$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa File: 1659b1c5-41b8-3427-8d26-98e2e6e50854.roa (raw, json) Hash identifier: tHq+cOfyNAekzlYijCeYGCwe1wusXaJgZLHMxF22yTA= Subject key identifier: E9:0B:A9:A3:74:66:4B:D2:78:58:97:E4:A9:E7:8C:0E:6E:46:95:46 Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584BAD624D461E32B09F01BA2E40 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 140.98.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4d:46:1e:32:b0:9f:01:ba:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=37c3d003-b993-4e5b-8074-42b21f143f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:ab:dd:81:ba:33:19:3d:07:cc:51:c8:89: ee:01:eb:e0:ac:5e:a0:fb:94:b5:12:c8:f5:60:10: 87:a4:27:d9:03:24:e6:34:31:95:ab:d7:13:a2:81: ec:8d:26:ce:e5:ab:ba:e0:86:f5:ec:ba:d0:0d:84: 2c:68:28:30:e4:a2:5e:3b:2d:e9:51:60:71:9d:1e: fb:15:a6:11:a9:d1:73:88:05:13:e5:5f:ba:f6:7d: ec:95:01:ed:be:0e:36:3c:00:f0:7c:79:92:5d:60: 87:39:55:bb:a2:a9:e7:34:c1:7a:99:9f:d5:10:45: d2:e4:60:16:3c:7b:4f:c6:7b:28:31:08:f7:62:f0: b2:a4:30:32:9e:f5:2a:d4:c6:1f:8e:71:f7:8c:e3: b5:67:d2:eb:b2:eb:ff:4f:c3:6d:8b:4b:d6:21:69: 3d:19:8a:78:2d:74:1e:48:e0:fb:16:f9:02:f3:c0: 53:6c:de:c8:92:b5:37:8d:46:d6:d5:2a:15:1e:6b: 0f:57:bb:9c:03:4a:4c:ad:e8:35:e0:29:83:3f:c3: af:d3:75:29:46:f9:10:1d:0d:e1:b4:a1:1a:6a:d4: 17:fd:f3:7c:4c:53:48:63:15:50:4b:32:64:d7:74: d5:36:02:cd:7c:ce:af:43:f3:6c:ce:9f:aa:17:1f: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:A9:A3:74:66:4B:D2:78:58:97:E4:A9:E7:8C:0E:6E:46:95:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1659b1c5-41b8-3427-8d26-98e2e6e50854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6f:fb:8e:0c:be:f2:ac:fa:16:2c:8a:48:64:1a:b8:f6:ea: 37:c0:56:6f:52:2d:29:c1:dd:d6:fb:24:17:5c:cd:4c:b3:0a: 15:b2:60:dd:84:e4:50:65:f1:97:ba:05:d4:a8:47:87:4d:de: 2b:79:94:a1:e4:fb:f9:42:40:b2:c9:2e:38:20:78:b5:b5:62: 89:5f:25:d6:e5:6f:f5:45:31:d0:de:02:e8:19:9b:b7:02:f2: f8:83:43:65:a0:43:65:5f:04:92:81:8e:c8:40:35:54:03:40: 41:2a:8c:10:a5:60:0b:9a:b7:41:9e:8a:a4:d5:7d:08:ea:b6: 22:eb:ac:2d:b4:c3:65:cf:3e:0c:5c:71:07:ce:01:e9:55:e5: 9c:1d:f1:c4:7e:b3:7f:e6:db:e5:0a:ca:d3:4b:a5:9a:23:f1: 95:fb:42:78:dc:38:10:e2:93:e4:30:c3:ac:a4:5f:22:b0:03: 46:82:d1:be:c0:8f:e6:68:4f:3b:d4:2f:65:e6:d5:09:48:9f: 05:0e:4c:53:5e:89:6e:46:ed:67:95:3e:94:68:20:9d:b7:bb: 1b:d5:f8:a5:41:b9:cf:cc:a4:f3:cc:39:b9:21:f4:9c:99:96: 7a:d1:71:2f:19:aa:6b:a3:cd:68:3a:a0:95:17:fa:8e:a6:14: 7e:48:5f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYk1GHjKwnwG6LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MzdjM2QwMDMtYjk5My00ZTViLTgwNzQtNDJiMjFmMTQzZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoymr3YG6Mxk9B8xRyInuAevgrF6g+5S1Esj1 YBCHpCfZAyTmNDGVq9cTooHsjSbO5au64Ib17LrQDYQsaCgw5KJeOy3pUWBxnR77 FaYRqdFziAUT5V+69n3slQHtvg42PADwfHmSXWCHOVW7oqnnNMF6mZ/VEEXS5GAW PHtPxnsoMQj3YvCypDAynvUq1MYfjnH3jOO1Z9Lrsuv/T8Nti0vWIWk9GYp4LXQe SOD7FvkC88BTbN7IkrU3jUbW1SoVHmsPV7ucA0pMreg14CmDP8Ov03UpRvkQHQ3h tKEaatQX/fN8TFNIYxVQSzJk13TVNgLNfM6vQ/Nszp+qFx++awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkLqaN0ZkvSeFiX5KnnjA5uRpVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvMTY1OWIxYzUtNDFiOC0z NDI3LThkMjYtOThlMmU2ZTUwODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtv+44MvvKs+hYsikhkGrj26jfAVm9SLSnB3db7JBdczUyzChWyYN2E 5FBl8Ze6BdSoR4dN3it5lKHk+/lCQLLJLjggeLW1YolfJdblb/VFMdDeAugZm7cC 8viDQ2WgQ2VfBJKBjshANVQDQEEqjBClYAuat0GeiqTVfQjqtiLrrC20w2XPPgxc cQfOAelV5Zwd8cR+s3/m2+UKytNLpZoj8ZX7QnjcOBDik+Qww6ykXyKwA0aC0b7A j+ZoTzvUL2Xm1QlInwUOTFNeiW5G7WeVPpRoIJ23uxvV+KVBuc/MpPPMObkh9JyZ lnrRcS8ZqmujzWg6oJUX+o6mFH5IX3Q= -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:41 2025 by rpki-client