$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa File: 11be9af3-f515-32ba-a037-d02c859f7b8e.roa (raw, json) Hash identifier: t8XoXcbYqohLe9OExGZhKOd1UOGc/7V6lbhsl02/3/E= Subject key identifier: 63:6F:0F:DC:72:34:71:77:98:5F:A0:B6:4A:15:2D:9B:AF:0B:C3:8B Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F4328584B2496D9D0F98A30136AA3C840 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16276 IP address blocks: 40.160.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d9:d0:f9:8a:30:13:6a:a3:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=df363997-16a2-4083-a2c9-aabb4a726677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:f5:d3:13:6f:05:27:79:29:97:9c:00:c8: 0a:e8:70:de:12:27:55:ec:6f:61:b7:f6:20:b3:bc: 53:e9:42:5f:63:ba:f6:c1:6e:c1:9c:9c:d4:26:b8: b3:6a:94:1a:0b:d3:0e:a9:82:28:78:55:0d:9b:0e: 85:9b:b0:d8:69:86:e8:bc:9a:d4:93:9f:eb:14:85: 08:58:6d:75:0e:e2:3f:56:a0:36:6d:32:68:88:dc: 5c:89:f0:39:40:d0:16:f7:91:94:10:a9:e0:1b:54: 65:dd:09:05:e1:d5:47:0b:ce:06:30:05:6d:14:2a: 5b:48:72:51:05:81:c9:ea:39:25:4e:41:d5:1b:b8: 27:20:26:e0:65:37:c1:b7:ab:57:47:3f:e9:de:84: 30:e1:7c:61:85:05:6a:95:b0:cb:71:84:3d:76:ec: 00:fc:85:a5:78:7e:e8:43:a9:ce:05:01:fc:06:97: df:a0:08:3b:bb:9f:75:32:0d:93:e6:a9:dc:f8:eb: 64:24:e7:43:3f:ea:3a:21:36:6c:db:54:4c:de:71: 5e:f7:d7:17:79:f1:ac:cd:35:35:bd:9c:e3:05:7a: 78:84:44:9e:c5:78:d2:ec:0e:39:a3:b6:85:7d:cd: 3e:4e:d3:b4:95:6c:a1:d5:d5:56:a9:7e:d2:de:88: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:0F:DC:72:34:71:77:98:5F:A0:B6:4A:15:2D:9B:AF:0B:C3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 40.160.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:58:12:8f:1d:c0:23:2c:c0:ab:56:12:87:02:2f:d9:8b: 5d:b6:fa:f6:b9:46:2c:d3:20:a5:b3:0c:33:64:ea:91:e0:0b: b1:f4:8f:1c:33:33:79:7b:a5:84:42:88:9e:79:78:9f:ab:3a: f3:f0:31:86:d3:bc:88:5a:7a:01:67:74:5d:4f:0a:a7:0c:d7: 7c:3f:59:5e:e1:78:7f:89:12:4f:f7:6d:65:08:bb:68:3e:09: 12:80:f4:b3:51:17:04:59:d8:50:a3:da:d7:b7:f1:a5:24:9b: 13:38:85:62:58:bc:16:5f:60:0b:91:93:cf:db:05:dc:2a:ad: 18:6e:75:33:7f:28:97:12:de:6a:43:a2:a4:f6:d1:f1:9c:4f: 66:da:af:d3:e5:10:70:4d:75:ba:58:02:f8:c2:7c:99:d4:6d: 9d:2a:0e:30:d6:06:e5:1a:ca:ad:c6:4d:59:8c:cd:ae:90:80: 45:a3:c1:4c:6d:3b:c8:a4:e8:d0:5e:8f:9f:08:1d:0d:17:20: 3b:4a:f1:76:1a:45:39:a6:2a:e5:5e:73:e4:07:cf:f0:fb:fa: aa:63:83:cd:a1:2b:fc:a0:a7:f3:5b:26:a3:07:2a:38:2f:b7: 93:97:1d:c1:78:83:ac:83:7a:87:ff:88:ca:37:15:db:77:e9: ea:9f:64:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltnQ+YowE2qjyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGYzNjM5OTctMTZhMi00MDgzLWEyYzktYWFiYjRhNzI2Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYH10xNvBSd5KZecAMgK6HDeEidV7G9ht/Yg s7xT6UJfY7r2wW7BnJzUJrizapQaC9MOqYIoeFUNmw6Fm7DYaYbovJrUk5/rFIUI WG11DuI/VqA2bTJoiNxcifA5QNAW95GUEKngG1Rl3QkF4dVHC84GMAVtFCpbSHJR BYHJ6jklTkHVG7gnICbgZTfBt6tXRz/p3oQw4XxhhQVqlbDLcYQ9duwA/IWleH7o Q6nOBQH8BpffoAg7u591Mg2T5qnc+OtkJOdDP+o6ITZs21RM3nFe99cXefGszTU1 vZzjBXp4hESexXjS7A45o7aFfc0+TtO0lWyh1dVWqX7S3ogeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNvD9xyNHF3mF+gtkoVLZuvC8OLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvMTFiZTlhZjMtZjUxNS0z MmJhLWEwMzctZDAyYzg1OWY3YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKKDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVDWBKPHcAjLMCrVhKHAi/Zi122+va5RizTIKWzDDNk6pHgC7H0jxwz M3l7pYRCiJ55eJ+rOvPwMYbTvIhaegFndF1PCqcM13w/WV7heH+JEk/3bWUIu2g+ CRKA9LNRFwRZ2FCj2te38aUkmxM4hWJYvBZfYAuRk8/bBdwqrRhudTN/KJcS3mpD oqT20fGcT2bar9PlEHBNdbpYAvjCfJnUbZ0qDjDWBuUayq3GTVmMza6QgEWjwUxt O8ik6NBej58IHQ0XIDtK8XYaRTmmKuVec+QHz/D7+qpjg82hK/ygp/NbJqMHKjgv t5OXHcF4g6yDeof/iMo3Fdt36eqfZIs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:46:34 2025 by rpki-client