$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa File: 5ada8445-3f7b-3125-a598-b94b15e97031.roa (raw, json) Hash identifier: ycVXBj+h3eeVQx/Wt9YES+lGuU3t6QkFyyDCxQMDu0I= Subject key identifier: 60:C6:56:86:DA:A0:1A:8C:8E:2C:48:EF:4C:59:04:95:03:01:ED:85 Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Certificate serial: 010D0C9F4328584B9E07C688D5443DFEEEEEA740 Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 329097 IP address blocks: 165.140.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c6:88:d5:44:3d:fe:ee:ee:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=35b383e6-550a-4d6b-b12f-5fd14f4c06fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:7a:cc:1d:b3:e5:12:af:6a:1c:88:7c:27: 4d:5d:37:49:50:42:1b:da:d8:37:a5:f7:85:98:ff: c2:62:ae:96:ca:c0:eb:82:fd:e2:2f:2b:a9:fb:de: f3:3a:e5:33:e4:bc:0d:90:9f:ff:52:be:66:ba:6e: 53:31:50:ed:02:70:81:cd:78:15:b1:ba:bd:b5:a1: 50:0e:e4:26:49:fc:ea:28:39:6b:f1:0b:e7:ae:cc: 8e:5e:2e:13:de:98:46:dd:22:34:78:99:07:62:02: 18:0d:6d:98:08:c9:52:5c:5f:98:46:59:8b:71:f8: b7:be:d5:9e:b7:26:71:39:6c:64:c8:ee:79:02:a1: b6:21:1c:24:df:0c:bd:96:7f:bc:59:77:e5:e9:79: 31:b4:0c:b6:32:f1:93:b0:1c:44:3e:2c:6d:80:b2: 89:e2:fd:70:c4:5d:96:25:3c:cf:bb:5b:6e:53:d6: 89:25:10:5f:1a:f0:d4:c3:05:4e:16:c0:8d:cd:ff: 1b:b4:b3:36:bd:cc:00:3c:b4:87:28:64:2d:86:9a: 77:2d:8e:da:2d:c7:4f:e2:b5:3d:ac:0d:1b:8e:8a: 26:18:30:8a:e9:0f:81:86:89:54:1d:b1:c6:77:26: 2f:b9:d6:38:0d:21:a9:a8:84:e4:88:e0:7c:2f:ed: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:56:86:DA:A0:1A:8C:8E:2C:48:EF:4C:59:04:95:03:01:ED:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/5ada8445-3f7b-3125-a598-b94b15e97031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl X509v3 Authority Key Identifier: keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer sbgp-ipAddrBlock: critical IPv4: 165.140.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:39:fa:c3:19:21:e5:af:b1:2a:b6:c7:0d:f2:87:e8:de:69: 5e:ec:90:27:74:3e:e0:c9:be:7c:b4:43:9c:fa:bd:50:0f:79: eb:56:8a:e7:f4:00:21:9a:b2:c3:39:fb:3e:8b:6c:c0:b1:29: ed:04:72:49:64:76:ee:e5:f2:33:e6:51:e4:53:b8:43:7b:0b: 76:ae:fa:65:56:74:20:29:70:b5:f5:ca:1b:b4:ba:57:0a:43: 68:54:d2:e2:5d:1b:b9:c9:e8:52:14:29:15:9f:d6:80:6c:39: 40:14:20:2a:d2:75:12:17:bb:a3:71:3e:b3:7b:00:d7:ba:47: bc:59:d7:c0:99:48:05:d3:85:df:ad:49:b1:7b:9a:80:26:a0: 84:82:78:52:80:98:c0:a1:8a:b1:20:e6:08:3e:05:f4:c5:09: 09:49:ce:32:56:b1:08:a9:ce:ec:f0:eb:2a:b1:c6:63:3e:b9: 96:c9:c0:15:a1:9f:d1:a9:8e:1c:1f:c5:a7:33:f4:1a:35:4f: b1:3b:bd:c3:f7:97:c9:97:70:81:b0:0d:95:c8:22:28:d9:b0: cc:86:21:ac:12:a2:6b:1f:25:33:80:1b:51:54:bc:6e:8e:13: 95:ba:04:b3:c7:09:57:08:8e:af:08:32:29:81:61:98:29:69: 34:26:94:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8aI1UQ9/u7up0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5YmZjZTEtNWU3NC00YzkyLTk1NGQtODcyODk2OWQ4 ODM1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzViMzgzZTYtNTUwYS00ZDZiLWIxMmYtNWZkMTRmNGMwNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq16zB2z5RKvahyIfCdNXTdJUEIb2tg3pfeF mP/CYq6WysDrgv3iLyup+97zOuUz5LwNkJ//Ur5mum5TMVDtAnCBzXgVsbq9taFQ DuQmSfzqKDlr8QvnrsyOXi4T3phG3SI0eJkHYgIYDW2YCMlSXF+YRlmLcfi3vtWe tyZxOWxkyO55AqG2IRwk3wy9ln+8WXfl6XkxtAy2MvGTsBxEPixtgLKJ4v1wxF2W JTzPu1tuU9aJJRBfGvDUwwVOFsCNzf8btLM2vcwAPLSHKGQthpp3LY7aLcdP4rU9 rA0bjoomGDCK6Q+BholUHbHGdyYvudY4DSGpqITkiOB8L+0JVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDGVobaoBqMjixI70xZBJUDAe2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYzli ZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4OTY5ZDg4MzUvNWFkYTg0NDUtM2Y3Yi0z MTI1LWE1OTgtYjk0YjE1ZTk3MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2M5YmZjZTEtNWU3NC00YzkyLTk1 NGQtODcyODk2OWQ4ODM1L2NjOWJmY2UxLTVlNzQtNGM5Mi05NTRkLTg3Mjg5Njlk ODgzNS5jcmwwHwYDVR0jBBgwFoAUWSOVY38ODRqcqJwYgOE4O8qtc+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYzliZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4 OTY5ZDg4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG45+sMZIeWvsSq2xw3yh+jeaV7skCd0PuDJvny0Q5z6vVAPeetWiuf0 ACGassM5+z6LbMCxKe0Ecklkdu7l8jPmUeRTuEN7C3au+mVWdCApcLX1yhu0ulcK Q2hU0uJdG7nJ6FIUKRWf1oBsOUAUICrSdRIXu6NxPrN7ANe6R7xZ18CZSAXThd+t SbF7moAmoISCeFKAmMChirEg5gg+BfTFCQlJzjJWsQipzuzw6yqxxmM+uZbJwBWh n9Gpjhwfxacz9Bo1T7E7vcP3l8mXcIGwDZXIIijZsMyGIawSomsfJTOAG1FUvG6O E5W6BLPHCVcIjq8IMimBYZgpaTQmlAY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:24 2025 by rpki-client