$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa File: a6a82575-a730-30e2-9214-fa5523a606ef.roa (raw, json) Hash identifier: oUvKJ9ez5isXsywsYBMA4S3V8Y3pggwUMzyna2DGvrY= Subject key identifier: 6B:41:A5:F1:7B:EA:F2:0B:71:D9:6D:9C:D0:57:05:57:75:EA:94:8A Certificate issuer: /CN=97008014-5cd7-4f24-bb1e-881bf59d003a Certificate serial: 010D0C9F4328584AE6538506A8B8231A4AE31140 Authority key identifier: 20:1C:E9:11:72:E0:D9:CF:16:BD:28:26:65:E8:85:03:96:23:34:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa Signing time: Mon 18 Aug 2025 17:44:58 +0000 ROA not before: Mon 18 Aug 2025 17:44:58 +0000 ROA not after: Sun 16 Nov 2025 18:44:58 +0000 asID: 199524 IP address blocks: 140.235.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:53:85:06:a8:b8:23:1a:4a:e3:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97008014-5cd7-4f24-bb1e-881bf59d003a Validity Not Before: Aug 18 17:44:58 2025 GMT Not After : Nov 16 18:44:58 2025 GMT Subject: CN=fb158c69-0c1f-4088-9ab7-16064c3c3ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:0f:ea:bd:a3:08:ae:b6:eb:cf:6d:7c:43: a8:d4:48:2d:0b:c0:25:78:5e:b4:a7:7f:c1:ee:7b: 98:20:ad:4f:3d:f8:9f:8e:f0:c0:1f:24:f1:ff:49: c0:86:e3:c8:0a:0c:e4:d0:7b:58:e0:72:64:e6:18: 83:c7:f2:65:9b:d7:ac:b4:e7:a5:84:fc:db:0f:de: 2f:fa:a2:55:af:f0:0f:fc:e9:81:79:a7:1b:76:e1: 80:e9:de:8f:6e:cc:bb:1c:87:cf:34:60:20:3b:38: e3:34:7c:8c:4a:fb:3f:f1:b0:22:1f:01:ca:b0:07: 1e:c2:06:22:53:3f:e6:24:ce:d5:ef:2d:1b:b3:81: 0c:92:97:cc:4c:4b:59:a6:b0:99:5c:39:d3:cd:95: 27:a8:6b:1c:04:47:0f:86:51:65:2d:85:f6:3d:87: 2a:fa:58:68:4e:60:cc:c3:c8:b4:22:6f:ff:61:e6: cb:d1:ad:5d:b2:78:9e:59:65:e4:ea:ba:e8:5d:6b: cd:2c:e4:39:96:c1:a3:dd:66:0e:27:15:f8:17:8e: 9d:89:c1:e0:6f:05:01:16:a2:5c:19:31:8a:b7:08: 95:dd:a5:01:e4:53:a9:f1:c7:6e:8d:c4:e1:90:7c: 80:49:a1:e0:87:2e:35:75:52:ba:4e:08:07:9f:fc: b4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:41:A5:F1:7B:EA:F2:0B:71:D9:6D:9C:D0:57:05:57:75:EA:94:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/a6a82575-a730-30e2-9214-fa5523a606ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a/97008014-5cd7-4f24-bb1e-881bf59d003a.crl X509v3 Authority Key Identifier: keyid:20:1C:E9:11:72:E0:D9:CF:16:BD:28:26:65:E8:85:03:96:23:34:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/97008014-5cd7-4f24-bb1e-881bf59d003a.cer sbgp-ipAddrBlock: critical IPv4: 140.235.