$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa File: cb09db06-6943-32ec-9b7c-d0a1928a7823.roa (raw, json) Hash identifier: VrWXej6fNqTvbcUyl9KRl2JNuKxMA0b17zqp0JPDY90= Subject key identifier: 11:C7:63:F6:58:4C:BC:D7:9C:22:E1:3E:69:34:2F:86:2B:DF:86:4F Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B4A4717F7C2D3F61490D7017D Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 53356 IP address blocks: 140.228.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:17:f7:c2:d3:f6:14:90:d7:01:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=4d959a61-4a46-4f05-9249-e98e7bbf4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:d8:e6:85:dd:d9:d2:a7:cb:72:24:56:db: da:68:a6:ab:4f:8f:e5:cd:34:b0:2b:a4:6d:17:4c: 9b:a1:8f:31:78:69:29:3d:44:e0:ba:06:86:d4:e4: b7:38:5b:8a:ed:54:b0:1a:5d:a0:2d:4a:aa:6d:cb: 97:5c:71:49:07:b3:40:14:d9:f1:aa:4b:56:8f:5d: a1:c7:93:ac:8d:8b:40:c9:98:dc:81:ad:3f:0e:4d: ab:3c:a5:ad:0e:04:4c:80:50:67:75:a0:af:80:1b: 42:aa:3a:82:b6:83:9c:fa:0d:24:e8:f0:ab:35:ad: ed:be:e6:1c:92:e5:8f:12:b7:99:4e:ce:44:c8:cd: a5:8c:10:72:68:f0:9e:5e:c4:d3:48:18:7d:fa:70: d4:0d:9c:58:da:9d:8e:80:94:95:8a:bb:97:60:24: 0e:18:48:45:82:cf:75:c0:f3:b5:02:62:db:69:5d: ef:89:1b:99:30:78:88:f3:6b:be:74:81:49:af:7b: d1:db:ec:df:0f:9d:38:7b:51:75:57:e0:ac:0f:c8: fd:e1:b7:9a:9c:d8:44:a1:0d:63:bf:8d:f5:8c:75: c4:8d:6b:b4:7f:4a:12:d7:6c:b0:0c:c1:88:50:bc: 67:a6:1c:a1:c8:e7:35:e8:43:f5:48:44:db:a0:f3: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C7:63:F6:58:4C:BC:D7:9C:22:E1:3E:69:34:2F:86:2B:DF:86:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:87:99:bf:29:de:3b:1c:73:39:a1:8c:c0:b5:aa:f1:13:42: d7:79:c0:44:9b:67:c4:22:54:b1:74:4a:9b:be:37:7a:96:35: 10:aa:dd:78:50:ea:fc:dd:c5:37:c1:cd:76:ac:53:66:99:83: 8f:f4:0f:7a:1a:7b:18:28:60:33:b8:49:13:47:09:09:62:ae: ee:2e:ff:01:96:22:e0:f5:34:8b:87:57:b2:a0:3a:af:99:74: 1f:52:e8:8c:0b:1c:25:f0:20:b1:5c:7d:db:10:14:54:48:e0: 39:68:fa:32:5a:ff:14:f4:03:44:d8:c0:50:ad:32:e4:7f:f3: 5e:04:14:5f:bf:0f:e1:8a:b6:52:be:a6:52:3c:78:f8:bd:49: c9:0f:71:8c:c2:b0:a4:58:b4:d6:1e:21:84:f4:88:2f:05:2f: 43:7e:d1:7f:80:f9:84:a3:33:cd:c9:85:50:84:28:61:88:0f: e5:0a:e4:1f:f5:6b:e7:af:da:68:2d:aa:74:7f:bb:1a:85:c1: 10:c1:a0:0c:45:7e:4e:7e:f5:0b:12:10:b4:69:79:88:a4:fb: d9:23:54:22:4c:b4:f1:b9:5c:37:47:59:21:87:ce:ab:f2:32: 2e:6f:16:35:59:b2:08:12:df:5e:32:10:8b:b7:f9:cc:c4:e2: 80:52:eb:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxf3wtP2FJDXAX0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NGQ5NTlhNjEtNGE0Ni00ZjA1LTkyNDktZTk4ZTdiYmY0NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFjY5oXd2dKny3IkVtvaaKarT4/lzTSwK6Rt F0yboY8xeGkpPUTgugaG1OS3OFuK7VSwGl2gLUqqbcuXXHFJB7NAFNnxqktWj12h x5OsjYtAyZjcga0/Dk2rPKWtDgRMgFBndaCvgBtCqjqCtoOc+g0k6PCrNa3tvuYc kuWPEreZTs5EyM2ljBByaPCeXsTTSBh9+nDUDZxY2p2OgJSViruXYCQOGEhFgs91 wPO1AmLbaV3viRuZMHiI82u+dIFJr3vR2+zfD504e1F1V+CsD8j94beanNhEoQ1j v431jHXEjWu0f0oS12ywDMGIULxnphyhyOc16EP1SETboPN/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHHY/ZYTLzXnCLhPmk0L4Yr34ZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvY2IwOWRiMDYtNjk0My0z MmVjLTliN2MtZDBhMTkyOGE3ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiHmb8p3jscczmhjMC1qvETQtd5wESbZ8QiVLF0Spu+N3qWNRCq3XhQ 6vzdxTfBzXasU2aZg4/0D3oaexgoYDO4SRNHCQliru4u/wGWIuD1NIuHV7KgOq+Z dB9S6IwLHCXwILFcfdsQFFRI4Dlo+jJa/xT0A0TYwFCtMuR/814EFF+/D+GKtlK+ plI8ePi9SckPcYzCsKRYtNYeIYT0iC8FL0N+0X+A+YSjM83JhVCEKGGID+UK5B/1 a+ev2mgtqnR/uxqFwRDBoAxFfk5+9QsSELRpeYik+9kjVCJMtPG5XDdHWSGHzqvy Mi5vFjVZsggS314yEIu3+czE4oBS65o= -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:34 2025 by rpki-client