$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa File: 815a54e3-8123-31cb-96ee-31a99dbd5486.roa (raw, json) Hash identifier: i7Sj7QSz+82dXVwEn/4+viEYVCaajtCu/MRR+8kwoJg= Subject key identifier: 6E:7D:DE:33:C7:7E:4C:95:B5:B7:FC:9D:2A:49:67:0E:A7:CB:D1:9B Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584B3DB6FD0F185691BFA6F36880 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 401243 IP address blocks: 140.235.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:fd:0f:18:56:91:bf:a6:f3:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=80a505a6-23e5-461c-b785-d47655054421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:df:01:d6:ca:c5:bd:17:8d:72:46:37:d2: a0:50:34:4d:1e:3a:7d:07:44:1b:16:cd:78:4a:1b: e4:c1:50:d1:f4:50:a1:f9:96:4e:6d:8d:3d:e3:14: c2:c9:e2:f4:66:c4:55:fb:4f:0c:19:71:96:b6:7d: 4b:b6:da:43:8a:2a:15:e3:8c:6d:96:50:28:b7:ca: 25:3c:d1:1f:18:5d:b0:0a:6a:52:44:3b:e8:5f:fc: d3:21:34:00:75:de:e8:e1:56:42:e4:ec:5c:93:cf: c0:94:70:5c:63:01:24:25:f7:b6:61:a5:29:f1:d3: 8e:bc:97:7c:4b:e1:74:ec:5a:6c:7a:e9:95:81:d9: 96:8d:02:a5:16:71:d7:c1:c7:e6:e4:d8:fd:38:dc: 94:a2:2d:54:f9:84:5e:c3:15:1d:9c:7d:69:1a:79: a9:b3:ca:9c:d2:39:68:b8:06:d4:2a:29:90:9a:86: 0b:47:f8:5d:c8:88:23:49:2a:bb:9e:e1:f4:02:a0: f4:8a:2f:ec:d1:43:10:bb:08:f1:ae:98:70:6d:d3: ef:b4:ff:f9:24:40:1c:b1:97:f2:87:81:ef:87:9f: 49:eb:61:05:e2:d6:28:4b:4b:48:86:cc:b6:b1:7f: 3c:d0:e1:0b:73:fe:b0:0c:77:c3:21:bf:01:bd:dd: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7D:DE:33:C7:7E:4C:95:B5:B7:FC:9D:2A:49:67:0E:A7:CB:D1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:9e:23:47:e9:51:5f:a3:bc:04:c1:1b:5a:86:e2:73:15: bc:ef:ae:69:b0:23:84:ab:78:d6:ef:e8:6b:00:28:51:6f:26: 80:3f:61:3a:bb:f5:4e:09:38:f5:48:83:17:4b:a8:5f:c3:14: 87:3f:5c:76:45:a7:c6:98:e0:b8:06:c3:0b:4b:89:13:e1:05: 2d:78:a0:30:1c:33:4d:b6:3d:e3:ee:62:8a:fa:89:19:32:47: 31:85:de:a4:ad:6a:2b:da:f5:48:6d:78:5d:53:74:ac:7f:73: de:e6:37:f8:7b:b1:92:c1:83:c5:84:ba:64:2f:70:e3:f6:af: 3d:8c:39:f0:9f:33:68:9e:2b:9a:eb:cc:61:25:f4:06:d2:76: 4f:ea:77:22:b2:8f:b9:2c:c4:8f:19:d8:69:d3:e7:18:f1:f3: b2:0a:b0:45:5d:f3:70:51:08:6c:b9:8b:87:5b:5d:f8:7c:49: 42:aa:58:f5:fe:84:86:f3:e7:b4:71:3f:10:36:67:e7:c7:7b: 3a:af:90:43:b0:46:99:fb:01:93:8b:a4:20:2b:f9:a5:f8:37: 25:15:8f:5c:0f:04:a6:b3:79:39:b6:b0:b1:7f:c8:28:b4:85: 62:28:58:7d:93:d1:9d:5c:e4:7b:01:46:d0:28:08:e9:f3:73: 8e:8b:1c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tv0PGFaRv6bzaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODBhNTA1YTYtMjNlNS00NjFjLWI3ODUtZDQ3NjU1MDU0NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQvfAdbKxb0XjXJGN9KgUDRNHjp9B0QbFs14 ShvkwVDR9FCh+ZZObY094xTCyeL0ZsRV+08MGXGWtn1LttpDiioV44xtllAot8ol PNEfGF2wCmpSRDvoX/zTITQAdd7o4VZC5Oxck8/AlHBcYwEkJfe2YaUp8dOOvJd8 S+F07FpseumVgdmWjQKlFnHXwcfm5Nj9ONyUoi1U+YRewxUdnH1pGnmps8qc0jlo uAbUKimQmoYLR/hdyIgjSSq7nuH0AqD0ii/s0UMQuwjxrphwbdPvtP/5JEAcsZfy h4Hvh59J62EF4tYoS0tIhsy2sX880OELc/6wDHfDIb8Bvd2VCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG593jPHfkyVtbf8nSpJZw6ny9GbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvODE1YTU0ZTMtODEyMy0z MWNiLTk2ZWUtMzFhOTlkYmQ1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhuniNH6VFfo7wEwRtahuJzFbzvrmmwI4SreNbv6GsAKFFvJoA/YTq7 9U4JOPVIgxdLqF/DFIc/XHZFp8aY4LgGwwtLiRPhBS14oDAcM022PePuYor6iRky RzGF3qStaiva9UhteF1TdKx/c97mN/h7sZLBg8WEumQvcOP2rz2MOfCfM2ieK5rr zGEl9AbSdk/qdyKyj7ksxI8Z2GnT5xjx87IKsEVd83BRCGy5i4dbXfh8SUKqWPX+ hIbz57RxPxA2Z+fHezqvkEOwRpn7AZOLpCAr+aX4NyUVj1wPBKazeTm2sLF/yCi0 hWIoWH2T0Z1c5HsBRtAoCOnzc46LHJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:54 2025 by rpki-client