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ca:28:6a:f4:20:f6:4b:34:f4:f8:9b:cf:0c:6d:0e:e5:54: 92:f4:3a:1f:da:73:1a:0b:6d:b7:af:e2:6b:93:da:93:07:af: e3:37:27:10:9d:c7:fc:11:2b:33:56:b1:29:86:2e:de:a4:19: 73:d1:c7:f7:d3:8e:22:f3:83:bc:c9:19:d8:8c:23:b3:f3:e3: a4:00:46:d3:85:60:0f:ff:43:d7:2d:3d:ae:a8:e0:66:4f:38: 0b:b6:df:66:e9:27:d6:f8:53:b7:ee:50:cd:3a:72:c5:50:b6: 21:0f:00:07:85:cc:d7:d0:73:a2:b3:4a:a8:1f:4c:ca:d9:23: 66:d0:d4:27:85:b6:86:35:0c:34:7a:06:46:5b:1e:8a:39:76: be:b1:7a:98:a2:92:30:01:7d:65:67:39:25:34:4b:d2:86:15: d7:ec:50:ff:66:2e:e3:4e:9b:ce:48:5f:19:16:3c:16:73:11: 3b:63:2d:43:87:6a:51:a7:bb:cb:51:66:a9:bc:e8:08:ad:e7: 3c:67:e5:72:6a:12:aa:f7:6c:03:f3:d4:f9:b7:ea:01:02:5b: ed:30:1c:a1:2f:cf:cb:05:22:31:bf:6f:9e:2d:bf:05:5a:92: 81:f9:98:54:a6:c3:45:a1:22:37:18:21:60:0f:e0:85:d2:4d: f9:5a:9e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmU4UGqLgjGkrjEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcwMDgwMTQtNWNkNy00ZjI0LWJiMWUtODgxYmY1OWQw MDNhMB4XDTI1MDgxODE3NDQ1OFoXDTI1MTExNjE4NDQ1OFowLzEtMCsGA1UEAxMk ZmIxNThjNjktMGMxZi00MDg4LTlhYjctMTYwNjRjM2MzZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcP6r2jCK62689tfEOo1EgtC8AleF60p3/B 7nuYIK1PPfifjvDAHyTx/0nAhuPICgzk0HtY4HJk5hiDx/Jlm9estOelhPzbD94v +qJVr/AP/OmBeacbduGA6d6Pbsy7HIfPNGAgOzjjNHyMSvs/8bAiHwHKsAcewgYi Uz/mJM7V7y0bs4EMkpfMTEtZprCZXDnTzZUnqGscBEcPhlFlLYX2PYcq+lhoTmDM w8i0Im//YebL0a1dsnieWWXk6rroXWvNLOQ5lsGj3WYOJxX4F46dicHgbwUBFqJc GTGKtwiV3aUB5FOp8cdujcThkHyASaHghy41dVK6TggHn/y0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtBpfF76vILcdltnNBXBVd16pSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85NzAw ODAxNC01Y2Q3LTRmMjQtYmIxZS04ODFiZjU5ZDAwM2EvYTZhODI1NzUtYTczMC0z MGUyLTkyMTQtZmE1NTIzYTYwNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTcwMDgwMTQtNWNkNy00ZjI0LWJi MWUtODgxYmY1OWQwMDNhLzk3MDA4MDE0LTVjZDctNGYyNC1iYjFlLTg4MWJmNTlk MDAzYS5jcmwwHwYDVR0jBBgwFoAUIBzpEXLg2c8WvSgmZeiFA5YjNA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NzAwODAxNC01Y2Q3LTRmMjQtYmIxZS04ODFi ZjU5ZDAwM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXKKGr0IPZLNPT4m88MbQ7lVJL0Oh/acxoLbbev4muT2pMHr+M3JxCd x/wRKzNWsSmGLt6kGXPRx/fTjiLzg7zJGdiMI7Pz46QARtOFYA//Q9ctPa6o4GZP OAu232bpJ9b4U7fuUM06csVQtiEPAAeFzNfQc6KzSqgfTMrZI2bQ1CeFtoY1DDR6 BkZbHoo5dr6xepiikjABfWVnOSU0S9KGFdfsUP9mLuNOm85IXxkWPBZzETtjLUOH alGnu8tRZqm86Ait5zxn5XJqEqr3bAPz1Pm36gECW+0wHKEvz8sFIjG/b54tvwVa koH5mFSmw0WhIjcYIWAP4IXSTflanjg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:29 2025 by rpki-client