$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa File: 4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa (raw, json) Hash identifier: SPfS+jED1TDm1sqRC8LbKGlJhG36Lo6gWLlL7U0CYjM= Subject key identifier: 5D:57:EA:04:71:4F:1E:6F:AC:1A:5F:33:28:04:8E:97:C8:D3:EA:49 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B9F6CD99B22F202B5A102BF00 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 62564 IP address blocks: 141.140.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:d9:9b:22:f2:02:b5:a1:02:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=0ae211b9-c555-404f-a001-30cfb9347498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:e3:ee:0b:af:3c:31:f5:c5:44:3a:e6:8b: ca:c8:e5:48:69:13:6b:07:49:4f:44:a0:ac:2c:68: 24:d8:ce:5a:e6:aa:e9:f8:51:e3:69:b0:c0:ba:0e: 30:66:fc:2b:dd:8c:d4:1a:2b:cc:8e:e6:74:b9:2c: c4:a3:35:bd:07:6a:58:c3:51:b7:a4:fe:49:a5:94: 1d:e6:6c:5b:82:93:ec:49:55:f2:1f:bb:b6:e4:fa: 38:31:1b:6e:46:6a:8b:56:eb:95:a8:85:b2:a9:70: e0:9f:96:e5:3f:32:9c:a4:a8:25:d9:ff:3a:5f:c3: 4b:9d:65:24:1e:89:41:69:fd:23:91:d7:18:75:a0: 1d:fb:42:36:99:8c:a8:a3:01:34:95:0f:31:fc:11: 78:57:74:3d:ac:ad:23:36:16:f1:6f:1c:f8:d3:07: 50:ae:3e:bb:a3:91:28:da:8e:7e:8a:50:3c:05:cf: 0e:76:8a:a5:24:5a:40:eb:61:b9:6c:a3:41:da:16: 87:56:5d:26:07:7a:ef:f0:2c:b5:46:05:2f:f4:a1: a2:d5:4d:8f:7e:7c:6f:06:79:d0:40:b7:35:56:af: 33:68:88:d8:96:66:89:86:a9:f7:f2:59:41:aa:6e: ed:8e:e3:61:c7:95:c4:c7:9b:b4:9e:f3:13:e6:65: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:EA:04:71:4F:1E:6F:AC:1A:5F:33:28:04:8E:97:C8:D3:EA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4fbcfa2a-987a-3f0f-bcb5-7d30240f1f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bf:8f:9c:20:33:7b:57:d7:1a:5c:38:f3:b1:bb:d2:03:84: b8:b8:93:19:ba:d9:6c:99:75:7e:f9:0a:cf:46:43:9e:f0:c4: bb:11:5f:2a:26:e2:4f:a7:57:fa:b1:22:bf:da:f7:d1:48:9a: 3f:c0:ff:b6:71:64:2f:e8:73:7e:ac:99:d3:01:09:0d:03:39: fa:ab:0d:92:a6:49:d5:78:36:38:26:70:34:db:0f:2b:22:49: 2f:da:b2:f7:e4:c6:51:88:76:2f:9e:82:1a:d3:49:28:08:c3: d0:63:34:58:f6:59:65:71:ca:91:83:31:03:fa:ca:52:9d:47: 87:8a:e9:be:e5:97:df:10:4d:b7:5c:1e:86:48:dd:b5:98:d8: 34:6c:70:ed:84:6f:0a:c0:b2:10:c6:3e:ef:31:0e:48:73:a5: a6:9c:bf:9c:f9:43:b0:31:f0:5a:95:06:e7:67:ee:4b:d5:ee: 14:ed:5a:ea:e5:18:c1:a5:9a:46:28:93:b7:78:ad:47:55:9f: 8a:be:95:ea:75:a5:a0:d9:68:bf:54:61:24:71:37:d4:6f:78: 17:37:16:4e:a2:7b:92:d1:72:82:c6:0d:55:80:42:c9:32:de: 19:50:4c:7b:8a:a1:f5:86:74:53:a0:c1:3b:85:13:54:d4:0a: 31:20:36:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNmbIvICtaECvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk MGFlMjExYjktYzU1NS00MDRmLWEwMDEtMzBjZmI5MzQ3NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCnj7guvPDH1xUQ65ovKyOVIaRNrB0lPRKCs LGgk2M5a5qrp+FHjabDAug4wZvwr3YzUGivMjuZ0uSzEozW9B2pYw1G3pP5JpZQd 5mxbgpPsSVXyH7u25Po4MRtuRmqLVuuVqIWyqXDgn5blPzKcpKgl2f86X8NLnWUk HolBaf0jkdcYdaAd+0I2mYyoowE0lQ8x/BF4V3Q9rK0jNhbxbxz40wdQrj67o5Eo 2o5+ilA8Bc8OdoqlJFpA62G5bKNB2haHVl0mB3rv8Cy1RgUv9KGi1U2PfnxvBnnQ QLc1Vq8zaIjYlmaJhqn38llBqm7tjuNhx5XEx5u0nvMT5mVVwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1X6gRxTx5vrBpfMygEjpfI0+pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNGZiY2ZhMmEtOTg3YS0z ZjBmLWJjYjUtN2QzMDI0MGYxZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2/j5wgM3tX1xpcOPOxu9IDhLi4kxm62WyZdX75Cs9GQ57wxLsRXyom 4k+nV/qxIr/a99FImj/A/7ZxZC/oc36smdMBCQ0DOfqrDZKmSdV4NjgmcDTbDysi SS/asvfkxlGIdi+eghrTSSgIw9BjNFj2WWVxypGDMQP6ylKdR4eK6b7ll98QTbdc HoZI3bWY2DRscO2EbwrAshDGPu8xDkhzpaacv5z5Q7Ax8FqVBudn7kvV7hTtWurl GMGlmkYok7d4rUdVn4q+lep1paDZaL9UYSRxN9RveBc3Fk6ie5LRcoLGDVWAQsky 3hlQTHuKofWGdFOgwTuFE1TUCjEgNqY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:11 2025 by rpki-client