$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa File: f4268c2a-59de-3a1d-b2ec-3952e6424669.roa (raw, json) Hash identifier: QzlZk7yF4kseGaoEThSCC98OBf+JBkrgKSJo+oVSfzg= Subject key identifier: A6:26:AE:C9:17:98:57:73:B7:FE:17:23:F2:34:E3:FA:24:5B:EE:D1 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584BAEC7C344A9B004C9F8285480 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 398343 IP address blocks: 165.140.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c3:44:a9:b0:04:c9:f8:28:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=7a1b71f1-6e20-4869-828d-7d38f7f8dc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:d1:ce:58:54:9f:96:26:9d:89:ab:c2:85: 00:7a:f6:86:e4:a0:84:77:6f:32:c9:c4:97:a7:00: 9c:dd:76:5e:86:f3:ee:fa:54:f0:6c:40:bc:1f:97: 0c:3c:81:93:92:92:45:35:43:0f:88:c7:f8:62:c3: 87:1c:fb:c8:ed:fe:23:d5:35:e6:60:67:f2:e6:20: 37:aa:51:41:bd:f6:c5:33:1e:01:f5:8d:8b:a5:86: 16:5b:40:bf:7f:a3:03:69:08:01:cd:a3:6f:49:09: cf:98:0f:34:d9:fd:c1:2d:12:82:ce:17:16:12:01: 61:d8:40:b4:6c:58:d0:b3:7e:a2:1f:ec:fb:a4:20: 07:b6:68:0d:66:32:66:a7:16:80:1c:5e:59:b6:a7: 4a:2b:91:10:25:35:5f:e6:55:80:63:b6:c4:8e:15: f9:b5:7b:00:c1:2f:1b:95:56:35:26:c7:d1:17:f3: 10:39:aa:9b:c4:39:af:40:3e:56:6a:7e:44:6d:e7: 17:db:4b:8a:8e:b0:c9:8d:bf:3f:ee:94:b6:aa:55: b1:65:b0:75:62:11:b1:e9:d2:07:c9:a2:8d:e1:58: 41:c9:7d:fb:3b:57:a8:e4:c0:fc:b6:e0:8f:56:b7: aa:cb:76:ce:a9:5f:42:28:bf:a8:29:8d:bd:b3:e1: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:26:AE:C9:17:98:57:73:B7:FE:17:23:F2:34:E3:FA:24:5B:EE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 165.140.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4e:f2:25:42:4c:8e:41:cf:0e:17:2a:48:97:24:1b:20:d4: 94:97:e5:76:d2:5b:89:11:2a:76:fa:4e:a9:2e:f2:42:49:35: 79:31:c9:13:0c:ca:55:35:f8:f0:db:fe:01:ca:90:3f:b9:e7: bc:19:dd:c6:20:43:ed:80:8a:54:04:70:0f:0f:68:f4:21:00: c6:c8:f1:c5:f4:44:de:0a:db:31:d1:f2:38:ab:80:78:be:45: 0f:3f:99:83:41:77:c3:94:f0:ec:26:ab:26:39:18:1c:37:75: 22:0e:0c:72:f3:26:bd:57:16:01:93:10:24:3f:1d:3a:30:b0: a3:4f:52:39:04:d5:49:9f:7b:37:21:8c:e7:1a:40:10:f9:4c: 7c:85:c6:46:22:f4:e4:65:0f:80:c7:e7:e0:bb:43:c4:62:af: fa:25:e4:79:0f:98:fe:11:46:a3:cd:e8:ec:b4:44:2d:fb:c3: d9:a3:09:97:84:93:09:3e:9d:4e:17:8f:95:c3:c1:b5:f7:6f: a8:a7:7b:ae:c5:fd:ff:1e:38:84:42:e6:0e:87:fc:d1:80:24: 99:eb:fe:69:58:04:6b:6c:60:cd:ba:c5:e1:b0:22:c6:08:d9: a5:b1:68:6c:5e:87:87:d9:7a:0b:30:c0:85:55:c2:c8:9c:d3: 69:31:d4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8NEqbAEyfgoVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk N2ExYjcxZjEtNmUyMC00ODY5LTgyOGQtN2QzOGY3ZjhkYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4rRzlhUn5YmnYmrwoUAevaG5KCEd28yycSX pwCc3XZehvPu+lTwbEC8H5cMPIGTkpJFNUMPiMf4YsOHHPvI7f4j1TXmYGfy5iA3 qlFBvfbFMx4B9Y2LpYYWW0C/f6MDaQgBzaNvSQnPmA802f3BLRKCzhcWEgFh2EC0 bFjQs36iH+z7pCAHtmgNZjJmpxaAHF5ZtqdKK5EQJTVf5lWAY7bEjhX5tXsAwS8b lVY1JsfRF/MQOaqbxDmvQD5Wan5EbecX20uKjrDJjb8/7pS2qlWxZbB1YhGx6dIH yaKN4VhByX37O1eo5MD8tuCPVreqy3bOqV9CKL+oKY29s+HU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYmrskXmFdzt/4XI/I04/okW+7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZjQyNjhjMmEtNTlkZS0z YTFkLWIyZWMtMzk1MmU2NDI0NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRO8iVCTI5Bzw4XKkiXJBsg1JSX5XbSW4kRKnb6Tqku8kJJNXkxyRMM ylU1+PDb/gHKkD+557wZ3cYgQ+2AilQEcA8PaPQhAMbI8cX0RN4K2zHR8jirgHi+ RQ8/mYNBd8OU8OwmqyY5GBw3dSIODHLzJr1XFgGTECQ/HTowsKNPUjkE1Umfezch jOcaQBD5THyFxkYi9ORlD4DH5+C7Q8Rir/ol5HkPmP4RRqPN6Oy0RC37w9mjCZeE kwk+nU4Xj5XDwbX3b6ine67F/f8eOIRC5g6H/NGAJJnr/mlYBGtsYM26xeGwIsYI 2aWxaGxeh4fZegswwIVVwsic02kx1BM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:32:40 2025 by rpki-client