$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa File: 971c721e-2148-3a91-aae8-d902249a3b48.roa (raw, json) Hash identifier: hNWagMyJnZ/SFOJFz7EhYvreiTlUtZjuOE75nz3n8y0= Subject key identifier: 14:6A:EE:79:BA:8B:BB:62:6F:79:30:80:88:66:8B:02:EF:31:22:1D Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F4328584BAA979A9054D44DB063716A80 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397388 IP address blocks: 140.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9a:90:54:d4:4d:b0:63:71:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=893ae458-b721-46dd-ae5e-bf148dd7b2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:b3:95:39:ac:2a:e1:2f:79:4d:0f:f6:94: 8c:09:ba:e7:03:11:f0:db:99:59:b1:17:b2:27:41: 11:dc:38:67:b5:e1:a9:29:a2:e3:90:55:1a:bd:96: bf:da:7c:2b:49:11:1e:73:76:71:86:d0:ec:ed:8d: 6e:5e:ca:d6:ee:9e:84:0a:c8:43:2c:14:21:4e:d6: b2:f7:eb:04:38:2f:c5:56:cb:1e:1a:0b:16:ed:8d: 78:e6:e6:58:05:df:8e:2b:2f:51:5f:61:b1:bb:79: eb:59:52:dc:33:67:e5:4b:3e:8f:8a:77:57:79:2d: 14:e2:28:59:16:4d:d0:55:51:e2:15:3f:9d:1a:37: c7:84:88:af:32:04:45:49:f3:fd:1b:6b:bc:e6:29: c0:1f:40:96:f6:78:c0:03:71:96:ad:00:0c:40:5a: 38:02:16:da:01:a9:f6:b8:3e:c7:94:96:7d:8b:ba: 2d:d6:48:d3:51:e5:a2:2a:d2:b8:d5:8e:d1:48:db: b5:41:ce:74:91:8a:8c:84:b9:c3:fa:ae:67:73:a3: 92:fb:1a:23:4f:6d:cc:b5:92:41:d0:c7:25:14:80: 48:3f:67:ab:26:21:53:52:e6:ac:57:d3:c2:88:7a: c3:ea:cf:c9:ec:3c:f2:16:8e:38:cc:cd:73:b7:02: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:EE:79:BA:8B:BB:62:6F:79:30:80:88:66:8B:02:EF:31:22:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c8:10:b7:1a:3a:37:e1:be:d1:a6:a2:63:ce:35:4a:ab:0c: 7f:c5:ab:db:18:73:65:e1:a5:33:b4:56:ea:5a:47:4d:d5:a3: 84:e3:47:39:59:e5:85:b2:29:4c:4e:2a:e4:af:d5:23:aa:8e: 97:d6:6e:e5:12:1b:e5:65:2e:ad:3f:0b:26:8a:8a:0a:18:c4: d1:f1:ae:df:2d:36:f6:18:ca:65:f1:4d:92:c6:d2:26:0f:c1: c0:da:3f:e3:54:b3:51:6a:a9:a9:e3:40:6a:3c:58:e5:2a:44: 41:ed:f2:8b:58:73:c4:94:2e:4b:d0:2c:3a:b7:39:37:61:15: a5:fb:a4:e4:ea:1e:bf:12:21:f1:19:00:45:6b:a7:c5:ee:28: 51:bc:fe:97:08:b6:2e:87:b1:8d:f4:5b:be:16:f6:81:76:ea: d1:16:4a:c4:fc:a2:7b:88:7c:e0:f8:23:85:41:7c:7a:7b:34: cd:20:f9:ab:74:a1:73:f7:dc:93:aa:f3:7d:09:55:c0:08:02: d8:d9:40:4c:fb:85:ea:68:7c:d7:01:35:03:de:af:f9:18:b5: a5:d4:86:8c:8b:12:38:c8:9b:e8:d8:b3:fe:bf:0d:4d:a3:91: eb:83:04:21:d2:95:72:77:38:3f:84:ea:f0:44:97:0f:a6:64: 25:d8:56:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5qQVNRNsGNxaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ODkzYWU0NTgtYjcyMS00NmRkLWFlNWUtYmYxNDhkZDdiMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFyzlTmsKuEveU0P9pSMCbrnAxHw25lZsRey J0ER3DhnteGpKaLjkFUavZa/2nwrSREec3ZxhtDs7Y1uXsrW7p6ECshDLBQhTtay 9+sEOC/FVsseGgsW7Y145uZYBd+OKy9RX2Gxu3nrWVLcM2flSz6PindXeS0U4ihZ Fk3QVVHiFT+dGjfHhIivMgRFSfP9G2u85inAH0CW9njAA3GWrQAMQFo4AhbaAan2 uD7HlJZ9i7ot1kjTUeWiKtK41Y7RSNu1Qc50kYqMhLnD+q5nc6OS+xojT23MtZJB 0MclFIBIP2erJiFTUuasV9PCiHrD6s/J7DzyFo44zM1ztwLqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRq7nm6i7tib3kwgIhmiwLvMSIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvOTcxYzcyMWUtMjE0OC0z YTkxLWFhZTgtZDkwMjI0OWEzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPIELcaOjfhvtGmomPONUqrDH/Fq9sYc2XhpTO0VupaR03Vo4TjRzlZ 5YWyKUxOKuSv1SOqjpfWbuUSG+VlLq0/CyaKigoYxNHxrt8tNvYYymXxTZLG0iYP wcDaP+NUs1FqqanjQGo8WOUqREHt8otYc8SULkvQLDq3OTdhFaX7pOTqHr8SIfEZ AEVrp8XuKFG8/pcIti6HsY30W74W9oF26tEWSsT8onuIfOD4I4VBfHp7NM0g+at0 oXP33JOq830JVcAIAtjZQEz7hepofNcBNQPer/kYtaXUhoyLEjjIm+jYs/6/DU2j keuDBCHSlXJ3OD+E6vBElw+mZCXYVgg= -----END CERTIFICATE-----Generated at Fri Nov 7 11:45:09 2025 by rpki-client