$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa File: 62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa (raw, json) Hash identifier: hBlC88syQlFk2X/RlyLBFNNuPnZpsjx+yqpq+SoU7yg= Subject key identifier: C9:33:83:A9:CF:56:3A:E1:3A:7A:41:08:EF:23:8E:24:94:F1:C0:61 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584B80B783B7627EBC0755707C40 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 6589 IP address blocks: 140.235.157.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:83:b7:62:7e:bc:07:55:70:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=b5f84d76-02da-4b32-b92e-76829071b853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:57:91:d3:b6:f3:ae:f1:8e:ad:43:f5:c7: 5a:d9:b0:06:33:cb:6b:cb:4e:7f:81:fd:af:d3:57: 75:c5:dd:c0:74:f7:a6:3b:d9:a8:49:fe:03:23:60: 95:59:b7:91:0d:fb:5f:22:10:ce:36:b8:c7:a3:68: e6:4f:5c:c9:15:6c:d8:d6:20:e2:27:03:a3:0c:ac: d3:66:51:a6:0c:2e:7c:75:31:b7:3b:f3:5d:b0:41: 81:e5:4d:d1:af:d9:9c:bc:5a:ad:e7:f5:8b:1f:45: dd:f0:7c:6e:a6:54:82:3e:ff:85:68:03:c5:52:ae: 7e:8b:8c:8c:21:23:7f:33:ed:75:6f:16:6d:6e:8f: 52:40:2b:42:52:96:84:53:e8:57:eb:a1:9a:47:68: e0:4f:69:73:a4:90:cb:24:a9:c3:d0:01:4d:31:00: 9a:52:93:70:03:90:6d:f8:8f:3c:69:e9:9d:c2:ba: 56:5f:ce:45:66:b5:3b:f3:ea:06:c1:65:40:77:2a: e4:b1:43:6f:e1:9c:ce:90:3b:b8:62:ee:03:4e:f9: cc:c8:7e:5c:84:8d:6d:0a:0a:dc:89:0e:91:2f:29: cb:3d:03:fb:5f:a2:d0:c5:b9:c7:be:31:46:a9:1b: 9c:2b:9b:66:8f:81:63:8e:68:e1:ae:04:43:61:6b: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:33:83:A9:CF:56:3A:E1:3A:7A:41:08:EF:23:8E:24:94:F1:C0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 140.235.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6a:5a:cb:4b:18:9c:5e:69:2a:98:a3:ca:e7:65:47:b1:0c: bc:28:3d:bf:d7:08:0d:8f:3b:24:bb:07:3d:07:89:f3:61:0e: 2f:39:6a:15:9c:aa:61:3d:72:7c:79:81:f9:e0:bb:9f:98:1b: ae:f6:da:93:2f:0b:3a:09:38:27:9c:3f:b1:c6:0a:bd:82:7f: 12:5b:27:bd:fe:3d:a7:ba:2e:62:9c:f1:de:24:fa:81:93:e1: 0d:10:30:62:e9:af:bd:07:84:1f:fc:f8:a7:d2:df:8f:ee:92: b5:15:a5:87:c4:96:1a:77:c2:7d:f8:18:26:ef:6a:4f:09:11: 22:5b:52:c5:f8:7f:82:ec:b2:78:87:25:65:b3:da:c9:34:fa: 74:27:94:49:3c:77:d5:8b:cf:e7:c5:ba:81:99:28:4c:67:72: a2:7f:61:ae:51:ba:aa:d5:a4:ee:46:94:55:1a:8b:09:85:98: 0b:73:d3:5d:e4:44:91:df:3b:e0:77:0c:1e:2e:da:3d:23:8e: 31:06:12:c7:ca:2d:e1:0d:f9:cf:54:7b:70:38:c1:e0:ec:77: 19:38:52:18:2f:ff:58:27:cd:56:bf:bf:af:90:16:81:66:fa: 4a:de:5d:11:08:d7:e7:29:48:4b:28:2a:93:6e:2d:cf:c4:e4: be:04:0c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4O3Yn68B1VwfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YjVmODRkNzYtMDJkYS00YjMyLWI5MmUtNzY4MjkwNzFiODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBXkdO2867xjq1D9cda2bAGM8try05/gf2v 01d1xd3AdPemO9moSf4DI2CVWbeRDftfIhDONrjHo2jmT1zJFWzY1iDiJwOjDKzT ZlGmDC58dTG3O/NdsEGB5U3Rr9mcvFqt5/WLH0Xd8HxuplSCPv+FaAPFUq5+i4yM ISN/M+11bxZtbo9SQCtCUpaEU+hX66GaR2jgT2lzpJDLJKnD0AFNMQCaUpNwA5Bt +I88aemdwrpWX85FZrU78+oGwWVAdyrksUNv4ZzOkDu4Yu4DTvnMyH5chI1tCgrc iQ6RLynLPQP7X6LQxbnHvjFGqRucK5tmj4FjjmjhrgRDYWssXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkzg6nPVjrhOnpBCO8jjiSU8cBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNjJlY2ZhZmEtYTZhMS0z NTFmLWE2YTktNzVjZGQ2MWIxZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1qWstLGJxeaSqYo8rnZUexDLwoPb/XCA2POyS7Bz0HifNhDi85ahWc qmE9cnx5gfngu5+YG6722pMvCzoJOCecP7HGCr2CfxJbJ73+Pae6LmKc8d4k+oGT 4Q0QMGLpr70HhB/8+KfS34/ukrUVpYfElhp3wn34GCbvak8JESJbUsX4f4LssniH JWWz2sk0+nQnlEk8d9WLz+fFuoGZKExncqJ/Ya5RuqrVpO5GlFUaiwmFmAtz013k RJHfO+B3DB4u2j0jjjEGEsfKLeEN+c9Ue3A4weDsdxk4Uhgv/1gnzVa/v6+QFoFm +kreXREI1+cpSEsoKpNuLc/E5L4EDHE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:34 2025 by rpki-client