$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802cbeb9-76c7-38f8-b371-3aa13f539266.roa File: 802cbeb9-76c7-38f8-b371-3aa13f539266.roa (raw, json) Hash identifier: JeXzynXLnvuekFqXa0OaBWZb187gCzWfUgGSGxnZRVA= Subject key identifier: 16:9D:BD:1D:C6:ED:13:7F:29:D2:CC:62:9E:1B:64:17:BF:63:BC:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA10447327543C8FCA5FEBE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802cbeb9-76c7-38f8-b371-3aa13f539266.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 40934 IP address blocks: 140.174.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:44:73:27:54:3c:8f:ca:5f:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=d778ccbf-c3df-4f99-ba25-2c8fccc91cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:68:5f:7c:41:a5:8c:63:9e:52:3c:92:89: a1:d7:d6:96:da:bd:0c:59:0a:13:ef:d2:97:47:71: 90:1c:2f:49:62:79:10:c7:96:82:7c:02:06:a3:29: 0f:e3:bf:52:d6:c2:e6:d2:31:c9:d6:1b:fd:bd:14: 14:22:ff:1d:3d:31:6c:ad:e3:4c:75:33:6b:c2:2b: 99:7d:03:f8:30:68:2b:c6:5f:9d:eb:5f:c0:56:03: aa:e0:4c:c8:a3:c2:18:a1:df:07:be:ba:30:84:d5: dc:22:d9:95:03:80:88:ef:d0:da:dc:3e:35:6f:f2: 96:87:92:1d:1b:b7:4a:91:a8:16:51:b8:d0:a3:55: 3a:20:3f:d4:ec:79:f4:47:f5:a3:ad:cf:8b:e7:36: c8:fe:e9:cc:ef:21:19:8b:da:54:41:42:86:b3:b0: a2:1f:ec:bf:05:1f:a1:11:55:a0:17:57:99:8a:c6: 13:85:a5:8c:ee:64:7b:1d:af:90:b3:f5:f1:fe:af: 49:40:4e:a7:15:2c:31:d8:fc:a7:8a:6f:5a:15:42: 42:73:fc:50:0f:3f:45:cc:26:81:ce:ed:44:64:cd: e9:d3:43:c5:c7:bb:fc:a8:94:75:a1:e0:0e:6c:42: 27:e4:0a:ba:1c:df:99:2c:c5:70:b4:44:24:71:51: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9D:BD:1D:C6:ED:13:7F:29:D2:CC:62:9E:1B:64:17:BF:63:BC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/802cbeb9-76c7-38f8-b371-3aa13f539266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cf:c2:9c:fc:c2:3f:ce:ff:fe:32:56:d7:dd:a6:3d:65:55: 8b:6c:44:e3:3c:d5:fd:00:a4:26:28:0c:d3:d5:2e:43:5b:83: 93:d2:d0:7e:93:6c:ff:41:ac:23:3e:8a:f2:38:6f:8b:5c:75: 55:52:3e:60:fb:0f:b7:90:11:f7:7b:1d:7b:97:9c:09:88:69: 31:3b:34:f1:b8:9e:7f:ac:89:9d:b4:d5:ca:85:95:51:66:cb: 87:74:1d:20:e2:a8:a0:3f:7a:33:69:a6:eb:8f:49:ce:c7:4e: ea:a1:ae:39:0a:d1:7d:d6:f4:f7:50:4b:73:6c:28:79:f4:ed: 93:66:d0:4d:2b:aa:0f:c1:8f:90:7c:8c:c3:03:0c:49:4c:c3: 1b:c3:a0:95:d4:88:07:33:ca:e8:32:fd:58:8b:e6:91:8f:f0: 26:03:64:66:ee:58:55:b3:fb:33:22:ba:60:6a:d9:17:8f:56: 60:52:51:34:8f:6e:d1:e1:10:50:8f:7c:ce:dc:81:2a:7a:84: 90:ad:55:16:54:e5:a2:d6:4e:d3:93:07:99:07:e2:2f:92:50: 56:fd:46:88:fd:c3:6d:df:50:8c:c1:f5:a5:10:a0:6d:bb:7d: 9e:61:1d:19:37:93:40:a8:3f:20:16:92:a9:2c:02:b8:9c:07: e3:de:71:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EERzJ1Q8j8pf6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDc3OGNjYmYtYzNkZi00Zjk5LWJhMjUtMmM4ZmNjYzkxY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxpoX3xBpYxjnlI8komh19aW2r0MWQoT79KX R3GQHC9JYnkQx5aCfAIGoykP479S1sLm0jHJ1hv9vRQUIv8dPTFsreNMdTNrwiuZ fQP4MGgrxl+d61/AVgOq4EzIo8IYod8HvrowhNXcItmVA4CI79Da3D41b/KWh5Id G7dKkagWUbjQo1U6ID/U7Hn0R/Wjrc+L5zbI/unM7yEZi9pUQUKGs7CiH+y/BR+h EVWgF1eZisYThaWM7mR7Ha+Qs/Xx/q9JQE6nFSwx2Pynim9aFUJCc/xQDz9FzCaB zu1EZM3p00PFx7v8qJR1oeAObEIn5Aq6HN+ZLMVwtEQkcVFenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBadvR3G7RN/KdLMYp4bZBe/Y7zOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODAyY2JlYjktNzZjNy0z OGY4LWIzNzEtM2FhMTNmNTM5MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfPwpz8wj/O//4yVtfdpj1lVYtsROM81f0ApCYoDNPVLkNbg5PS0H6T bP9BrCM+ivI4b4tcdVVSPmD7D7eQEfd7HXuXnAmIaTE7NPG4nn+siZ201cqFlVFm y4d0HSDiqKA/ejNppuuPSc7HTuqhrjkK0X3W9PdQS3NsKHn07ZNm0E0rqg/Bj5B8 jMMDDElMwxvDoJXUiAczyugy/ViL5pGP8CYDZGbuWFWz+zMiumBq2RePVmBSUTSP btHhEFCPfM7cgSp6hJCtVRZU5aLWTtOTB5kH4i+SUFb9Roj9w23fUIzB9aUQoG27 fZ5hHRk3k0CoPyAWkqksAricB+PecVI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:40 2025 by rpki-client