$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa File: 1f5d279c-2644-363f-a153-6489368c7e8c.roa (raw, json) Hash identifier: 2UmkSGVQ6HdPOBDt08N5S82uXaDyqKEryY9faOIQdLc= Subject key identifier: 4E:22:13:64:B2:26:90:9C:48:4F:79:68:2F:61:7C:E7:5C:2D:4B:F5 Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584AF9515355FC631FEF3800E780 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 394772 IP address blocks: 199.241.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:53:55:fc:63:1f:ef:38:00:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=81582721-d3bd-476d-95c1-e8c61a2a841c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:08:8c:14:0c:98:83:5b:59:57:54:1c:f0: a8:48:6c:70:bd:38:8e:23:97:68:3b:84:cb:12:c1: dd:d8:ee:10:65:0a:a0:19:7a:b0:72:5f:a8:70:46: a1:ad:13:4f:5a:1c:11:e3:44:3d:0e:cd:92:b3:2b: 1a:27:31:24:57:b1:51:fb:30:cb:eb:5d:94:7d:25: 07:37:78:50:92:dc:f1:34:f2:e0:aa:3d:05:2f:07: 92:2b:08:dd:f4:da:2a:bc:e4:14:02:9c:b5:7b:e2: df:3f:3c:38:a8:a3:af:37:15:8b:b8:48:05:8a:59: 05:48:6b:9f:e4:5d:27:4f:4d:ce:d6:43:4a:14:dc: 18:9d:84:11:95:c3:08:1c:3b:dc:fd:d9:11:23:1f: 8b:f6:5c:fc:8c:6e:07:d4:a8:96:65:10:f4:f3:95: 45:5a:63:61:bc:a9:a7:f1:85:03:f2:0a:11:d1:51: 99:e2:29:3e:47:f8:2a:99:a8:1e:04:cf:45:9d:55: ed:ff:13:cf:15:41:2e:7e:fd:21:92:a1:e2:82:da: 07:75:4b:44:76:54:90:f6:72:e1:b0:f6:69:10:52: 23:d2:6e:69:70:58:1d:8c:2b:98:ff:dc:98:4d:bd: 85:0e:92:10:2d:6c:3f:b8:e2:48:b4:57:47:ce:23: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:13:64:B2:26:90:9C:48:4F:79:68:2F:61:7C:E7:5C:2D:4B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 199.241.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e0:35:7c:9a:7b:d5:fe:44:1e:65:58:ca:a9:cc:2e:e9:fc: 47:6a:3d:61:f1:6c:4b:1b:2e:7e:26:94:3a:a2:73:55:66:45: a4:21:bd:b8:08:a8:22:72:ea:20:1d:6a:1f:97:49:b7:1e:8b: 98:46:36:57:89:41:79:fb:3c:a6:56:da:0d:b8:70:ee:e7:a1: 85:30:40:d6:49:08:6b:11:cb:83:81:ad:77:f7:af:19:c2:50: 7f:6c:e8:57:c8:84:bc:be:56:25:48:cc:7d:92:9c:2a:3d:78: c6:f0:3d:8d:fc:45:a2:76:f1:0a:c2:76:16:f6:d4:9a:f3:35: e6:ad:33:8b:2a:80:14:9c:fb:37:a6:5f:73:a2:09:0a:dc:a9: f8:70:18:51:54:b1:c5:28:a2:68:42:8a:b2:21:5d:f4:36:00: 54:b4:bb:a6:10:15:fe:23:32:15:a1:4f:ad:1e:74:3a:94:5d: 17:fe:72:ea:ab:c7:77:4f:b9:c5:84:33:a3:a0:47:1f:84:2b: e3:85:07:f7:c9:55:43:b5:47:66:9f:c4:58:81:0d:89:ca:1a: 86:db:b0:16:7a:28:9b:cd:73:b5:0a:fd:f5:a1:75:40:c9:11: cf:6f:be:52:d5:ad:24:d2:75:71:a2:c2:0b:bc:fe:ce:a8:b3: f7:8d:a0:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVNV/GMf7zgA54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODE1ODI3MjEtZDNiZC00NzZkLTk1YzEtZThjNjFhMmE4NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq8IjBQMmINbWVdUHPCoSGxwvTiOI5doO4TL EsHd2O4QZQqgGXqwcl+ocEahrRNPWhwR40Q9Ds2SsysaJzEkV7FR+zDL612UfSUH N3hQktzxNPLgqj0FLweSKwjd9NoqvOQUApy1e+LfPzw4qKOvNxWLuEgFilkFSGuf 5F0nT03O1kNKFNwYnYQRlcMIHDvc/dkRIx+L9lz8jG4H1KiWZRD085VFWmNhvKmn 8YUD8goR0VGZ4ik+R/gqmageBM9FnVXt/xPPFUEufv0hkqHigtoHdUtEdlSQ9nLh sPZpEFIj0m5pcFgdjCuY/9yYTb2FDpIQLWw/uOJItFdHziNMiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4iE2SyJpCcSE95aC9hfOdcLUv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvMWY1ZDI3OWMtMjY0NC0z NjNmLWExNTMtNjQ4OTM2OGM3ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7gNXyae9X+RB5lWMqpzC7p/EdqPWHxbEsbLn4mlDqic1VmRaQhvbgI qCJy6iAdah+XSbcei5hGNleJQXn7PKZW2g24cO7noYUwQNZJCGsRy4OBrXf3rxnC UH9s6FfIhLy+ViVIzH2SnCo9eMbwPY38RaJ28QrCdhb21JrzNeatM4sqgBSc+zem X3OiCQrcqfhwGFFUscUoomhCirIhXfQ2AFS0u6YQFf4jMhWhT60edDqUXRf+cuqr x3dPucWEM6OgRx+EK+OFB/fJVUO1R2afxFiBDYnKGobbsBZ6KJvNc7UK/fWhdUDJ Ec9vvlLVrSTSdXGiwgu8/s6os/eNoGI= -----END CERTIFICATE-----Generated at Wed Nov 5 18:04:33 2025 by rpki-client