$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5ac40b43-066d-33be-999a-ca086f7d4bc9.roa File: 5ac40b43-066d-33be-999a-ca086f7d4bc9.roa (raw, json) Hash identifier: KRWM530B5utwgMbMahMfAgSZTPxJhfZTp4sucjdg0M0= Subject key identifier: 29:C2:95:7D:7C:60:F5:13:05:89:ED:B4:E0:63:B3:B3:C8:0E:33:B5 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6EB16186D633858276C80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5ac40b43-066d-33be-999a-ca086f7d4bc9.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 140.248.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:eb:16:18:6d:63:38:58:27:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=eab60d2f-2c5f-4c99-a56d-93ab05815b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:22:4a:ae:b5:75:84:b3:78:b7:69:8f:32: 9d:a7:55:2f:e9:62:49:45:fb:71:d2:99:f8:60:0a: 66:61:75:54:0e:4f:ab:ef:3b:92:f2:7b:5c:46:99: 33:ae:b0:74:b0:8c:cb:60:ae:93:1f:61:f8:72:2b: 33:38:9a:5e:03:44:a1:ca:4b:00:3a:25:6d:4f:36: 80:6b:7d:11:99:d8:a9:7d:a1:b9:bd:79:5a:c4:f1: 08:47:1a:71:94:9b:f3:58:63:7d:aa:45:ed:6d:fa: 68:0f:89:4b:81:61:e6:fe:b6:d5:60:67:47:c3:39: b0:14:18:d1:46:f9:f1:21:1f:2d:1d:94:6d:c7:19: 74:08:bd:56:a6:40:6a:eb:1f:3b:47:e1:fd:b0:99: 1c:76:8e:31:19:00:3a:f3:25:64:85:66:e2:ef:6f: cc:e9:e2:0f:e2:92:49:f7:f1:89:e3:ae:a0:e4:12: db:77:36:5a:6f:f0:0a:ad:62:2f:e2:84:98:9f:03: 10:76:57:dd:2d:a2:3a:84:57:89:bc:52:d9:6f:75: ac:49:c8:5a:36:c7:05:78:b8:9f:cf:b2:07:00:91: ef:bf:57:46:5d:64:fc:03:aa:82:24:cf:05:e4:cd: e1:7d:f2:fa:16:f8:d4:b0:1c:13:7e:97:8c:08:7f: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C2:95:7D:7C:60:F5:13:05:89:ED:B4:E0:63:B3:B3:C8:0E:33:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5ac40b43-066d-33be-999a-ca086f7d4bc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:44:1f:13:fa:bc:66:c9:f2:75:80:b7:20:fb:68:f6:41:8e: 7a:94:31:35:32:9b:ac:82:cf:b7:d9:b3:1f:27:79:62:5c:dc: 46:03:f9:ec:10:39:1f:cc:c9:d2:ed:d4:43:49:f4:15:3c:44: 01:98:92:70:58:0d:ba:1e:43:4d:92:3d:f0:3e:e3:80:35:a5: a8:61:1e:1c:ef:51:62:4d:4d:06:96:da:ae:ab:31:cc:46:97: c8:3f:8a:b6:68:26:79:6b:a0:b2:8c:bd:20:9e:46:28:fb:f0: 55:07:55:57:4b:0a:43:a2:dd:99:e4:15:97:a8:7a:77:fa:7f: ed:f4:7d:5f:ac:0a:64:f2:72:8a:9f:b4:f5:c6:1c:1f:0e:0b: d1:6a:68:77:78:b9:84:8b:88:d8:54:99:43:d6:7b:2a:f1:9c: a7:b0:13:1e:3e:e5:a6:fd:ad:46:e3:78:e1:b0:b1:66:db:8c: b3:6c:ab:c0:28:c7:b6:cd:19:8c:2d:b2:39:80:c6:8a:40:2f: 0a:d3:c8:1f:70:f7:c7:ba:74:70:56:7f:e7:cc:20:b4:20:02: fc:6a:8b:d7:13:23:89:aa:81:d9:25:be:d7:88:fe:ba:eb:79: 00:91:90:f4:98:40:8f:a2:d7:3c:6c:19:fc:b8:70:05:f4:38: a4:8e:58:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1usWGG1jOFgnbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZWFiNjBkMmYtMmM1Zi00Yzk5LWE1NmQtOTNhYjA1ODE1YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVwiSq61dYSzeLdpjzKdp1Uv6WJJRftx0pn4 YApmYXVUDk+r7zuS8ntcRpkzrrB0sIzLYK6TH2H4ciszOJpeA0ShyksAOiVtTzaA a30RmdipfaG5vXlaxPEIRxpxlJvzWGN9qkXtbfpoD4lLgWHm/rbVYGdHwzmwFBjR RvnxIR8tHZRtxxl0CL1WpkBq6x87R+H9sJkcdo4xGQA68yVkhWbi72/M6eIP4pJJ 9/GJ466g5BLbdzZab/AKrWIv4oSYnwMQdlfdLaI6hFeJvFLZb3WsSchaNscFeLif z7IHAJHvv1dGXWT8A6qCJM8F5M3hffL6FvjUsBwTfpeMCH+oVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnClX18YPUTBYnttOBjs7PIDjO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNWFjNDBiNDMtMDY2ZC0z M2JlLTk5OWEtY2EwODZmN2Q0YmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBEHxP6vGbJ8nWAtyD7aPZBjnqUMTUym6yCz7fZsx8neWJc3EYD+ewQ OR/MydLt1ENJ9BU8RAGYknBYDboeQ02SPfA+44A1pahhHhzvUWJNTQaW2q6rMcxG l8g/irZoJnlroLKMvSCeRij78FUHVVdLCkOi3ZnkFZeoenf6f+30fV+sCmTycoqf tPXGHB8OC9FqaHd4uYSLiNhUmUPWeyrxnKewEx4+5ab9rUbjeOGwsWbbjLNsq8Ao x7bNGYwtsjmAxopALwrTyB9w98e6dHBWf+fMILQgAvxqi9cTI4mqgdklvteI/rrr eQCRkPSYQI+i1zxsGfy4cAX0OKSOWHg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:05 2025 by rpki-client