$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/9736f961-b2ed-356a-96b1-5e9cc51ca908.roa File: 9736f961-b2ed-356a-96b1-5e9cc51ca908.roa (raw, json) Hash identifier: Sz4ESk1MsI8XdSwunmb5cCwVEl+lkL7wKB+gkgWNbfQ= Subject key identifier: 7A:40:75:A7:8D:56:08:31:09:CE:AA:99:63:D2:51:5F:CB:8E:57:5F Certificate issuer: /CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd Certificate serial: 010D0C9F4328584B95A7A0E3C6F6CAD99407F400 Authority key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/9736f961-b2ed-356a-96b1-5e9cc51ca908.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 216030 IP address blocks: 140.235.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a0:e3:c6:f6:ca:d9:94:07:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b0accf92-6421-4045-934b-f37a9d22e5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:cd:22:7b:47:43:72:e5:18:9a:a0:f5:b8: 94:6f:2b:54:f8:69:a8:67:27:a6:c6:81:35:73:76: 55:67:ab:37:d0:c7:5e:bb:e5:b5:23:60:9d:35:4d: 82:b8:d5:86:f5:3d:f9:c3:2a:f0:bc:b0:7a:42:97: 8f:b5:58:e0:59:b4:32:9a:59:ba:08:19:0f:d6:36: ae:91:5e:7a:f0:72:9a:32:7a:62:08:83:6e:1e:61: f9:1a:03:23:06:c8:6d:dc:99:b7:83:0c:29:5e:7b: fa:d7:36:cc:d5:a1:b8:73:64:2c:59:54:b9:f1:c0: 2b:de:8d:7c:6b:b7:fe:07:3c:33:f9:11:da:54:1b: 3e:42:33:ad:19:36:4a:8a:97:06:24:8f:bf:28:1a: 25:b6:c4:54:9e:1e:fa:8a:1e:bf:b7:c8:55:cb:65: d8:42:77:d1:75:cc:39:d3:fe:4a:59:82:1c:70:d3: 53:f8:c4:e4:c2:94:b8:ac:2b:a8:dc:ca:7a:58:66: 71:0c:ed:53:37:f5:0e:03:fb:a5:b8:be:09:b3:88: e1:bc:91:16:af:a8:c3:b9:c0:9c:2e:5a:53:f2:f3: ec:67:9d:da:0e:ae:93:31:21:86:c5:77:8c:0d:6b: d5:c7:e9:2a:a0:8a:c9:4c:9c:dd:96:f3:aa:d0:aa: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:40:75:A7:8D:56:08:31:09:CE:AA:99:63:D2:51:5F:CB:8E:57:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/9736f961-b2ed-356a-96b1-5e9cc51ca908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl X509v3 Authority Key Identifier: keyid:F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer sbgp-ipAddrBlock: critical IPv4: 140.235.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:39:03:6e:bb:5e:d7:56:e6:8f:8e:c7:da:98:10:ca:5c:3f: e2:57:b4:68:90:34:60:d4:9a:24:4e:fd:ee:55:c2:c7:a9:1b: e9:5c:57:da:2a:ac:46:d5:b1:b7:f8:81:73:28:11:af:d9:69: b2:e4:19:92:d0:2f:33:4f:d7:e6:24:8d:f7:f6:da:dc:bd:d9: ac:90:ce:55:4f:52:52:96:bb:90:50:34:99:f8:a2:90:a1:49: b7:20:ce:cd:df:bc:82:13:88:f2:41:56:c7:a3:68:b2:54:92: e7:ce:ee:f9:9a:b4:cf:bc:d1:a8:b0:e4:da:20:f7:20:c9:0b: 71:6f:7b:8d:dd:fe:d9:e0:2c:15:b1:af:d4:a8:8d:92:f8:74: e0:25:f4:d4:36:58:ef:69:00:79:68:8f:f9:3d:04:d0:fa:f5: 33:62:cc:f9:6a:99:a6:c9:43:ce:21:4d:fc:b4:ae:3e:a7:49: 35:83:c1:ed:90:58:68:2b:ca:c0:d3:b7:7b:d1:57:3d:ea:18: 06:8b:e7:da:98:c4:fe:07:78:b6:8e:b0:c4:ad:c0:fa:86:d3: 6f:02:08:e9:d4:23:1a:c8:0c:81:76:c7:69:20:81:22:3b:14: 0e:69:c7:79:13:4a:4f:5e:6a:42:5a:f3:ee:45:d3:96:9d:ee: 44:ac:c1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6DjxvbK2ZQH9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVmNDc3ZWUtNGNkNy00ZDhmLTk1MTctOWNmMjViMjM5 ZmNkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjBhY2NmOTItNjQyMS00MDQ1LTkzNGItZjM3YTlkMjJlNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiTNIntHQ3LlGJqg9biUbytU+GmoZyemxoE1 c3ZVZ6s30Mdeu+W1I2CdNU2CuNWG9T35wyrwvLB6QpePtVjgWbQymlm6CBkP1jau kV568HKaMnpiCINuHmH5GgMjBsht3Jm3gwwpXnv61zbM1aG4c2QsWVS58cAr3o18 a7f+Bzwz+RHaVBs+QjOtGTZKipcGJI+/KBoltsRUnh76ih6/t8hVy2XYQnfRdcw5 0/5KWYIccNNT+MTkwpS4rCuo3Mp6WGZxDO1TN/UOA/uluL4Js4jhvJEWr6jDucCc LlpT8vPsZ53aDq6TMSGGxXeMDWvVx+kqoIrJTJzdlvOq0Kq0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpAdaeNVggxCc6qmWPSUV/LjldfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NWY0 NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2YyNWIyMzlmY2QvOTczNmY5NjEtYjJlZC0z NTZhLTk2YjEtNWU5Y2M1MWNhOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzVmNDc3ZWUtNGNkNy00ZDhmLTk1 MTctOWNmMjViMjM5ZmNkLzc1ZjQ3N2VlLTRjZDctNGQ4Zi05NTE3LTljZjI1YjIz OWZjZC5jcmwwHwYDVR0jBBgwFoAU988JaZ84xtB5CFqotQs2ac4OvjgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NWY0NzdlZS00Y2Q3LTRkOGYtOTUxNy05Y2Yy NWIyMzlmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw5A267XtdW5o+Ox9qYEMpcP+JXtGiQNGDUmiRO/e5VwsepG+lcV9oq rEbVsbf4gXMoEa/ZabLkGZLQLzNP1+Ykjff22ty92ayQzlVPUlKWu5BQNJn4opCh Sbcgzs3fvIITiPJBVsejaLJUkufO7vmatM+80aiw5Nog9yDJC3Fve43d/tngLBWx r9SojZL4dOAl9NQ2WO9pAHloj/k9BND69TNizPlqmabJQ84hTfy0rj6nSTWDwe2Q WGgrysDTt3vRVz3qGAaL59qYxP4HeLaOsMStwPqG028CCOnUIxrIDIF2x2kggSI7 FA5px3kTSk9eakJa8+5F05ad7kSswfg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:10 2025 by rpki-client