3b:01: 7a:9a:10:48:8c:3a:f4:86:52:89:28:81:4b:8f:11:94:72:d6: 5d:10:73:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HiFFcH/eFIRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjVmZWQ1MjEtMjMzMS00NTkwLWExZTAtMjk2ZGU4NmI4NjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm/HyWlWoGTsJnLaaoht6oNmVxXvQu+boaPn 3kPzH7UK3FcrOqZAVzvnjTM3C9oj5fWnpVb8EWzbgGB+vigrhFHostWZyCI5ZASF EtuxsgAdm2MrClGPd6SrmXRAqMUQkEuQOVebWO6nPP147TaeyGs62fBC+1NPpC60 DsQR/AqIiedzTIHqSulUeCQOOBZOPuC4ykWbddkWVFCqSFF4igG+2anXLVuo37UB E7mXhewF4yrLdISkB7tVGNr50UA/B4XGyE0D1eQ02G2E9uGBxfZj2EcE9WRvCb3F jyNrKyINd3HesF4el4LEikLHDPoVa5lPpAGoCBKrqXklqQok7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPrc5jdhFUl1OUwuM2B2LCKXlNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvMmNmOTczYWMtOTI5Mi0z OTQyLTkyNTItZjE3OTE4NDQ0N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4DC8ZJwJRqS4wLXfzGEfSx3LCCTv4NK8O73s/4hSptiEzEJHzeCTjE O/nVtC3S9iwnt1+eTmJZVQGh0LOoGj2QzIezggfJayqJOXdfP1O/yLsydIFrB2WK 2WzyyUdq4cN8Mjn582Ty8eXSvnwY6JpwDHYkH6hQgy4ZPINKBixjbNd6wyCgWGC1 l5GWWtjDAr/gVI3WxhOAEjEeYQuyCiTG9SQ8ZXLKfxG31H8/ffAhMSDOFIOxe2cs SUugrZEnI9+SmpQKOAGcKTXmaAwNsfO7sDwO7M+guYooCNNuFpOO49anQdWKZ3c7 AXqaEEiMOvSGUokogUuPEZRy1l0Qc7s= -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:16 2025 by rpki-client