$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/e8685fa5-8e3c-3bf4-bc62-a52d0aecd19d.roa File: e8685fa5-8e3c-3bf4-bc62-a52d0aecd19d.roa (raw, json) Hash identifier: oJZdDtDW3FBafngMdGVDAy20QklTmV7v01UhJ50tEMo= Subject key identifier: 29:96:33:22:10:30:C3:8D:D9:73:1F:0A:9F:48:8E:A7:2E:9D:01:EF Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Certificate serial: 010D0C9F4328584BC0429ADE4F40EEC2C45BBA00 Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/e8685fa5-8e3c-3bf4-bc62-a52d0aecd19d.roa Signing time: Tue 04 Nov 2025 19:17:06 +0000 ROA not before: Tue 04 Nov 2025 19:17:06 +0000 ROA not after: Mon 02 Feb 2026 19:17:06 +0000 asID: 63101 IP address blocks: 142.249.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:42:9a:de:4f:40:ee:c2:c4:5b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66 Validity Not Before: Nov 4 19:17:06 2025 GMT Not After : Feb 2 19:17:06 2026 GMT Subject: CN=66515e46-0173-4a13-8e50-7ca997bc0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:81:07:ce:94:3a:ca:30:96:39:60:f1:e2: 7a:3c:4c:d4:60:85:fc:c4:65:f3:33:9a:37:32:de: 12:20:23:29:a8:10:81:88:e1:ab:9b:cf:a4:b9:67: 7d:88:57:94:b2:69:bf:ac:ef:57:0f:a8:85:aa:90: bb:2f:28:c3:76:e9:fa:a7:b4:01:8d:14:6a:f2:6b: 36:22:09:a5:74:83:9f:8a:00:db:3e:ee:06:1a:85: ff:28:01:2e:25:44:42:a1:e9:81:56:90:2b:39:30: b5:d8:b6:26:64:0d:5f:1c:fd:d6:1b:f9:02:e2:ae: 71:7a:32:f7:98:78:30:76:00:57:b2:55:7e:88:b5: df:2d:02:c0:e3:28:c8:5d:75:6e:24:b3:69:27:55: 46:37:35:a4:17:11:56:91:8a:3b:4e:3b:d2:26:71: 40:fc:45:ff:4f:33:83:d4:53:b0:29:c1:fa:71:62: ee:10:9e:e9:5e:d2:fc:41:d1:ea:10:51:be:a9:2d: a0:8e:5f:50:5a:f8:40:36:23:4c:3b:72:85:ee:ac: 92:5f:17:04:71:a3:ff:ce:03:09:29:8f:f8:e9:93: 93:c9:bd:ff:f4:b2:7d:3e:fb:34:2e:21:16:6c:ba: 7d:4a:5b:b2:92:16:cf:ca:e8:d9:e5:ea:8c:27:fc: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:96:33:22:10:30:C3:8D:D9:73:1F:0A:9F:48:8E:A7:2E:9D:01:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/e8685fa5-8e3c-3bf4-bc62-a52d0aecd19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl X509v3 Authority Key Identifier: keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer sbgp-ipAddrBlock: critical IPv4: 142.249.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f6:2f:88:2f:3f:29:0e:fd:42:24:c0:6f:f1:f1:57:d1:3e: 3f:bd:af:7b:52:70:76:62:69:7e:4e:f5:40:18:71:60:09:20: 6c:49:91:73:e1:aa:8c:cd:7f:ed:6b:cf:cb:8c:f9:e4:44:f9: 39:f8:37:4a:6e:57:c2:2a:8e:cb:e5:11:c3:e5:70:5d:04:64: 4e:58:7d:92:56:82:f4:f5:fb:f8:c1:2f:67:b9:34:c2:03:6d: c6:cc:d5:ff:3d:6f:16:cd:d8:29:54:cc:31:98:05:3c:99:5d: 35:3d:9d:2f:4a:b6:b7:70:47:dc:2c:d9:48:04:aa:ad:fc:a4: 99:ac:c1:8b:99:fc:19:20:ce:96:7f:41:59:52:a1:89:58:4f: d6:8a:c2:89:71:5c:0d:3b:08:10:e5:8c:87:86:2f:ab:2c:00: 53:4c:86:52:eb:bf:75:11:c9:1c:1d:51:a8:c0:dc:6d:b4:50: 9a:3c:ac:5c:b4:6c:82:c2:a2:2a:42:d7:d3:f0:f9:d9:d0:32: 75:bd:e0:ec:c4:20:90:e5:19:6d:1d:45:d7:80:1c:08:01:8d: b3:b1:c7:71:b4:1f:98:68:45:7e:e6:df:aa:4d:4b:a1:47:bc: 3a:7f:67:51:83:8b:3a:82:4c:06:55:f4:a4:d3:5e:6c:ff:68: 16:b7:5c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvAQpreT0DuwsRbugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx YzY2MB4XDTI1MTEwNDE5MTcwNloXDTI2MDIwMjE5MTcwNlowLzEtMCsGA1UEAxMk NjY1MTVlNDYtMDE3My00YTEzLThlNTAtN2NhOTk3YmMwNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdOBB86UOsowljlg8eJ6PEzUYIX8xGXzM5o3 Mt4SICMpqBCBiOGrm8+kuWd9iFeUsmm/rO9XD6iFqpC7LyjDdun6p7QBjRRq8ms2 IgmldIOfigDbPu4GGoX/KAEuJURCoemBVpArOTC12LYmZA1fHP3WG/kC4q5xejL3 mHgwdgBXslV+iLXfLQLA4yjIXXVuJLNpJ1VGNzWkFxFWkYo7TjvSJnFA/EX/TzOD 1FOwKcH6cWLuEJ7pXtL8QdHqEFG+qS2gjl9QWvhANiNMO3KF7qySXxcEcaP/zgMJ KY/46ZOTyb3/9LJ9Pvs0LiEWbLp9SluykhbPyujZ5eqMJ/zK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmWMyIQMMON2XMfCp9IjqcunQHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvZTg2ODVmYTUtOGUzYy0z YmY0LWJjNjItYTUyZDBhZWNkMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1 MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0 MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj MDFmNDFjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD2L4gvPykO/UIkwG/x8VfRPj+9r3tScHZiaX5O9UAYcWAJIGxJkXPh qozNf+1rz8uM+eRE+Tn4N0puV8IqjsvlEcPlcF0EZE5YfZJWgvT1+/jBL2e5NMID bcbM1f89bxbN2ClUzDGYBTyZXTU9nS9KtrdwR9ws2UgEqq38pJmswYuZ/BkgzpZ/ QVlSoYlYT9aKwolxXA07CBDljIeGL6ssAFNMhlLrv3URyRwdUajA3G20UJo8rFy0 bILCoipC19Pw+dnQMnW94OzEIJDlGW0dRdeAHAgBjbOxx3G0H5hoRX7m36pNS6FH vDp/Z1GDizqCTAZV9KTTXmz/aBa3XMs= -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:54 2025 by rpki-client