$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa File: ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa (raw, json) Hash identifier: T8I9pdqXr185MpYxhIzrn6Y23wVNANkYjjoxRDGumak= Subject key identifier: DA:CF:3B:9E:18:8B:4D:50:96:F3:80:AC:13:6F:26:DD:14:26:26:4D Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584BB2F83071D92CDC474D117FC0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 10753 IP address blocks: 140.228.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:71:d9:2c:dc:47:4d:11:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ca0f240a-28bc-4a1b-a32a-ee8b56545c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:9b:ec:63:87:10:df:3e:2e:3e:83:c1:ad: c3:9f:49:60:12:b7:2b:49:b7:7e:a3:59:2e:48:5b: ee:7d:91:ca:e9:8f:50:87:5b:84:d8:b9:a2:21:2b: da:aa:94:a7:a7:3d:e9:5d:c5:f2:ce:69:c7:2e:f5: 42:e2:27:1b:45:02:78:c6:be:27:93:95:b1:45:e3: 5a:3a:16:d5:e7:65:24:0c:38:1b:bc:7f:34:dd:51: 9a:7b:d7:5f:39:d2:ae:71:60:05:21:2c:b3:ad:e0: df:c4:2d:a9:1e:2a:ee:ef:0a:e9:20:b1:07:af:0e: 97:49:4e:9a:0e:97:3c:4e:8b:05:64:0b:ac:cd:b9: 88:1f:32:e8:be:9e:b7:da:3b:78:56:33:20:11:8e: 44:3d:1d:08:87:a3:af:86:59:81:aa:29:e4:1a:49: 86:63:c3:6c:c9:92:d8:38:49:10:6a:38:9d:b3:f5: c8:3f:b3:58:51:99:f8:d3:ef:2b:ac:46:b4:87:b3: 89:d3:d1:40:6f:42:24:b6:3e:32:e0:e6:1e:df:34: 36:a3:68:83:d6:88:28:0a:7c:7a:22:53:aa:e2:b2: ee:42:39:af:62:5b:f5:e4:f0:a9:11:a2:8d:0c:0e: 43:da:25:20:a1:d4:4a:de:21:e3:0f:85:2b:41:cf: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:3B:9E:18:8B:4D:50:96:F3:80:AC:13:6F:26:DD:14:26:26:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ddfb9e6d-0a8d-3a59-b3be-dffd6c4483e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7f:23:1a:b7:b3:6c:d6:06:86:c5:87:ce:4d:d8:54:5f:46: 8c:6c:71:1c:dd:1b:8e:d8:ac:9f:4d:6d:a9:52:b7:3a:63:0f: d9:39:b2:03:e7:c2:7a:e0:d8:99:2c:70:cf:ce:7e:87:04:68: 78:bc:58:50:64:4e:7f:a3:e3:32:5a:21:9c:1c:a6:38:b1:d5: 08:64:f2:66:1c:10:f0:37:62:ff:1c:52:ee:f2:da:cf:88:7c: e4:77:ba:32:2e:2c:95:7d:ec:b7:c5:74:62:76:d0:a2:76:e2: e4:76:ec:98:f7:38:f9:0e:a1:3f:a6:f1:51:ab:95:a4:4a:59: 51:85:a5:3e:77:49:f4:ef:12:7d:f8:22:9f:18:05:4e:8b:c1: 34:ff:41:c2:46:38:6b:86:46:c4:d1:da:a2:76:d9:7b:57:44: 07:bc:02:a8:2f:7f:1e:76:b9:a0:4c:b6:98:9e:20:ff:d8:87: 1e:9a:cc:e4:8a:7f:1d:a1:34:88:d0:0b:76:cb:ad:1b:a0:52: 4a:44:30:6d:f2:bc:7e:75:77:df:30:7d:19:55:5e:2e:62:6f: 5d:7c:c0:87:74:95:5a:d1:7b:ec:95:a4:71:11:11:b7:3e:25: 4b:7b:79:5e:18:62:e7:22:3f:38:4e:4b:46:f3:da:57:60:e7: 83:8e:a5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+DBx2SzcR00Rf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2EwZjI0MGEtMjhiYy00YTFiLWEzMmEtZWU4YjU2NTQ1YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLib7GOHEN8+Lj6Dwa3Dn0lgErcrSbd+o1ku SFvufZHK6Y9Qh1uE2LmiISvaqpSnpz3pXcXyzmnHLvVC4icbRQJ4xr4nk5WxReNa OhbV52UkDDgbvH803VGae9dfOdKucWAFISyzreDfxC2pHiru7wrpILEHrw6XSU6a Dpc8TosFZAuszbmIHzLovp632jt4VjMgEY5EPR0Ih6OvhlmBqinkGkmGY8NsyZLY OEkQajids/XIP7NYUZn40+8rrEa0h7OJ09FAb0Iktj4y4OYe3zQ2o2iD1ogoCnx6 IlOq4rLuQjmvYlv15PCpEaKNDA5D2iUgodRK3iHjD4UrQc/NmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrPO54Yi01QlvOArBNvJt0UJiZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZGRmYjllNmQtMGE4ZC0z YTU5LWIzYmUtZGZmZDZjNDQ4M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ/Ixq3s2zWBobFh85N2FRfRoxscRzdG47YrJ9NbalStzpjD9k5sgPn wnrg2JkscM/OfocEaHi8WFBkTn+j4zJaIZwcpjix1Qhk8mYcEPA3Yv8cUu7y2s+I fOR3ujIuLJV97LfFdGJ20KJ24uR27Jj3OPkOoT+m8VGrlaRKWVGFpT53SfTvEn34 Ip8YBU6LwTT/QcJGOGuGRsTR2qJ22XtXRAe8Aqgvfx52uaBMtpieIP/Yhx6azOSK fx2hNIjQC3bLrRugUkpEMG3yvH51d98wfRlVXi5ib118wId0lVrRe+yVpHEREbc+ JUt7eV4YYuciPzhOS0bz2ldg54OOpWY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:30 2025 by rpki-client