$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa File: a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa (raw, json) Hash identifier: aKWqtReAIzzQZxN44w0yEo+7Z7Rwdgj81I2MQBYuxzk= Subject key identifier: 2F:BC:10:F2:35:DA:A0:71:FD:28:5B:A4:0E:E6:A3:26:73:DB:72:20 Certificate issuer: /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Certificate serial: 010D0C9F4328584B6BC7751E57400514A6400D00 Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 401478 IP address blocks: 140.235.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:75:1e:57:40:05:14:a6:40:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=400a37b5-f7f8-44b9-8787-ae5a760dd9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:03:c9:3a:af:86:75:e6:55:f9:7a:94:b0: 71:c6:49:de:d5:1a:c6:a3:f9:99:32:15:3e:06:84: 14:31:cd:37:26:46:f7:d7:ed:2c:15:e0:f7:a8:e5: 33:32:7d:19:4e:ff:57:19:3b:38:48:d2:84:e7:6e: 56:22:4a:d1:37:ef:e5:46:dc:d0:2f:c6:f7:76:59: fd:99:74:67:07:87:ca:d6:2d:3e:28:97:62:6d:31: c1:19:20:91:87:df:2b:6b:93:35:93:66:10:2b:30: 9c:1f:08:a1:13:f8:e6:50:86:42:0e:53:bf:2e:ea: ca:c3:00:6f:ed:30:54:38:1e:b9:0c:01:16:8a:a3: a3:8d:3a:00:fc:06:89:e4:d1:5e:93:6e:33:9d:6f: 7f:06:b6:c0:5f:50:b7:c6:28:30:fa:1d:d2:65:25: ec:8e:5b:40:2e:c2:98:9d:94:83:68:0d:df:0f:2f: df:8e:04:76:23:40:c2:77:d3:f5:b6:78:0e:02:2c: 19:2a:42:09:57:bc:cc:8a:f3:11:e2:8a:87:ec:84: 9c:e0:2f:4b:01:03:c8:b7:5d:03:48:1f:f1:3a:9b: 52:d7:55:33:e1:54:bc:72:c3:74:58:b6:b2:78:c2: c6:88:bd:2f:55:12:0a:ff:02:1d:f3:e1:7a:50:d6: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BC:10:F2:35:DA:A0:71:FD:28:5B:A4:0E:E6:A3:26:73:DB:72:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl X509v3 Authority Key Identifier: keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer sbgp-ipAddrBlock: critical IPv4: 140.235.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:b0:29:e1:af:0b:20:d7:bb:39:82:80:d9:e1:ec:d6:74: 72:5a:ec:e7:98:81:a8:74:d3:53:2b:d8:4a:57:36:59:9a:c3: 6b:54:99:04:9f:f5:98:50:1a:55:7b:7e:39:ac:b7:ca:5a:d1: 60:71:60:81:9a:71:f4:fe:26:6f:c6:ce:65:f1:bf:21:22:2c: c5:e4:ac:d0:87:bc:89:8b:1e:69:21:87:7b:17:6b:fd:63:60: 29:b0:9d:5e:ea:cb:f5:68:7e:39:70:27:15:88:6a:e7:b0:19: 46:da:34:2b:db:1a:c4:6d:81:95:b3:8b:a2:44:a5:ac:d9:b2: d8:e3:5a:e0:46:14:f1:2c:ea:97:06:3e:af:ed:48:bf:6b:32: 4d:45:05:0e:71:7a:b4:ad:3d:c3:a3:16:ee:8d:3f:b6:b6:72: cb:81:22:64:eb:ab:35:1f:51:76:d1:93:be:c1:ee:bf:65:5a: ea:d9:41:bb:c9:5e:65:76:94:b4:d1:21:e4:a8:27:d9:d6:d2: c3:57:c5:1c:fc:29:74:57:42:34:10:02:53:1a:ed:b9:c0:53: a3:e8:e4:7e:a9:49:ae:d1:4f:ef:96:de:30:62:ae:5b:b7:46: 45:ad:83:54:dc:02:b9:6d:65:90:08:ec:05:af:15:5a:83:c3: 7d:72:d4:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3UeV0AFFKZADQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM4ZjBmZWEtNGQzNy00MTU0LTk5MDktZDdmYjE2ZDc4 ODU2MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDAwYTM3YjUtZjdmOC00NGI5LTg3ODctYWU1YTc2MGRkOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEoDyTqvhnXmVfl6lLBxxkne1RrGo/mZMhU+ BoQUMc03Jkb31+0sFeD3qOUzMn0ZTv9XGTs4SNKE525WIkrRN+/lRtzQL8b3dln9 mXRnB4fK1i0+KJdibTHBGSCRh98ra5M1k2YQKzCcHwihE/jmUIZCDlO/LurKwwBv 7TBUOB65DAEWiqOjjToA/AaJ5NFek24znW9/BrbAX1C3xigw+h3SZSXsjltALsKY nZSDaA3fDy/fjgR2I0DCd9P1tngOAiwZKkIJV7zMivMR4oqH7ISc4C9LAQPIt10D SB/xOptS11Uz4VS8csN0WLayeMLGiL0vVRIK/wId8+F6UNZLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+8EPI12qBx/ShbpA7moyZz23IgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhm MGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZkNzg4NTYvYTJlZmFmNTctYmQzNC0z NDk0LWIzZmYtZDIyZjUyYzA3MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM4ZjBmZWEtNGQzNy00MTU0LTk5 MDktZDdmYjE2ZDc4ODU2LzFjOGYwZmVhLTRkMzctNDE1NC05OTA5LWQ3ZmIxNmQ3 ODg1Ni5jcmwwHwYDVR0jBBgwFoAUmbHNPC3VXnALETGq017gYgdqFFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2Zi MTZkNzg4NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsLsCnhrwsg17s5goDZ4ezWdHJa7OeYgah001Mr2EpXNlmaw2tUmQSf 9ZhQGlV7fjmst8pa0WBxYIGacfT+Jm/GzmXxvyEiLMXkrNCHvImLHmkhh3sXa/1j YCmwnV7qy/VofjlwJxWIauewGUbaNCvbGsRtgZWzi6JEpazZstjjWuBGFPEs6pcG Pq/tSL9rMk1FBQ5xerStPcOjFu6NP7a2csuBImTrqzUfUXbRk77B7r9lWurZQbvJ XmV2lLTRIeSoJ9nW0sNXxRz8KXRXQjQQAlMa7bnAU6Po5H6pSa7RT++W3jBirlu3 RkWtg1TcArltZZAI7AWvFVqDw31y1HM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:04:39 2025 by rpki-client