$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa File: 11b7e78a-cab0-37c5-9cf0-d793bc572880.roa (raw, json) Hash identifier: 9fQGKYCHLJO2YrDx8cgvfN1SDJWs8S3MDuLzVwtd/jc= Subject key identifier: 0D:9E:B0:D9:07:70:6A:C2:AC:AA:5F:14:D3:C7:DD:17:51:38:5A:82 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B99D7FB7602EDC775E84F085E Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54113 IP address blocks: 140.248.67.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fb:76:02:ed:c7:75:e8:4f:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=32a3f9fe-6fe1-4abd-99f4-0775b02771c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:18:c5:27:49:d6:4d:5a:ab:d1:ec:95:11: a5:b5:66:17:3b:3e:39:c1:6d:d8:11:ca:48:0d:a4: 4c:f1:07:a7:c8:54:1b:f5:80:e0:26:50:a6:65:a8: ae:4a:f3:80:17:21:35:c8:43:a9:75:2b:07:42:3f: 84:6f:d8:48:ae:d1:f8:fd:54:7d:34:a0:28:c4:a7: 5e:91:b0:5b:90:3e:a0:eb:36:b5:70:3d:78:f4:14: 4d:71:5e:e8:92:a8:2a:3d:d7:23:ff:66:8c:32:2f: 3f:78:ba:51:86:49:34:49:c7:05:29:4b:0a:c5:45: d4:59:ec:1e:f6:e2:94:a7:97:d2:a7:6d:16:54:e2: e4:4a:84:f5:2d:0a:8c:9b:63:36:d1:3f:d4:24:e9: ca:d8:20:d6:99:38:df:ea:16:2a:2c:e7:24:95:40: fe:a0:a8:7f:0e:68:f8:3e:98:0a:c1:1e:36:2b:ba: 34:ad:03:80:f1:fe:c1:47:a4:e8:b0:6f:6f:99:24: b3:9f:5b:22:5d:a9:9a:e9:5c:20:e6:2e:fb:b9:e0: 68:36:81:7f:95:0b:7e:d1:03:87:79:d3:4a:59:01: 9c:0b:e5:c3:42:ec:63:54:6b:3a:57:64:32:92:81: 0b:34:d6:9e:49:06:5d:71:7f:00:7f:8f:6b:d8:c3: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9E:B0:D9:07:70:6A:C2:AC:AA:5F:14:D3:C7:DD:17:51:38:5A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.67.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:13:2f:e6:c5:7d:6f:8c:d8:1e:50:c9:ac:9c:4e:5a:f2:5f: 42:8c:5f:5a:f3:13:7d:db:4b:1a:eb:90:b1:a7:0f:48:0a:cb: fc:06:8e:f5:9e:c7:4b:f4:ce:ae:2b:fb:ea:15:ab:4f:74:3c: 56:8d:ac:7c:04:55:1a:e8:d9:03:8f:f7:ea:b4:19:11:c4:60: 55:d5:bd:55:a1:bb:43:d5:8e:51:b4:a0:6c:c3:85:40:6b:7a: e5:ac:ae:3a:cc:69:c6:d4:88:1b:3c:0e:36:cd:dc:51:89:dc: 6d:c3:41:0d:e8:76:13:8b:96:75:c2:60:b2:14:9c:7f:f3:1b: c1:f8:89:59:3e:4a:87:6a:a3:b2:25:d2:be:ed:9e:8e:5a:51: 21:06:d7:0a:19:1e:77:c2:15:2b:88:46:58:f2:a8:08:c5:4e: aa:d4:27:0a:c5:97:70:64:a8:9c:11:91:d2:08:1c:0b:55:72: 01:74:0a:08:d3:ff:55:be:8a:1f:61:57:8a:5b:e6:72:5b:cb: b0:f6:6d:51:89:a8:1e:35:22:ad:91:1c:53:74:70:d4:ad:cb: 0e:71:13:e9:a6:37:a5:0a:ff:45:0f:ed:2f:03:02:14:fe:21: b3:0b:ca:8b:d6:28:20:e6:95:cc:46:1d:26:bf:c7:78:40:48: 63:d1:c3:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuZ1/t2Au3HdehPCF4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzJhM2Y5ZmUtNmZlMS00YWJkLTk5ZjQtMDc3NWIwMjc3MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aMYxSdJ1k1aq9HslRGltWYXOz45wW3YEcpI DaRM8QenyFQb9YDgJlCmZaiuSvOAFyE1yEOpdSsHQj+Eb9hIrtH4/VR9NKAoxKde kbBbkD6g6za1cD149BRNcV7okqgqPdcj/2aMMi8/eLpRhkk0SccFKUsKxUXUWewe 9uKUp5fSp20WVOLkSoT1LQqMm2M20T/UJOnK2CDWmTjf6hYqLOcklUD+oKh/Dmj4 PpgKwR42K7o0rQOA8f7BR6TosG9vmSSzn1siXama6Vwg5i77ueBoNoF/lQt+0QOH edNKWQGcC+XDQuxjVGs6V2QykoELNNaeSQZdcX8Af49r2MM4mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA2esNkHcGrCrKpfFNPH3RdROFqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMTFiN2U3OGEtY2FiMC0z N2M1LTljZjAtZDc5M2JjNTcyODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhD4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCiEy/mxX1vjNgeUMmsnE5a8l9CjF9a8xN920sa65Cxpw9ICsv8Bo71 nsdL9M6uK/vqFatPdDxWjax8BFUa6NkDj/fqtBkRxGBV1b1VobtD1Y5RtKBsw4VA a3rlrK46zGnG1IgbPA42zdxRidxtw0EN6HYTi5Z1wmCyFJx/8xvB+IlZPkqHaqOy JdK+7Z6OWlEhBtcKGR53whUriEZY8qgIxU6q1CcKxZdwZKicEZHSCBwLVXIBdAoI 0/9VvoofYVeKW+ZyW8uw9m1RiageNSKtkRxTdHDUrcsOcRPppjelCv9FD+0vAwIU /iGzC8qL1igg5pXMRh0mv8d4QEhj0cOL -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:13 2025 by rpki-client