$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa File: 158788ef-52cb-31cc-9ac3-50df5a8f9263.roa (raw, json) Hash identifier: xSraz99W3ppswn8cqFuEVb4+MVkV6xcOQkuJMIQAC0A= Subject key identifier: A5:FC:B7:6E:9B:D9:02:09:95:13:B2:C9:06:C3:C6:71:CB:42:10:36 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584B8CC76411A5972221669D0600 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 211440 IP address blocks: 140.235.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:c7:64:11:a5:97:22:21:66:9d:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=e2612fdb-ee72-4a2d-9a09-b01ba0366eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:ac:9d:07:04:4c:61:7a:56:00:02:9d:f9: f1:c4:3e:e5:a2:e6:3e:5e:bd:f4:8c:23:f3:3f:47: 02:bc:67:69:f4:8d:07:9c:58:6a:8c:ef:b6:ba:94: 43:06:36:5f:d8:f5:76:7b:b0:90:a1:af:15:fb:74: ea:e3:a7:f6:f9:01:99:7f:d1:66:6d:83:5b:07:db: 37:99:ac:43:20:04:67:02:99:2a:5f:66:ed:fa:62: f1:5a:bd:4b:18:7d:7a:78:4d:1a:f4:75:29:10:d0: 04:39:17:dc:cf:b8:ab:16:9b:a6:1b:4f:f8:d2:f0: c1:fa:c7:23:6a:a9:43:e5:68:68:42:13:79:86:4c: 10:d0:90:e8:dc:04:b1:47:51:ad:41:1e:d5:46:22: 2d:92:7b:a6:d1:4d:aa:60:85:ab:d9:c1:25:67:eb: 0f:a9:19:f9:91:4d:69:38:e4:5a:bb:cc:ac:99:c0: 4c:a8:90:b1:59:a2:99:b3:62:12:f5:c9:d9:39:b6: 53:54:82:05:a1:81:ec:c4:cb:75:02:2a:97:1c:8d: 51:b4:47:22:ef:b8:bb:22:96:60:01:6d:ae:7b:6a: 3a:59:80:cd:76:e5:24:6d:23:45:17:2d:3c:6c:3f: 45:1c:01:58:99:99:e2:98:f1:62:46:26:99:ed:42: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:B7:6E:9B:D9:02:09:95:13:B2:C9:06:C3:C6:71:CB:42:10:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f5:26:41:60:39:c0:cf:bd:02:92:cc:1d:9c:25:85:fc:cb: 92:19:f8:34:58:1d:ce:ef:cf:bf:6b:4a:4f:02:87:c2:31:1f: 34:ae:2d:7f:94:bd:85:4d:17:4f:f8:cd:3f:bb:6a:90:d4:b1: b2:e6:38:8d:a3:9b:d1:02:9f:e4:65:4d:f1:76:3f:11:f9:14: 5f:73:a3:5a:19:08:79:c9:9c:64:90:e8:87:b3:dc:b0:41:7d: 7b:18:0f:7d:4e:6d:54:22:4e:22:27:b6:b3:d5:c8:b7:4d:2b: a7:f4:ba:99:cd:a9:8d:17:dc:84:03:8d:df:57:b2:ab:12:5f: 7b:27:75:33:ff:97:b0:70:34:54:15:c1:39:a5:d5:d8:de:20: 89:e0:4b:cd:47:b3:92:74:ee:9c:0e:97:f0:0a:96:6b:ee:2b: bb:18:7a:31:07:c1:f2:45:a7:ec:f1:8d:72:15:ad:18:f1:a7: 91:db:dc:c7:de:b2:f8:08:d9:76:9d:6c:07:cd:8f:13:d8:17: 81:61:5d:81:ab:66:24:ef:76:e5:75:d2:bd:c1:c4:c3:e3:69: 0b:f0:34:d7:5e:f2:cb:30:64:cd:00:f3:4d:37:08:a4:b0:66: fe:80:0f:a3:f5:12:61:7f:6b:72:a5:ba:09:82:31:d6:da:10: 2a:87:75:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuMx2QRpZciIWadBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTI2MTJmZGItZWU3Mi00YTJkLTlhMDktYjAxYmEwMzY2ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMOsnQcETGF6VgACnfnxxD7louY+Xr30jCPz P0cCvGdp9I0HnFhqjO+2upRDBjZf2PV2e7CQoa8V+3Tq46f2+QGZf9FmbYNbB9s3 maxDIARnApkqX2bt+mLxWr1LGH16eE0a9HUpENAEORfcz7irFpumG0/40vDB+scj aqlD5WhoQhN5hkwQ0JDo3ASxR1GtQR7VRiItknum0U2qYIWr2cElZ+sPqRn5kU1p OORau8ysmcBMqJCxWaKZs2IS9cnZObZTVIIFoYHsxMt1AiqXHI1RtEci77i7IpZg AW2ue2o6WYDNduUkbSNFFy08bD9FHAFYmZnimPFiRiaZ7UJKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX8t26b2QIJlROyyQbDxnHLQhA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMTU4Nzg4ZWYtNTJjYi0z MWNjLTlhYzMtNTBkZjVhOGY5MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz1JkFgOcDPvQKSzB2cJYX8y5IZ+DRYHc7vz79rSk8Ch8IxHzSuLX+U vYVNF0/4zT+7apDUsbLmOI2jm9ECn+RlTfF2PxH5FF9zo1oZCHnJnGSQ6Iez3LBB fXsYD31ObVQiTiIntrPVyLdNK6f0upnNqY0X3IQDjd9XsqsSX3sndTP/l7BwNFQV wTml1djeIIngS81Hs5J07pwOl/AKlmvuK7sYejEHwfJFp+zxjXIVrRjxp5Hb3Mfe svgI2XadbAfNjxPYF4FhXYGrZiTvduV10r3BxMPjaQvwNNde8sswZM0A8003CKSw Zv6AD6P1EmF/a3KlugmCMdbaECqHdUo= -----END CERTIFICATE-----Generated at Tue Oct 21 02:11:34 2025 by rpki-client