$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/7100a224-9cd2-34f4-a88d-d44e98e8600d.roa File: 7100a224-9cd2-34f4-a88d-d44e98e8600d.roa (raw, json) Hash identifier: Mu9okOwYeAQljfRpOJay2J7Ix4H3biL+NxfQOpcnyd4= Subject key identifier: 1C:22:A7:5C:A0:38:75:34:8C:50:CE:39:AB:2F:57:C4:3D:7D:C6:DF Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584B41E7290DD84928F611C4C1C0 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/7100a224-9cd2-34f4-a88d-d44e98e8600d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 401243 IP address blocks: 140.235.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:29:0d:d8:49:28:f6:11:c4:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=b47837c5-e2df-44b8-ae19-9cbf9979e866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:76:c3:b1:50:0a:30:dd:f3:08:af:56:2c: eb:ad:8b:dd:0e:fc:64:c5:db:36:87:f1:bb:35:1b: 67:28:ba:ab:30:b0:b3:80:47:56:31:d1:51:ac:34: 42:98:ba:a3:f0:92:45:3b:d4:1e:d3:14:7b:53:56: b2:5d:c8:fc:27:83:da:da:ad:73:21:90:71:f6:dc: 7a:0e:f4:b2:27:07:5d:8f:14:87:7c:d4:2e:0d:7e: 30:e9:ec:f8:b9:6b:88:83:61:af:84:a3:73:dc:3e: 72:52:9d:1e:04:9f:74:04:51:35:e6:4e:e1:1d:1a: 31:b7:3a:e5:7a:3e:19:50:8f:05:6e:38:96:95:6e: ee:5f:86:92:da:81:c1:f7:35:5a:3a:df:09:6c:1f: 0d:5a:72:44:b4:cd:45:8a:8e:a8:66:98:d9:78:20: 41:5b:5b:5d:e9:3a:9f:85:1c:fb:2b:b9:e1:6e:4d: e0:6e:75:80:4d:3e:5f:be:33:8b:57:47:cc:7b:ea: 93:1d:cd:88:e3:70:a9:28:f3:48:94:d5:e3:83:a9: d1:7d:fd:4a:4e:41:19:ad:60:c8:6d:3b:aa:f8:33: 84:ee:68:f3:9a:11:c0:ef:bd:3c:e7:77:04:14:1d: a8:a0:e0:4e:a7:07:a5:81:38:36:d5:3a:c0:91:f9: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:22:A7:5C:A0:38:75:34:8C:50:CE:39:AB:2F:57:C4:3D:7D:C6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/7100a224-9cd2-34f4-a88d-d44e98e8600d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f0:de:4d:00:78:13:4c:ff:64:c6:ea:09:e8:3e:6f:d4:e8: 9a:5f:77:3b:46:45:23:f7:35:eb:d3:67:a3:70:d3:f3:d7:44: 0a:cd:f4:5f:07:be:34:7a:bd:d5:02:bb:01:dc:80:bf:77:86: 5c:45:02:68:12:f4:a0:d3:29:5e:10:60:c9:59:9e:15:78:6d: 11:16:45:8a:23:56:d0:0f:f8:93:db:a3:9e:b7:b3:74:f2:14: 99:fe:5f:ad:d3:17:24:7b:0a:8b:5a:a3:81:3a:45:30:1a:9b: 9d:7a:55:2c:05:c6:2e:ed:91:7c:75:bd:c8:5c:85:94:c0:50: e5:ce:87:09:3c:0c:5d:85:fe:27:46:b3:22:24:d8:5d:77:35: 37:40:b5:9a:1a:10:e4:b7:ba:29:18:9f:41:93:b9:56:a3:98: ab:d2:a9:3b:56:06:d1:70:7e:ba:1c:5a:cd:b7:99:b4:eb:6f: 47:cf:7b:05:6b:a9:23:44:e3:95:f4:59:35:7c:db:80:7c:24: 06:5e:78:01:43:cf:38:b8:d3:a7:78:f9:5a:17:7e:31:0b:63: 7b:6b:55:4a:fc:e8:2e:80:17:f0:b7:64:6c:cc:f1:8d:32:9a: 7f:99:f3:91:d7:f9:f4:e2:7e:e3:23:d3:7e:61:6f:d3:7a:dc: e1:8d:89:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5ykN2Eko9hHEwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YjQ3ODM3YzUtZTJkZi00NGI4LWFlMTktOWNiZjk5NzllODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZl2w7FQCjDd8wivVizrrYvdDvxkxds2h/G7 NRtnKLqrMLCzgEdWMdFRrDRCmLqj8JJFO9Qe0xR7U1ayXcj8J4Pa2q1zIZBx9tx6 DvSyJwddjxSHfNQuDX4w6ez4uWuIg2GvhKNz3D5yUp0eBJ90BFE15k7hHRoxtzrl ej4ZUI8FbjiWlW7uX4aS2oHB9zVaOt8JbB8NWnJEtM1Fio6oZpjZeCBBW1td6Tqf hRz7K7nhbk3gbnWATT5fvjOLV0fMe+qTHc2I43CpKPNIlNXjg6nRff1KTkEZrWDI bTuq+DOE7mjzmhHA770853cEFB2ooOBOpwelgTg21TrAkfkjowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwip1ygOHU0jFDOOasvV8Q9fcbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvNzEwMGEyMjQtOWNkMi0z NGY0LWE4OGQtZDQ0ZTk4ZTg2MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHw3k0AeBNM/2TG6gnoPm/U6JpfdztGRSP3NevTZ6Nw0/PXRArN9F8H vjR6vdUCuwHcgL93hlxFAmgS9KDTKV4QYMlZnhV4bREWRYojVtAP+JPbo563s3Ty FJn+X63TFyR7Cotao4E6RTAam516VSwFxi7tkXx1vchchZTAUOXOhwk8DF2F/idG syIk2F13NTdAtZoaEOS3uikYn0GTuVajmKvSqTtWBtFwfrocWs23mbTrb0fPewVr qSNE45X0WTV824B8JAZeeAFDzzi406d4+VoXfjELY3trVUr86C6AF/C3ZGzM8Y0y mn+Z85HX+fTifuMj035hb9N63OGNifI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:05 2025 by rpki-client