$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa File: 97b391e0-db17-3281-ab21-297fbaa55847.roa (raw, json) Hash identifier: If2rfPpf0Z1fFxCRBxa+BfIJ9iBJSxWyMU+ZUf+0HnA= Subject key identifier: 1E:F2:CE:D4:E2:21:05:29:D1:65:A9:53:F6:93:94:C6:29:3D:F9:29 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AE4611C1FF15FB77E66331EE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 401008 IP address blocks: 140.174.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1c:1f:f1:5f:b7:7e:66:33:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=513c4b0d-9e67-46c8-aee5-6eb814d6b220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:2d:6e:2a:71:94:5b:1d:96:88:d0:ac:f1: 71:d0:8f:98:34:27:8b:a1:44:39:8c:57:49:7d:8f: 0e:37:35:fb:ba:99:c8:6c:0e:4a:ad:d9:ff:35:96: 33:22:99:c3:23:b1:7f:03:f6:c2:ce:06:29:07:aa: ec:03:d5:c2:a5:fc:4a:39:70:a5:54:15:b0:b0:8d: ec:fb:b0:e2:7b:c7:2a:c2:5f:92:ba:6e:64:81:a9: 55:18:14:13:38:f9:37:c3:88:5d:9a:09:bd:8e:4a: 44:a5:6c:85:c4:37:95:dd:4e:f7:68:94:df:6e:54: 18:eb:47:d8:44:b7:79:55:cb:04:1b:59:f4:b9:e5: 3c:83:fb:01:3b:79:fe:02:21:18:9e:0c:e9:8d:13: 68:9d:30:15:5b:32:fc:45:b6:47:ed:e5:b8:94:56: 4b:89:b8:c0:66:0a:1f:e5:d6:4e:05:75:ce:c3:b9: cf:1c:b8:b8:07:68:d2:56:19:35:f8:c6:4f:09:0a: a3:ea:07:dc:19:5f:50:ff:1b:ee:79:11:04:e5:d2: df:21:cb:3a:f5:39:1c:84:7c:8c:0f:06:7c:ef:bf: 4a:f7:cc:4a:a0:57:f7:9a:c7:65:d0:49:ba:60:32: 38:d5:c3:12:18:f0:77:41:ba:47:0a:f8:c6:8a:ed: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:CE:D4:E2:21:05:29:D1:65:A9:53:F6:93:94:C6:29:3D:F9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b4:fe:99:84:e8:23:0d:fb:d6:1a:68:60:13:a4:aa:06:56: fc:10:e8:a6:02:8f:78:93:13:87:01:c3:07:77:fd:b5:9b:08: cf:2d:dc:16:5b:bb:52:20:fa:af:1d:b7:e2:c0:e8:e2:38:0a: 7b:4d:7c:6f:44:ee:f4:4a:35:9f:80:d9:b4:0e:b0:7b:51:da: e7:cc:c0:96:51:95:0f:20:76:af:b9:e7:e3:bf:9e:4f:71:66: aa:7f:b4:b2:e7:93:c3:b5:2f:18:8b:bb:79:04:ae:ff:03:a3: 81:9a:5b:93:d0:94:64:87:10:02:df:32:5e:c8:c8:86:61:c0: ea:0c:3f:d4:d6:fa:11:ab:cb:88:29:f5:9c:d4:02:ce:e1:15: bd:8e:d9:41:8c:19:f9:f6:f5:9c:30:62:2b:0c:dd:62:b4:32: d6:db:cb:b2:89:c4:29:13:d4:a8:b0:bf:86:c9:d8:bc:2c:1f: 53:48:e1:a0:d6:e9:80:1c:6d:11:c8:07:eb:23:a2:10:c6:e2: 4e:c1:11:9e:3f:73:34:19:dc:b1:08:3e:bf:dc:a6:e0:37:72: 55:17:f9:8c:23:96:46:38:06:21:a5:9a:9c:e2:19:cb:7a:ac: 40:aa:33:60:93:c2:45:d1:aa:3d:0b:e5:dd:ea:49:15:50:6e: b0:4d:10:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRwf8V+3fmYzHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NTEzYzRiMGQtOWU2Ny00NmM4LWFlZTUtNmViODE0ZDZiMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxAtbipxlFsdlojQrPFx0I+YNCeLoUQ5jFdJ fY8ONzX7upnIbA5Krdn/NZYzIpnDI7F/A/bCzgYpB6rsA9XCpfxKOXClVBWwsI3s +7Die8cqwl+Sum5kgalVGBQTOPk3w4hdmgm9jkpEpWyFxDeV3U73aJTfblQY60fY RLd5VcsEG1n0ueU8g/sBO3n+AiEYngzpjRNonTAVWzL8RbZH7eW4lFZLibjAZgof 5dZOBXXOw7nPHLi4B2jSVhk1+MZPCQqj6gfcGV9Q/xvueREE5dLfIcs69TkchHyM DwZ8779K98xKoFf3msdl0Em6YDI41cMSGPB3QbpHCvjGiu2ToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7yztTiIQUp0WWpU/aTlMYpPfkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTdiMzkxZTAtZGIxNy0z MjgxLWFiMjEtMjk3ZmJhYTU1ODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjK4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA20/pmE6CMN+9YaaGATpKoGVvwQ6KYCj3iTE4cBwwd3/bWbCM8t3BZb u1Ig+q8dt+LA6OI4CntNfG9E7vRKNZ+A2bQOsHtR2ufMwJZRlQ8gdq+55+O/nk9x Zqp/tLLnk8O1LxiLu3kErv8Do4GaW5PQlGSHEALfMl7IyIZhwOoMP9TW+hGry4gp 9ZzUAs7hFb2O2UGMGfn29ZwwYisM3WK0Mtbby7KJxCkT1Kiwv4bJ2LwsH1NI4aDW 6YAcbRHIB+sjohDG4k7BEZ4/czQZ3LEIPr/cpuA3clUX+YwjlkY4BiGlmpziGct6 rECqM2CTwkXRqj0L5d3qSRVQbrBNEKQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:48 2025 by rpki-client