$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa File: b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (raw, json) Hash identifier: aXCU7GR3JuEVVSCDCBAjmkOWnJci9rWyrsq1yDJbOX0= Subject key identifier: 90:3E:52:A6:40:CE:17:68:B7:8F:26:D7:F4:4C:58:81:3D:17:DF:8A Certificate issuer: /CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Certificate serial: 010D0C9F4328584AECC143F47F71698A4CB19880 Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 48927 IP address blocks: 140.235.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:43:f4:7f:71:69:8a:4c:b1:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=87fccff3-9f9d-4bad-9ce1-8c77b4a5bfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:ed:3a:5b:7b:c0:8c:d9:87:22:9b:51:77: eb:95:1a:1a:fd:c8:33:d6:8f:46:23:6c:65:2d:cb: c7:0b:e2:62:e4:d8:23:99:72:72:cc:97:a7:34:bc: 59:cd:03:6f:16:64:52:b1:76:75:11:88:fa:75:97: d0:71:89:1d:ec:16:03:48:d3:0b:e3:cd:f9:3b:97: 53:65:c8:d1:f0:6b:de:0e:45:b1:4e:2f:db:85:bf: 7b:3e:f3:0c:ab:6e:cf:62:92:5a:1a:33:e3:76:a0: 93:77:f6:9c:be:90:89:30:c2:3e:35:c6:41:ef:0f: 24:ec:9d:24:19:8e:fd:f6:d1:5d:ec:04:b1:a1:a5: ae:6c:60:93:60:89:f7:23:f3:bb:a9:c6:07:ef:2e: c7:b8:4f:39:85:3b:f0:ba:37:f2:b0:2b:9b:d5:74: 21:80:14:42:ec:31:fe:3c:f6:f5:20:64:61:c1:da: 98:92:5c:3c:56:a5:85:cd:30:94:2b:8f:93:ab:76: c5:9d:e2:5e:4b:a1:06:b2:18:9a:b6:99:7a:c9:52: 22:4f:e0:78:19:af:7b:91:e8:b6:87:5e:37:74:c3: 61:a3:ac:14:e7:6d:11:be:ef:cb:b2:60:7a:0a:12: 25:cc:47:f4:da:66:72:cc:27:65:96:0b:63:c0:dd: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:52:A6:40:CE:17:68:B7:8F:26:D7:F4:4C:58:81:3D:17:DF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl X509v3 Authority Key Identifier: keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer sbgp-ipAddrBlock: critical IPv4: 140.235.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a2:75:ad:50:c2:95:d3:55:a0:e0:df:18:a9:89:ef:f7:c2: 5e:2b:c3:8a:2d:53:b6:6f:7d:ba:90:2f:5c:e7:f9:bc:66:77: 04:a4:cd:ae:d5:21:47:55:3b:9d:e6:ed:38:44:87:0c:8e:89: 57:91:49:c5:b7:ab:b3:6c:4a:a6:cb:55:91:49:0e:9a:68:7d: 2c:0d:6c:ef:4c:14:7b:ca:53:3c:47:54:1b:ce:6e:70:1a:7b: f1:5e:94:77:dd:a1:b6:fa:ba:db:a0:04:a4:1c:73:ce:5e:1a: 87:58:54:91:04:9e:ad:02:23:cf:56:05:10:5f:93:fd:c5:ab: 16:89:a8:f1:0f:5c:28:6e:c2:de:43:1a:e4:0b:0d:60:14:d7: 25:f7:58:1c:90:9e:88:e8:58:6c:6d:3a:9b:b0:d0:5a:39:36: 9b:8d:60:ba:aa:e7:62:a0:18:31:81:65:74:eb:18:d7:37:65: b4:54:1e:2e:97:18:47:c0:18:e1:a1:a0:da:b8:28:37:8a:4d: b3:07:df:9d:21:ac:c3:d9:6f:70:1d:56:8b:7f:12:06:05:0e: 70:2c:b8:e2:d0:4c:e7:65:6e:6b:6e:ae:c1:c0:c3:41:68:3c: 9b:b3:28:ef:6a:cf:56:cb:f8:74:5e:2e:74:45:83:0f:87:07: 48:c3:d8:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUP0f3FpikyxmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzZDA1MWQtYTczNC00ZjNkLTk1NDQtYTVlZDhiNjBj OTc2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODdmY2NmZjMtOWY5ZC00YmFkLTljZTEtOGM3N2I0YTViZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLtOlt7wIzZhyKbUXfrlRoa/cgz1o9GI2xl LcvHC+Ji5NgjmXJyzJenNLxZzQNvFmRSsXZ1EYj6dZfQcYkd7BYDSNML4835O5dT ZcjR8GveDkWxTi/bhb97PvMMq27PYpJaGjPjdqCTd/acvpCJMMI+NcZB7w8k7J0k GY799tFd7ASxoaWubGCTYIn3I/O7qcYH7y7HuE85hTvwujfysCub1XQhgBRC7DH+ PPb1IGRhwdqYklw8VqWFzTCUK4+Tq3bFneJeS6EGshiatpl6yVIiT+B4Ga97kei2 h143dMNho6wU520Rvu/LsmB6ChIlzEf02mZyzCdllgtjwN2qywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA+UqZAzhdot48m1/RMWIE9F9+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NDNk MDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVkOGI2MGM5NzYvYjZkY2QxMDctOGM3My0z YjM0LWI4YzktNWEzMjc0Y2RlNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODQzZDA1MWQtYTczNC00ZjNkLTk1 NDQtYTVlZDhiNjBjOTc2Lzg0M2QwNTFkLWE3MzQtNGYzZC05NTQ0LWE1ZWQ4YjYw Yzk3Ni5jcmwwHwYDVR0jBBgwFoAU/P4/8CP0pCKPdZ+tIz+BmXBCtJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NDNkMDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVk OGI2MGM5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOida1QwpXTVaDg3xipie/3wl4rw4otU7ZvfbqQL1zn+bxmdwSkza7V IUdVO53m7ThEhwyOiVeRScW3q7NsSqbLVZFJDppofSwNbO9MFHvKUzxHVBvObnAa e/FelHfdobb6utugBKQcc85eGodYVJEEnq0CI89WBRBfk/3FqxaJqPEPXChuwt5D GuQLDWAU1yX3WByQnojoWGxtOpuw0Fo5NpuNYLqq52KgGDGBZXTrGNc3ZbRUHi6X GEfAGOGhoNq4KDeKTbMH350hrMPZb3AdVot/EgYFDnAsuOLQTOdlbmtursHAw0Fo PJuzKO9qz1bL+HReLnRFgw+HB0jD2C8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:10 2025 by rpki-client