$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b82e6812-b47c-3583-a1eb-a24d3ebed8b3.roa File: b82e6812-b47c-3583-a1eb-a24d3ebed8b3.roa (raw, json) Hash identifier: JfMiYkPoMdVbQ5m4Lj4+brcCr88ieFLplgUAz6oCBJk= Subject key identifier: DD:ED:0F:A2:DD:FB:8D:70:56:E4:EF:63:6E:4D:DA:2F:6F:E0:8A:5F Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BB5C26D7CBB3BAD9FEFFC6280 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b82e6812-b47c-3583-a1eb-a24d3ebed8b3.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 3561 IP address blocks: 143.190.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6d:7c:bb:3b:ad:9f:ef:fc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=9f639963-e60a-4182-81b0-6935f05d62b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:99:d2:d0:14:59:ec:74:ae:ad:85:6f:fa: c4:08:3d:e4:24:e0:7d:bb:53:82:c6:d1:d3:8b:0e: 63:4c:cf:ce:75:a8:0d:ce:e1:0f:ca:e9:1e:54:93: 6d:dc:9a:9c:fe:63:44:78:d6:94:f2:df:61:98:ca: 24:1c:ee:8e:a5:b2:9c:73:f8:2d:9d:d5:2f:e7:f3: 41:14:40:e3:e1:47:3f:93:6a:1c:16:c6:72:5d:04: 87:d3:d7:43:8f:2e:c7:81:52:7c:76:8a:e4:51:d4: d1:34:cf:be:9c:b0:a3:90:09:dc:2e:67:e6:5e:10: bb:31:fc:1e:c8:3e:de:1c:6d:39:af:69:d9:32:68: 99:de:9a:8d:33:dc:ed:2f:6e:0c:0e:6a:ce:86:b7: d8:d9:60:45:04:d1:05:79:32:fe:f7:6d:34:fd:1e: 16:70:13:dc:42:7f:c7:57:a7:69:7a:0f:27:c6:a8: b3:85:eb:bf:85:4f:d6:d8:de:37:89:4e:a2:ee:16: 92:f7:81:4d:f4:87:f6:3a:cb:9a:33:32:be:89:eb: 1f:6c:30:69:dc:3f:8e:60:3f:72:d5:92:65:d0:fc: 5b:ed:38:bf:d4:74:ba:43:55:97:82:c9:75:bf:1a: d2:d2:f0:56:48:b3:1c:c6:86:37:bc:c2:b5:eb:ef: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:0F:A2:DD:FB:8D:70:56:E4:EF:63:6E:4D:DA:2F:6F:E0:8A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b82e6812-b47c-3583-a1eb-a24d3ebed8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 143.190.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4d:fe:da:c1:0a:54:f8:a0:7f:41:a9:21:73:5a:45:0a:06: 30:1d:d2:2b:57:17:a1:40:41:bd:6e:43:fd:3b:48:d2:5d:58: 22:2d:ed:6e:84:a2:f9:88:ee:5a:2d:62:30:1f:11:c2:3f:bd: dc:6f:79:fa:96:a4:9a:cd:1f:cd:7f:d4:d7:af:15:76:42:00: bd:67:f4:3e:75:1f:6e:d4:1d:bb:56:23:87:10:49:9a:31:a0: dc:db:23:05:f9:ca:00:fd:97:4c:d9:6a:58:15:1f:1a:9e:6d: 5d:d1:d5:86:7c:5f:3f:71:94:32:ed:ba:e2:c9:56:fa:6d:2f: 76:b6:58:56:e5:98:0e:df:96:5c:80:79:48:9d:c0:02:4e:b4: 1b:ec:32:ef:5b:83:1b:b7:0b:ec:8b:49:62:6f:2c:67:97:93: a4:76:5c:91:53:af:e2:7e:51:83:9d:d3:f9:0c:0a:fa:66:9b: 55:f4:a0:89:5d:86:50:e3:e6:b6:e3:be:b3:4b:9d:54:d1:1b: c3:b7:e0:fe:68:70:38:1b:28:1c:86:85:85:b1:dd:ca:30:08: 95:db:27:ce:c6:a1:93:24:57:93:9f:02:bb:85:49:14:1f:59: 4f:57:aa:64:58:f6:80:3e:39:b8:d6:35:61:e4:7f:cb:17:33: 3f:ef:f9:14 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu1wm18uzutn+/8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OWY2Mzk5NjMtZTYwYS00MTgyLTgxYjAtNjkzNWYwNWQ2MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOuZ0tAUWex0rq2Fb/rECD3kJOB9u1OCxtHT iw5jTM/OdagNzuEPyukeVJNt3Jqc/mNEeNaU8t9hmMokHO6OpbKcc/gtndUv5/NB FEDj4Uc/k2ocFsZyXQSH09dDjy7HgVJ8dorkUdTRNM++nLCjkAncLmfmXhC7Mfwe yD7eHG05r2nZMmiZ3pqNM9ztL24MDmrOhrfY2WBFBNEFeTL+9200/R4WcBPcQn/H V6dpeg8nxqizheu/hU/W2N43iU6i7haS94FN9If2OsuaMzK+iesfbDBp3D+OYD9y 1ZJl0Pxb7Ti/1HS6Q1WXgsl1vxrS0vBWSLMcxoY3vMK16+/jGwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN3tD6Ld+41wVuTvY25N2i9v4IpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjgyZTY4MTItYjQ3Yy0z NTgzLWExZWItYTI0ZDNlYmVkOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj74wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI03+2sEKVPigf0GpIXNaRQoGMB3SK1cXoUBBvW5D/TtI0l1YIi3tboSi +YjuWi1iMB8Rwj+93G95+pakms0fzX/U168VdkIAvWf0PnUfbtQdu1YjhxBJmjGg 3NsjBfnKAP2XTNlqWBUfGp5tXdHVhnxfP3GUMu264slW+m0vdrZYVuWYDt+WXIB5 SJ3AAk60G+wy71uDG7cL7ItJYm8sZ5eTpHZckVOv4n5Rg53T+QwK+mabVfSgiV2G UOPmtuO+s0udVNEbw7fg/mhwOBsoHIaFhbHdyjAIldsnzsahkyRXk58Cu4VJFB9Z T1eqZFj2gD45uNY1YeR/yxczP+/5FA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:34 2025 by rpki-client