$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa File: 533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa (raw, json) Hash identifier: zGbjPYkes2ISnF6zYBjmpGjRvFY2giQz1maq+sBZBNc= Subject key identifier: FC:AD:0E:25:41:EE:8A:4E:06:DA:C5:99:06:C5:A0:87:4E:D0:08:B9 Certificate issuer: /CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Certificate serial: 010D0C9F4328584B33F1A9DA97FAC9E571295A00 Authority key identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 396982 IP address blocks: 140.235.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a9:da:97:fa:c9:e5:71:29:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=58ad2934-dded-4753-81a8-8fac4bbb7e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:fc:8c:ac:09:9f:2b:0e:c5:06:d8:8e:32: 44:0b:d4:18:a9:d5:d3:b2:52:9f:f2:c8:ac:df:86: d0:19:4e:6a:a1:09:99:b2:ca:c0:82:21:47:f1:50: 93:48:1a:34:51:73:94:a8:b4:37:be:f5:d9:52:a8: 98:a3:38:3c:c3:0f:4d:1f:21:4d:4a:6a:ab:13:69: 35:ab:0f:68:4a:41:29:dd:c1:37:c6:d3:53:58:bf: 09:23:ca:8e:7e:b9:f9:1f:f1:e3:78:ee:78:cf:8a: 26:a7:62:a9:2a:a2:8c:ec:af:a4:89:e9:33:82:49: d5:3c:3f:fd:e7:87:90:c5:45:d3:31:57:80:49:c9: 4a:20:d8:6e:21:b6:57:43:6a:4a:6a:4c:63:8c:18: ba:c5:54:7a:5c:b0:ca:3f:3d:b1:90:19:38:95:cd: e7:a4:21:2c:92:65:26:cf:02:c1:37:ea:37:a5:cd: 03:0b:0d:f8:12:7b:bd:c2:7f:f2:17:bf:3f:56:35: ed:63:47:94:8d:48:6f:a2:07:30:12:e8:b5:d1:29: dc:e5:f6:9d:4e:14:db:1e:32:fa:2b:e3:8d:00:47: 7a:56:83:6d:a0:d7:7f:fe:c4:e6:74:fa:79:a0:86: 75:a2:df:3b:01:31:74:2d:f7:a8:90:83:2a:15:64: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:0E:25:41:EE:8A:4E:06:DA:C5:99:06:C5:A0:87:4E:D0:08:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl X509v3 Authority Key Identifier: keyid:CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer sbgp-ipAddrBlock: critical IPv4: 140.235.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8c:11:14:d3:06:3a:b1:f3:4b:4c:43:51:e6:47:d0:fa:26: b0:8a:a7:27:7e:39:6a:09:89:52:26:3d:4e:8c:9c:ff:ea:ef: 9a:27:6d:32:e2:65:36:ff:a0:b4:37:da:c0:fa:2c:f2:56:c6: c3:55:ad:f7:ba:e5:6f:77:03:73:15:55:dd:e5:2a:54:c6:d3: 35:2e:d9:ef:e1:31:b0:5d:26:4e:2f:8f:2e:96:e4:a4:48:48: 25:0e:66:02:8d:ae:a2:a9:66:6f:9f:1d:7d:2b:d9:a7:a2:8a: eb:9a:f3:0b:58:74:3c:7d:87:64:f5:ba:0a:e7:a8:e6:9f:66: 53:db:14:19:ee:58:98:98:44:74:c5:bf:d5:87:23:51:23:7a: fc:cf:1e:aa:cc:98:80:db:2e:f1:ff:da:44:9d:67:ce:38:5a: 83:83:69:91:14:a1:a4:8d:9f:52:0c:cc:6a:02:cf:d9:b3:e6: b7:3a:80:2a:b3:2c:f2:e7:ff:c0:d3:df:2a:02:a3:cd:98:4c: 64:d5:45:c8:43:f6:c4:47:88:9d:9d:4b:27:89:9a:0b:38:0c: f6:36:a0:a7:8f:bd:cb:ee:ab:02:68:8b:3b:a3:05:64:70:94: 08:f7:ea:c8:f1:c8:e8:17:28:e2:c1:a7:6f:2b:d2:16:09:89: ec:64:25:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8anal/rJ5XEpWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzMDhmNWYtMjBkOC00ODY5LWI4ZDAtY2NlZDc4Y2U1 MWI3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NThhZDI5MzQtZGRlZC00NzUzLTgxYTgtOGZhYzRiYmI3ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK78jKwJnysOxQbYjjJEC9QYqdXTslKf8sis 34bQGU5qoQmZssrAgiFH8VCTSBo0UXOUqLQ3vvXZUqiYozg8ww9NHyFNSmqrE2k1 qw9oSkEp3cE3xtNTWL8JI8qOfrn5H/HjeO54z4omp2KpKqKM7K+kiekzgknVPD/9 54eQxUXTMVeASclKINhuIbZXQ2pKakxjjBi6xVR6XLDKPz2xkBk4lc3npCEskmUm zwLBN+o3pc0DCw34Enu9wn/yF78/VjXtY0eUjUhvogcwEui10Snc5fadThTbHjL6 K+ONAEd6VoNtoNd//sTmdPp5oIZ1ot87ATF0LfeokIMqFWR6nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPytDiVB7opOBtrFmQbFoIdO0Ai5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ODMw OGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhjZTUxYjcvNTMzYzEwMTAtODZjMS0z YjEzLWFkMmItNjM0N2E1YjhiZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzgzMDhmNWYtMjBkOC00ODY5LWI4 ZDAtY2NlZDc4Y2U1MWI3Lzc4MzA4ZjVmLTIwZDgtNDg2OS1iOGQwLWNjZWQ3OGNl NTFiNy5jcmwwHwYDVR0jBBgwFoAUzxjvBs0QwE4RrUmNI7dooS39h/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2Vk NzhjZTUxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaMERTTBjqx80tMQ1HmR9D6JrCKpyd+OWoJiVImPU6MnP/q75onbTLi ZTb/oLQ32sD6LPJWxsNVrfe65W93A3MVVd3lKlTG0zUu2e/hMbBdJk4vjy6W5KRI SCUOZgKNrqKpZm+fHX0r2aeiiuua8wtYdDx9h2T1ugrnqOafZlPbFBnuWJiYRHTF v9WHI1EjevzPHqrMmIDbLvH/2kSdZ844WoODaZEUoaSNn1IMzGoCz9mz5rc6gCqz LPLn/8DT3yoCo82YTGTVRchD9sRHiJ2dSyeJmgs4DPY2oKePvcvuqwJoizujBWRw lAj36sjxyOgXKOLBp28r0hYJiexkJV8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:51 2025 by rpki-client