$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa File: 244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa (raw, json) Hash identifier: P0GB4VuJ3uSe3f+USufbztzP+rPxOrfQNe6R9u2h52g= Subject key identifier: 0F:93:DE:BC:34:9F:74:E3:54:04:A3:C6:7B:29:71:93:32:17:0A:D2 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B7C42A852BBB81B785E158480 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa Signing time: Sat 11 Oct 2025 10:42:15 +0000 ROA not before: Sat 11 Oct 2025 10:42:15 +0000 ROA not after: Fri 09 Jan 2026 11:42:15 +0000 asID: 54252 IP address blocks: 141.140.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:42:a8:52:bb:b8:1b:78:5e:15:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 11 10:42:15 2025 GMT Not After : Jan 9 11:42:15 2026 GMT Subject: CN=46161a3e-0591-4355-afcd-9c55142be061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:b0:3b:f9:d8:e2:d5:af:61:60:ea:3f:2d: 66:77:0d:0b:92:98:df:62:99:4a:dc:9a:d4:5d:c7: bf:c9:6b:3d:6b:05:33:bd:01:24:67:be:a6:df:a9: ef:9d:76:80:11:ab:25:7e:c1:3f:8f:08:3e:63:6e: a4:47:08:4f:bc:11:0c:c4:9f:3d:0d:96:87:75:99: 80:f2:b6:6f:95:66:9c:5b:f8:b6:c2:85:d1:8c:42: f9:e4:23:99:90:7c:57:00:47:b1:df:97:f8:ab:b8: 03:45:a5:7a:3c:42:5d:e6:93:28:30:2b:43:7f:7e: 89:1e:07:e8:d2:8c:d4:61:0f:2b:5c:5f:b1:cc:be: 8f:e8:dd:13:b1:94:a2:b1:59:42:d4:71:a6:6b:de: 61:89:09:dc:5c:17:24:63:47:35:5b:10:90:cf:5a: 70:bf:70:d8:e2:41:86:36:84:ad:9d:4a:66:41:0e: 58:74:ed:35:34:e1:d7:7e:d1:13:51:e1:76:8f:25: 6d:36:cd:91:25:4a:11:4f:ae:00:89:35:1f:a9:30: 5e:83:73:ed:99:e6:2c:5f:d2:46:b0:5e:7c:78:4c: 6c:87:b4:8f:de:78:b9:e7:a5:2b:4b:d2:81:2a:07: 00:6e:b7:0a:67:6e:72:ca:35:46:d5:d6:86:a7:9a: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:DE:BC:34:9F:74:E3:54:04:A3:C6:7B:29:71:93:32:17:0A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/244a57b6-3fd6-3f80-9aed-8a8c5a2bf030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c6:e0:b7:ff:39:7c:33:5f:13:c2:08:d7:ca:37:8e:b0:63: c7:f6:22:d8:b6:9b:ed:00:fb:5b:24:f1:9d:57:40:1e:98:6a: 50:be:d4:98:35:e4:82:45:3b:6a:97:08:b6:d8:63:52:f3:99: db:d8:8f:c5:da:36:18:7b:e6:2e:4b:14:fa:5a:97:34:02:e6: cc:59:59:e4:25:e3:0f:27:8b:d9:e8:1f:8d:78:1f:e7:70:c0: 85:8f:4d:72:0d:ee:7b:61:c5:f2:d6:ec:50:6a:03:4b:8e:c3: fa:d9:38:46:7a:38:50:69:d3:28:4a:ad:f3:d2:31:7c:ea:95: 40:51:2a:56:79:d3:85:2e:77:54:45:78:5e:fe:9d:4d:71:c5: a8:4c:ae:d9:8e:9a:82:6e:c4:9b:2a:61:bc:53:dc:6e:29:b7: b1:36:cb:c1:5a:61:ba:b3:ff:86:63:9d:82:22:85:23:28:9d: a8:11:06:42:9e:e8:56:f6:2c:4e:01:84:27:71:9c:fc:99:a3: b2:4c:c3:c6:1d:81:5c:09:c8:3b:d3:aa:c6:53:79:9e:af:ad: a8:c0:98:f2:5d:db:74:be:15:86:e5:e7:1a:96:85:c7:cd:57: 3a:fe:c9:0f:2b:d7:ae:64:fb:e5:02:fe:fa:1e:1d:79:d4:55: ff:7b:a8:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8QqhSu7gbeF4VhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MTAxMTEwNDIxNVoXDTI2MDEwOTExNDIxNVowLzEtMCsGA1UEAxMk NDYxNjFhM2UtMDU5MS00MzU1LWFmY2QtOWM1NTE0MmJlMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPawO/nY4tWvYWDqPy1mdw0LkpjfYplK3JrU Xce/yWs9awUzvQEkZ76m36nvnXaAEaslfsE/jwg+Y26kRwhPvBEMxJ89DZaHdZmA 8rZvlWacW/i2woXRjEL55COZkHxXAEex35f4q7gDRaV6PEJd5pMoMCtDf36JHgfo 0ozUYQ8rXF+xzL6P6N0TsZSisVlC1HGma95hiQncXBckY0c1WxCQz1pwv3DY4kGG NoStnUpmQQ5YdO01NOHXftETUeF2jyVtNs2RJUoRT64AiTUfqTBeg3PtmeYsX9JG sF58eExsh7SP3ni556UrS9KBKgcAbrcKZ25yyjVG1daGp5qNlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+T3rw0n3TjVASjxnspcZMyFwrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMjQ0YTU3YjYtM2ZkNi0z ZjgwLTlhZWQtOGE4YzVhMmJmMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELG4Lf/OXwzXxPCCNfKN46wY8f2Iti2m+0A+1sk8Z1XQB6YalC+1Jg1 5IJFO2qXCLbYY1LzmdvYj8XaNhh75i5LFPpalzQC5sxZWeQl4w8ni9noH414H+dw wIWPTXIN7nthxfLW7FBqA0uOw/rZOEZ6OFBp0yhKrfPSMXzqlUBRKlZ504Uud1RF eF7+nU1xxahMrtmOmoJuxJsqYbxT3G4pt7E2y8FaYbqz/4ZjnYIihSMonagRBkKe 6Fb2LE4BhCdxnPyZo7JMw8YdgVwJyDvTqsZTeZ6vrajAmPJd23S+FYbl5xqWhcfN Vzr+yQ8r165k++UC/voeHXnUVf97qEA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:26 2025 by rpki-client