$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/df8b141e-e079-3a9a-a62d-314b3d4e597b.roa File: df8b141e-e079-3a9a-a62d-314b3d4e597b.roa (raw, json) Hash identifier: E7O8wAuQDaDEPWEgJcyu0t8xiZO2OCly6UGAfi8Lgrc= Subject key identifier: 06:57:9A:E9:70:DE:EE:56:3C:81:94:41:2E:67:84:62:25:BB:62:DE Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584BB61D5AC37E2750A256348480 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/df8b141e-e079-3a9a-a62d-314b3d4e597b.roa Signing time: Sat 01 Nov 2025 04:03:58 +0000 ROA not before: Sat 01 Nov 2025 04:03:58 +0000 ROA not after: Fri 30 Jan 2026 05:03:58 +0000 asID: 14618 IP address blocks: 142.248.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:1d:5a:c3:7e:27:50:a2:56:34:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Nov 1 04:03:58 2025 GMT Not After : Jan 30 05:03:58 2026 GMT Subject: CN=b93d678d-3a7e-4fc1-b12c-079505f142ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:3e:91:0e:74:0f:ac:74:18:e4:e7:1b:3d: b1:b1:3d:b4:13:31:7d:50:f3:22:54:8d:49:8f:1e: 17:33:44:a1:29:dc:e1:0f:e3:42:c4:ab:31:8b:ce: 6f:42:67:57:f3:78:17:46:79:78:be:17:75:d2:e3: ed:ee:68:bb:81:79:e8:c0:3e:d1:4d:5f:7e:a6:5e: c1:f7:34:75:84:42:9d:f9:55:f7:03:d3:da:d8:35: 91:eb:f6:50:81:ae:dd:92:4e:70:79:71:3c:83:fc: 4c:89:63:1b:7d:b2:4d:4d:4d:c1:fe:f1:38:e7:18: 0f:17:fd:20:6f:98:26:a8:e0:a0:90:e4:4f:f8:71: 52:78:71:ce:42:c9:d3:d4:a8:ec:41:0b:67:fe:3b: f5:ba:c6:82:dd:02:c1:67:2a:d9:de:5b:f9:16:91: 3b:34:53:b6:3d:67:8b:46:71:82:49:25:06:7b:38: 34:2e:5f:56:8c:4b:47:ee:6d:d8:52:54:0b:97:7c: d1:d0:8d:cd:be:d1:15:d4:0b:4a:90:ee:e5:70:2a: 67:a0:7d:17:ce:1e:30:24:f0:2d:09:92:2a:b8:c0: b5:1a:b2:44:19:ef:ff:e4:c8:7a:ef:54:39:50:91: f2:fe:72:16:8e:8b:fe:36:c2:d2:46:a2:ef:8f:b2: 28:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:9A:E9:70:DE:EE:56:3C:81:94:41:2E:67:84:62:25:BB:62:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/df8b141e-e079-3a9a-a62d-314b3d4e597b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5c:7c:e7:d9:5b:52:78:49:a2:2e:d9:d0:ad:fd:89:51:75: 82:29:a6:9e:7b:92:a4:f2:b8:6d:1b:83:9d:9a:1e:b7:6c:aa: b8:35:8e:60:79:ca:c0:cf:ae:d1:74:6a:13:af:cf:06:48:77: 8c:46:d1:30:8d:e9:83:16:a5:d1:79:5c:2e:70:3c:d1:4e:d7: 26:19:97:df:7c:33:ee:f0:51:6e:d8:18:d5:c1:e0:15:05:83: 16:c4:6c:5f:11:91:7e:7a:88:be:00:a9:b0:53:b9:d0:db:78: 5a:9f:45:94:46:a3:f6:48:d4:2f:bf:9c:53:17:3e:b9:dd:7c: d5:41:ef:10:50:59:f9:1c:4a:3e:b0:17:c0:e6:9c:ca:86:ff: 0d:24:71:60:72:2b:38:c7:d5:a7:a8:1e:4d:df:56:5e:b9:9a: 51:2f:21:c2:76:06:b8:64:38:83:cf:79:f7:96:85:4a:ff:34: 27:e2:b4:15:25:0e:49:a9:ce:45:ed:96:ba:88:8f:1c:62:da: 5e:70:18:03:d9:de:4d:a8:95:1e:5d:43:8e:41:09:01:ee:0b: 20:ee:cd:11:35:dc:48:5d:36:49:ba:9e:59:97:f2:62:06:3d: 8e:a9:4b:7f:85:f7:20:0d:df:a6:f7:ee:a3:ee:42:6a:2a:f5: 3a:a4:f8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu2HVrDfidQolY0hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTEwMTA0MDM1OFoXDTI2MDEzMDA1MDM1OFowLzEtMCsGA1UEAxMk YjkzZDY3OGQtM2E3ZS00ZmMxLWIxMmMtMDc5NTA1ZjE0MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8+kQ50D6x0GOTnGz2xsT20EzF9UPMiVI1J jx4XM0ShKdzhD+NCxKsxi85vQmdX83gXRnl4vhd10uPt7mi7gXnowD7RTV9+pl7B 9zR1hEKd+VX3A9Pa2DWR6/ZQga7dkk5weXE8g/xMiWMbfbJNTU3B/vE45xgPF/0g b5gmqOCgkORP+HFSeHHOQsnT1KjsQQtn/jv1usaC3QLBZyrZ3lv5FpE7NFO2PWeL RnGCSSUGezg0Ll9WjEtH7m3YUlQLl3zR0I3NvtEV1AtKkO7lcCpnoH0Xzh4wJPAt CZIquMC1GrJEGe//5Mh671Q5UJHy/nIWjov+NsLSRqLvj7IoWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZXmulw3u5WPIGUQS5nhGIlu2LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvZGY4YjE0MWUtZTA3OS0z YTlhLWE2MmQtMzE0YjNkNGU1OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1cfOfZW1J4SaIu2dCt/YlRdYIppp57kqTyuG0bg52aHrdsqrg1jmB5 ysDPrtF0ahOvzwZId4xG0TCN6YMWpdF5XC5wPNFO1yYZl998M+7wUW7YGNXB4BUF gxbEbF8RkX56iL4AqbBTudDbeFqfRZRGo/ZI1C+/nFMXPrndfNVB7xBQWfkcSj6w F8DmnMqG/w0kcWByKzjH1aeoHk3fVl65mlEvIcJ2BrhkOIPPefeWhUr/NCfitBUl DkmpzkXtlrqIjxxi2l5wGAPZ3k2olR5dQ45BCQHuCyDuzRE13EhdNkm6nlmX8mIG PY6pS3+F9yAN36b37qPuQmoq9Tqk+AA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:40 2025 by rpki-client