$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa File: 1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa (raw, json) Hash identifier: JnvcRH3NuXuOq5IOaYolii4twZDu0Fi1/iTGcDLm21w= Subject key identifier: B8:7D:55:C6:C6:2B:4C:E5:4F:3E:1D:3F:3A:51:31:76:75:60:6A:63 Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584BAD62521AA961BFC976C52D80 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 13462 IP address blocks: 140.98.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:52:1a:a9:61:bf:c9:76:c5:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=4cc6c443-eaad-4373-944b-ba61e01a30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:bb:d5:c7:2f:58:57:a4:c9:cc:73:3d:4c: cb:6b:79:3d:7e:2f:37:25:2a:aa:cd:c8:c5:65:ef: 99:64:72:89:db:e0:18:76:3b:80:7d:37:83:47:98: d8:77:ae:8a:38:5c:54:ba:2a:4f:ea:2b:53:89:11: 35:92:ab:2d:75:08:a9:44:8a:cc:23:56:97:17:23: 90:2f:d8:b0:e5:1e:a7:d0:29:bb:bd:6f:87:cd:f3: 46:b4:33:68:3c:e7:06:73:02:61:13:dd:ec:07:79: ec:26:8f:c4:4e:7c:d1:79:31:65:78:7c:28:0a:68: 99:bd:ea:86:20:65:23:fd:6e:ef:a7:0a:7b:22:6a: ca:6f:87:80:ce:b1:a8:2d:cd:62:66:5f:38:c5:0e: dd:a0:f5:d8:3e:77:7f:62:52:9e:18:9c:77:ad:74: eb:e2:ae:40:c4:1f:07:57:b6:39:c0:2f:da:e0:d0: 41:6b:3d:a9:8c:7c:f8:fe:81:1a:01:94:b3:35:61: 50:38:6b:c6:82:de:c0:2f:cf:3f:8c:96:8f:ef:dd: bd:4e:f3:99:36:be:20:5b:71:47:6a:7a:42:45:86: 76:f6:e3:32:f7:00:7f:b5:a8:f5:97:0a:a4:cf:50: 8b:fc:d3:ae:01:3e:46:9d:95:a3:b3:a7:61:6b:37: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7D:55:C6:C6:2B:4C:E5:4F:3E:1D:3F:3A:51:31:76:75:60:6A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:51:57:06:fb:1a:62:8b:f5:29:5c:bf:57:e1:9d:86:5d:4b: 35:3c:ff:ef:c0:3c:59:65:e3:0d:3c:7b:36:f8:5e:24:89:e3: 6e:7e:16:3e:8f:25:11:51:45:2c:fe:d3:5b:35:eb:f8:0b:11: 8d:47:eb:5c:b1:43:1e:82:e3:5b:80:41:2c:e0:70:6d:05:15: d6:7d:fa:46:66:d4:6d:d0:f3:2b:f9:10:c7:1a:06:55:ac:4d: 36:d6:55:d3:c2:42:e3:83:ba:67:d7:10:14:06:ba:49:b2:84: f0:c8:ca:45:d7:a7:32:e8:52:e1:8a:7e:31:e1:f5:64:1c:ef: 07:65:3a:56:43:6e:ba:68:1f:0d:87:28:ca:b6:f7:63:1a:06: 78:58:95:26:97:da:95:55:ce:e0:f2:80:41:43:13:69:87:dc: 11:22:57:39:97:2f:af:c5:e8:01:c3:08:5c:4b:7d:77:67:4d: 65:8d:52:f9:96:90:f0:b9:ba:ca:3d:9b:6a:01:f5:84:f9:5d: a6:9a:99:63:47:74:dc:24:b6:e4:d9:df:13:9b:77:fe:9e:37: 53:a4:90:67:c0:7b:3d:1d:b1:a0:cf:da:87:2c:31:f7:34:a0: 2a:2d:f4:27:1a:d7:4e:45:fc:c9:84:5d:d8:95:14:04:43:b9: b2:fd:ae:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlIaqWG/yXbFLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NGNjNmM0NDMtZWFhZC00MzczLTk0NGItYmE2MWUwMWEzMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkny71ccvWFekycxzPUzLa3k9fi83JSqqzcjF Ze+ZZHKJ2+AYdjuAfTeDR5jYd66KOFxUuipP6itTiRE1kqstdQipRIrMI1aXFyOQ L9iw5R6n0Cm7vW+HzfNGtDNoPOcGcwJhE93sB3nsJo/ETnzReTFleHwoCmiZveqG IGUj/W7vpwp7ImrKb4eAzrGoLc1iZl84xQ7doPXYPnd/YlKeGJx3rXTr4q5AxB8H V7Y5wC/a4NBBaz2pjHz4/oEaAZSzNWFQOGvGgt7AL88/jJaP7929TvOZNr4gW3FH anpCRYZ29uMy9wB/taj1lwqkz1CL/NOuAT5GnZWjs6dhazfZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh9VcbGK0zlTz4dPzpRMXZ1YGpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvMWViNDkzNWEtZTVmMC0z ZWNkLWFlMTAtZjI3YWQ3MDZiMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVRVwb7GmKL9Slcv1fhnYZdSzU8/+/APFll4w08ezb4XiSJ425+Fj6P JRFRRSz+01s16/gLEY1H61yxQx6C41uAQSzgcG0FFdZ9+kZm1G3Q8yv5EMcaBlWs TTbWVdPCQuODumfXEBQGukmyhPDIykXXpzLoUuGKfjHh9WQc7wdlOlZDbrpoHw2H KMq292MaBnhYlSaX2pVVzuDygEFDE2mH3BEiVzmXL6/F6AHDCFxLfXdnTWWNUvmW kPC5uso9m2oB9YT5XaaamWNHdNwktuTZ3xObd/6eN1OkkGfAez0dsaDP2ocsMfc0 oCot9Cca105F/MmEXdiVFARDubL9rig= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:38 2025 by rpki-client