$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa File: a0d887c8-f3a3-3865-898d-da48ba5bd918.roa (raw, json) Hash identifier: 4bdXS7Mn7xt5AKPK274SReYIfJ00Jn90rhpaqM9CGEU= Subject key identifier: E8:B0:81:05:8D:94:7D:08:A6:FE:07:64:B3:5A:6C:F2:F8:98:DE:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07CE0E5C60F0F66C56B2B0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 63.142.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ce:0e:5c:60:f0:f6:6c:56:b2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a9285da3-b640-401f-aad9-16d8ce6c3f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:54:31:8c:76:f3:0c:26:19:ee:fa:85:bb: 57:c6:a6:6f:e8:60:a3:14:8a:fc:9b:aa:f8:1a:a0: 30:a5:aa:a0:0a:03:72:0b:e9:7c:d0:7a:0f:9d:39: b9:14:ee:d1:36:d4:04:e8:d9:16:0c:2f:95:4c:24: a5:2b:e2:58:39:a2:48:12:83:c3:3c:94:01:02:78: e3:39:91:dd:62:84:66:19:c5:7f:2b:05:a3:2b:a5: ff:86:54:81:52:44:3b:b7:5b:2c:ce:75:76:43:a8: df:0b:0c:3f:5b:5f:4f:24:4d:50:ce:47:a0:df:55: 45:48:db:e7:97:ed:a7:35:0b:5d:b9:b6:b1:8c:12: a4:62:10:8b:b8:22:6e:13:17:0a:57:d5:31:4a:f3: e0:89:d4:aa:b2:a5:d4:46:ca:e7:82:42:7b:27:ce: 7b:0a:ed:e8:4c:fa:97:03:d2:1b:76:e9:00:a6:e9: 14:86:f5:b5:66:48:1f:d6:0c:33:ad:90:43:15:28: 1d:44:ea:3f:8b:df:aa:8d:5e:fc:f8:15:3d:c4:c0: b6:0d:27:05:bd:95:d9:5d:92:f6:46:22:4b:75:4e: 6a:1d:eb:b6:87:25:e5:6c:63:30:e8:fe:f8:a0:70: 6a:97:85:10:75:ca:7e:4d:94:de:0d:8e:c0:03:74: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:81:05:8D:94:7D:08:A6:FE:07:64:B3:5A:6C:F2:F8:98:DE:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0d887c8-f3a3-3865-898d-da48ba5bd918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 63.142.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:20:07:b7:54:1f:57:55:81:71:c8:f1:5f:c8:db:ae:25: 16:3f:e2:b4:ec:05:08:4b:5d:df:ca:24:8b:20:b7:87:3b:b4: 39:9a:9c:0a:53:1e:d9:42:b5:34:09:e0:1d:5a:32:7d:81:4c: 23:db:ec:c0:fe:32:ff:24:d4:44:b7:cd:65:4b:0b:63:de:68: 6d:6e:c8:33:9e:a1:cb:fe:c2:00:d9:ab:85:bf:1f:7f:2b:cb: 71:d4:96:38:23:13:77:96:07:d4:cd:37:7e:eb:91:e4:15:4d: 71:10:52:48:bc:7e:2a:2b:d0:bc:5a:d9:b7:1c:20:33:f4:1c: 88:09:b5:30:ec:e3:6a:01:21:18:74:13:83:29:6b:2d:91:b1: 50:86:5b:1f:29:c4:4f:02:0a:6c:dc:6e:a5:c8:7d:64:fe:97: 31:b6:f6:d4:66:b5:d4:61:0f:22:13:3c:96:ee:bf:22:02:83: 92:8b:2d:c2:a1:2e:d4:5b:a1:3c:52:43:85:00:8e:22:bb:ce: c2:90:07:56:41:43:b2:a5:47:36:3e:00:33:5d:b0:54:df:7d: 5e:d1:91:68:fe:b5:94:b8:e1:60:dd:9e:47:5e:bc:69:d5:8e: dd:b2:3f:61:b8:c2:74:0e:91:bb:16:5f:a7:65:ff:48:fb:72: 2b:d2:c7:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB84OXGDw9mxWsrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTkyODVkYTMtYjY0MC00MDFmLWFhZDktMTZkOGNlNmMzZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qVUMYx28wwmGe76hbtXxqZv6GCjFIr8m6r4 GqAwpaqgCgNyC+l80HoPnTm5FO7RNtQE6NkWDC+VTCSlK+JYOaJIEoPDPJQBAnjj OZHdYoRmGcV/KwWjK6X/hlSBUkQ7t1ssznV2Q6jfCww/W19PJE1Qzkeg31VFSNvn l+2nNQtdubaxjBKkYhCLuCJuExcKV9UxSvPgidSqsqXURsrngkJ7J857Cu3oTPqX A9IbdukApukUhvW1Zkgf1gwzrZBDFSgdROo/i9+qjV78+BU9xMC2DScFvZXZXZL2 RiJLdU5qHeu2hyXlbGMw6P74oHBql4UQdcp+TZTeDY7AA3SM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiwgQWNlH0Ipv4HZLNabPL4mN5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTBkODg3YzgtZjNhMy0z ODY1LTg5OGQtZGE0OGJhNWJkOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP44wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9VIAe3VB9XVYFxyPFfyNuuJRY/4rTsBQhLXd/KJIsgt4c7tDmanApT HtlCtTQJ4B1aMn2BTCPb7MD+Mv8k1ES3zWVLC2PeaG1uyDOeocv+wgDZq4W/H38r y3HUljgjE3eWB9TNN37rkeQVTXEQUki8fior0Lxa2bccIDP0HIgJtTDs42oBIRh0 E4Mpay2RsVCGWx8pxE8CCmzcbqXIfWT+lzG29tRmtdRhDyITPJbuvyICg5KLLcKh LtRboTxSQ4UAjiK7zsKQB1ZBQ7KlRzY+ADNdsFTffV7RkWj+tZS44WDdnkdevGnV jt2yP2G4wnQOkbsWX6dl/0j7civSxxs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:08 2025 by rpki-client