$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json) Hash identifier: rryy4vaaPGe6XWrXaXqIeHwYAG6G/cANDNzwjaNvLBM= Subject key identifier: 9E:79:7A:3B:38:1D:61:C1:D3:A0:EA:76:79:FD:F0:EE:74:CC:79:62 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BA7CCF745097870A60FD93600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 29852 IP address blocks: 140.174.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f7:45:09:78:70:a6:0f:d9:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=63eecdf0-babe-420c-8a59-c8144ddf6aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:e7:2b:4b:f4:0a:f5:8a:c8:d6:dd:4c:70: 08:a9:2e:93:99:f6:42:be:e1:a2:09:f2:67:84:9f: 11:6b:3a:7e:61:6c:43:c6:ca:3f:b2:40:04:40:30: 12:a4:33:44:9d:90:09:e0:b2:df:a6:1d:ca:65:c6: 08:ed:14:ea:6f:58:c5:17:61:db:31:11:d8:b7:d8: f4:05:6c:1b:fe:30:94:8d:b1:e1:91:43:8a:66:b6: c3:c2:29:e4:8f:7f:f7:2a:85:61:29:7e:42:8d:05: 5d:43:a2:99:e2:01:a8:66:13:37:d4:bc:8f:bb:86: 48:86:2d:85:2e:55:47:fe:02:b2:17:7e:8f:2f:bb: f4:f8:7e:82:96:c7:e8:b6:21:21:e3:15:97:83:92: 1f:0c:36:a3:1a:64:6d:54:49:0e:2a:fb:f3:83:f2: b6:cf:a6:74:fc:bb:2f:76:34:5a:04:d4:a9:d3:6d: c2:a3:df:99:29:82:18:5b:d6:39:0b:33:3b:4f:c7: f0:f9:ca:ef:88:79:c6:5c:0a:a9:e2:23:c7:b2:93: 78:1c:b7:3a:ca:2e:c4:c7:3d:23:61:21:04:ce:03: 6b:27:f8:4a:72:dc:8e:92:7e:bf:00:b4:ab:ba:b0: d7:3f:00:13:e6:05:46:5e:87:db:53:24:1e:c4:39: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:79:7A:3B:38:1D:61:C1:D3:A0:EA:76:79:FD:F0:EE:74:CC:79:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7b:16:68:34:4c:73:75:a5:93:d0:2f:f8:e3:dd:9f:ff:b1: fd:1e:e9:34:ac:6e:86:64:02:3f:57:53:2f:ca:0e:e0:ed:dc: a2:f8:59:8c:5d:84:5f:86:49:1b:08:ea:dc:a7:12:e7:e2:2a: 40:13:10:7b:a9:34:27:63:66:96:7e:14:03:a8:e0:21:06:ee: ac:41:2f:98:49:1a:3a:e5:6b:c0:38:af:d7:3f:6b:fb:e2:86: 84:bb:5c:de:98:0d:65:49:3a:a4:9f:f1:1a:26:93:ed:fa:b9: 9c:23:3d:be:de:b1:76:e2:43:2f:1a:11:6a:56:ae:00:43:5b: 52:1a:d1:23:8e:83:1b:22:fe:75:fb:6e:6f:fd:ca:1f:39:57: de:4e:d3:71:33:71:74:52:ab:bd:1a:44:60:07:ae:4b:20:5b: da:0a:ea:dd:fb:53:cf:7e:ea:12:3b:5a:1a:c5:84:cc:48:23: 8a:e8:19:47:af:4a:a8:99:52:bf:46:cb:29:4d:11:d8:11:89: de:31:82:52:52:72:e3:bd:f8:47:ff:38:26:04:32:aa:90:28: 2e:a1:a3:25:01:fa:9a:ae:fe:e1:0f:f5:10:21:e8:d7:9c:dc: b1:a6:68:1b:35:af:5f:fa:4a:28:db:78:91:5b:46:0f:ad:54: 09:02:47:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPdFCXhwpg/ZNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NjNlZWNkZjAtYmFiZS00MjBjLThhNTktYzgxNDRkZGY2YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy3nK0v0CvWKyNbdTHAIqS6TmfZCvuGiCfJn hJ8Razp+YWxDxso/skAEQDASpDNEnZAJ4LLfph3KZcYI7RTqb1jFF2HbMRHYt9j0 BWwb/jCUjbHhkUOKZrbDwinkj3/3KoVhKX5CjQVdQ6KZ4gGoZhM31LyPu4ZIhi2F LlVH/gKyF36PL7v0+H6ClsfotiEh4xWXg5IfDDajGmRtVEkOKvvzg/K2z6Z0/Lsv djRaBNSp023Co9+ZKYIYW9Y5CzM7T8fw+crviHnGXAqp4iPHspN4HLc6yi7Exz0j YSEEzgNrJ/hKctyOkn6/ALSrurDXPwAT5gVGXofbUyQexDlwhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ55ejs4HWHB06Dqdnn98O50zHliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2RlODdiZmEtN2QwNi0z NGJmLTljMDMtMTUyMTQ0MDRlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN7Fmg0THN1pZPQL/jj3Z//sf0e6TSsboZkAj9XUy/KDuDt3KL4WYxd hF+GSRsI6tynEufiKkATEHupNCdjZpZ+FAOo4CEG7qxBL5hJGjrla8A4r9c/a/vi hoS7XN6YDWVJOqSf8Romk+36uZwjPb7esXbiQy8aEWpWrgBDW1Ia0SOOgxsi/nX7 bm/9yh85V95O03EzcXRSq70aRGAHrksgW9oK6t37U89+6hI7WhrFhMxII4roGUev SqiZUr9GyylNEdgRid4xglJScuO9+Ef/OCYEMqqQKC6hoyUB+pqu/uEP9RAh6Nec 3LGmaBs1r1/6SijbeJFbRg+tVAkCR80= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:21 2025 by rpki-client