$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa File: 9d7cc95d-425d-3537-afef-cdb072121f20.roa (raw, json) Hash identifier: OFQpL9upIV2AMoS+AzwtCwxWegeqPSJ4ermAN5GV4ec= Subject key identifier: A7:58:FD:7A:7C:06:0D:22:2C:D5:5B:19:12:CD:CE:FB:BF:26:77:DD Certificate issuer: /CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2 Certificate serial: 010D0C9F4328584B6BC75A73AB17D9B2EEF83080 Authority key identifier: CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 174 IP address blocks: 140.235.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5a:73:ab:17:d9:b2:ee:f8:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6d0a8695-aadf-4e84-b255-33800d9e34d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:29:ed:8b:23:83:bf:47:c2:17:a2:65:6c: 6e:3d:35:51:96:d2:e2:1e:b1:86:54:14:ee:31:32: 9d:19:30:95:6c:5f:f4:8e:24:69:cd:a0:ad:4f:e4: 5c:13:7b:89:a5:34:9f:8f:d3:eb:4f:27:a0:eb:16: 70:8a:8d:d5:c6:61:70:26:62:9e:96:f1:ca:e9:0b: 46:49:47:d0:7f:5d:0d:ad:a8:8c:11:66:cc:0a:2c: 04:7f:ec:f0:dd:dc:7a:4c:ba:16:dd:a5:40:90:f7: 34:86:0e:c7:6b:a4:ae:c4:d2:bf:14:3b:95:ee:21: 16:d7:04:74:5a:db:8e:79:66:ac:39:0b:af:27:cc: 1f:ae:d6:87:df:f8:2e:f8:16:5f:68:80:2d:b7:f7: 12:b4:ba:f6:06:d1:a5:14:cd:60:30:d6:df:f9:c6: 00:f4:c0:89:53:33:c8:8a:e6:07:71:97:10:0e:a0: 75:17:9f:04:ed:3f:7a:99:66:05:76:a0:09:d5:41: b2:f6:bf:56:eb:22:fa:f3:66:d3:4b:e4:42:fb:ff: 5b:14:15:48:18:0c:5e:3e:9d:6e:21:05:c2:6b:5e: 14:e4:04:07:27:99:c7:66:04:f4:d3:d3:9b:48:6e: 8d:1c:e7:3f:ae:48:03:40:08:86:5d:9a:86:ae:73: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:58:FD:7A:7C:06:0D:22:2C:D5:5B:19:12:CD:CE:FB:BF:26:77:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/9d7cc95d-425d-3537-afef-cdb072121f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.crl X509v3 Authority Key Identifier: keyid:CC:9D:71:42:C5:AF:62:84:18:95:EE:25:BE:54:C8:60:AC:B0:ED:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7305d1a0-a779-4dc1-aeac-9e5b2fd9ebd2.cer sbgp-ipAddrBlock: critical IPv4: 140.235.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bf:20:bf:30:de:02:eb:c6:96:cc:33:a4:fb:9d:8e:33:b4: f4:89:64:ab:51:4f:b8:da:68:c8:28:08:d1:2f:9a:50:d9:13: 48:22:71:f6:dd:ec:13:4a:39:41:66:28:68:68:8a:3e:19:6c: 36:5c:89:89:3c:21:3d:71:83:3e:cf:12:80:85:fa:07:d0:a3: 8f:d2:0c:43:76:5d:2b:ba:e9:95:84:8b:fc:9d:fb:2e:5a:44: 54:b3:2b:2a:bf:c4:94:3f:cb:3e:4f:78:9e:be:ee:2b:97:54: fd:6f:4e:cd:51:41:a7:66:aa:96:03:69:fc:61:4e:46:58:b5: de:3a:be:b7:19:b9:ce:de:07:1c:0b:11:2a:51:db:3e:5f:03: e7:bf:1b:07:35:72:dd:53:68:ca:22:d1:e7:d8:5e:f9:64:33: 5a:83:71:83:9e:74:05:8b:9b:21:d3:e1:54:52:6c:82:08:15: 94:87:94:6a:64:e6:b8:28:c1:be:6c:ab:a4:54:63:51:c6:48: 69:6c:73:1d:d5:d9:a8:60:92:7f:9a:0f:8a:42:d9:69:5b:94: 44:e0:31:b0:ce:8a:96:4b:ba:f6:41:c9:29:ee:98:67:09:43: 16:a4:16:34:07:c2:4f:7b:d1:0d:18:5d:94:db:2b:6b:e6:fd: e7:0e:46:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1pzqxfZsu74MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMwNWQxYTAtYTc3OS00ZGMxLWFlYWMtOWU1YjJmZDll YmQyMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmQwYTg2OTUtYWFkZi00ZTg0LWIyNTUtMzM4MDBkOWUzNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqAp7Ysjg79HwheiZWxuPTVRltLiHrGGVBTu MTKdGTCVbF/0jiRpzaCtT+RcE3uJpTSfj9PrTyeg6xZwio3VxmFwJmKelvHK6QtG SUfQf10NraiMEWbMCiwEf+zw3dx6TLoW3aVAkPc0hg7Ha6SuxNK/FDuV7iEW1wR0 WtuOeWasOQuvJ8wfrtaH3/gu+BZfaIAtt/cStLr2BtGlFM1gMNbf+cYA9MCJUzPI iuYHcZcQDqB1F58E7T96mWYFdqAJ1UGy9r9W6yL682bTS+RC+/9bFBVIGAxePp1u IQXCa14U5AQHJ5nHZgT009ObSG6NHOc/rkgDQAiGXZqGrnP0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdY/Xp8Bg0iLNVbGRLNzvu/JnfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MzA1 ZDFhMC1hNzc5LTRkYzEtYWVhYy05ZTViMmZkOWViZDIvOWQ3Y2M5NWQtNDI1ZC0z NTM3LWFmZWYtY2RiMDcyMTIxZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzMwNWQxYTAtYTc3OS00ZGMxLWFl YWMtOWU1YjJmZDllYmQyLzczMDVkMWEwLWE3NzktNGRjMS1hZWFjLTllNWIyZmQ5 ZWJkMi5jcmwwHwYDVR0jBBgwFoAUzJ1xQsWvYoQYle4lvlTIYKyw7dQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MzA1ZDFhMC1hNzc5LTRkYzEtYWVhYy05ZTVi MmZkOWViZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa/IL8w3gLrxpbMM6T7nY4ztPSJZKtRT7jaaMgoCNEvmlDZE0gicfbd 7BNKOUFmKGhoij4ZbDZciYk8IT1xgz7PEoCF+gfQo4/SDEN2XSu66ZWEi/yd+y5a RFSzKyq/xJQ/yz5PeJ6+7iuXVP1vTs1RQadmqpYDafxhTkZYtd46vrcZuc7eBxwL ESpR2z5fA+e/Gwc1ct1TaMoi0efYXvlkM1qDcYOedAWLmyHT4VRSbIIIFZSHlGpk 5rgowb5sq6RUY1HGSGlscx3V2ahgkn+aD4pC2WlblETgMbDOipZLuvZBySnumGcJ QxakFjQHwk970Q0YXZTbK2vm/ecORuA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:56:00 2025 by rpki-client