$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa File: 04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa (raw, json) Hash identifier: /pUB1s5uDVzhqVrk5RkJD8u9fW0tLJ786KXNw9un49I= Subject key identifier: 5B:D1:C5:2F:D7:1C:1B:60:AB:89:12:58:87:45:53:C9:11:A8:54:B4 Certificate issuer: /CN=1c3c552c-5e23-4989-8af0-9450094442e8 Certificate serial: 010D0C9F4328584B6631F02707F89D79775B0420 Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 142.225.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f0:27:07:f8:9d:79:77:5b:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=b7bba595-4c5b-438f-971a-cdd360638a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:ed:84:49:ba:11:f6:2c:b8:57:2c:16:b3: b2:3a:88:83:5d:34:be:37:7f:66:f3:9a:67:05:9a: 36:e9:c6:be:0d:ba:a9:cf:20:07:e7:03:c0:fa:37: 58:dd:11:14:16:c5:92:20:2a:b6:1b:a0:f2:73:4a: b8:42:f0:9f:38:a5:3b:da:c7:61:6f:f5:b7:34:1b: 0f:3c:a6:67:16:1e:71:4e:02:cd:15:0f:65:8c:e9: 6c:dc:93:22:6d:85:09:c8:13:2a:99:ae:37:bc:eb: 6e:fb:23:56:6e:1a:5e:10:2c:d6:95:da:08:c5:46: 2b:cc:d1:58:67:25:5a:8a:dd:a0:68:b5:b7:95:25: 52:e2:a8:be:b5:d2:28:77:09:72:aa:c0:53:63:7f: 87:a1:8b:20:cd:4e:33:d2:be:dc:e0:59:93:d7:82: 87:74:79:91:6d:ce:af:29:98:ef:7b:10:f0:bc:f2: b0:10:ad:96:29:11:6c:fd:a7:83:c0:55:6e:33:04: 40:84:bc:1b:aa:80:b9:5a:5a:7c:81:ab:3c:3b:3c: 8a:ca:ec:a4:38:85:58:a2:fe:e9:3a:49:7f:df:fc: 77:30:41:cb:c7:02:0e:d5:07:45:ac:06:31:5e:12: e2:01:37:dd:3d:b0:06:b1:5c:0b:43:d6:c1:b3:43: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:C5:2F:D7:1C:1B:60:AB:89:12:58:87:45:53:C9:11:A8:54:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl X509v3 Authority Key Identifier: keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer sbgp-ipAddrBlock: critical IPv4: 142.225.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ee:9f:ea:04:0b:1d:bb:32:bb:5f:4e:9d:73:02:09:fa:fa: 53:af:2f:ff:67:7d:0f:42:22:0e:60:1c:b9:6c:e8:a0:10:ba: be:ab:a0:83:40:1b:94:1b:58:14:3d:98:35:54:4e:06:f2:2f: dc:df:ee:4c:74:a2:7b:91:7b:86:31:b9:9c:70:bc:67:91:08: ee:c9:d6:91:2d:3b:29:28:b6:c7:59:1c:5f:1d:ec:cb:82:5c: 4e:34:e8:e2:54:5b:7c:d0:f4:02:6e:74:a0:bb:09:0c:42:41: fe:a9:cd:34:92:1e:75:27:a6:a6:e6:b8:c6:d2:cc:84:99:b5: 65:48:87:9d:87:e6:57:a4:b2:9f:1f:9c:f7:1f:d5:c2:c9:0d: 2b:4e:fd:62:1e:4f:94:6f:21:ee:e3:84:c9:3f:e7:1e:39:f4: cc:2b:4e:c4:8a:50:b0:40:80:87:41:76:32:6b:90:11:37:70: 33:62:81:aa:2c:64:66:56:d5:dc:00:02:57:8a:74:90:4c:be: 9c:40:3a:ae:07:53:a3:97:08:15:2e:9c:eb:a3:fc:c2:bd:57: b7:5e:c8:ac:5f:21:9f:d0:a9:fb:9c:55:95:09:15:5d:dd:c4: 42:38:77:84:75:63:96:f9:9c:a8:2d:77:8b:4b:7a:27:d7:61: d8:73:db:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfAnB/ideXdbBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzU1MmMtNWUyMy00OTg5LThhZjAtOTQ1MDA5NDQ0 MmU4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YjdiYmE1OTUtNGM1Yi00MzhmLTk3MWEtY2RkMzYwNjM4YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYnthEm6EfYsuFcsFrOyOoiDXTS+N39m85pn BZo26ca+DbqpzyAH5wPA+jdY3REUFsWSICq2G6Dyc0q4QvCfOKU72sdhb/W3NBsP PKZnFh5xTgLNFQ9ljOls3JMibYUJyBMqma43vOtu+yNWbhpeECzWldoIxUYrzNFY ZyVait2gaLW3lSVS4qi+tdIodwlyqsBTY3+HoYsgzU4z0r7c4FmT14KHdHmRbc6v KZjvexDwvPKwEK2WKRFs/aeDwFVuMwRAhLwbqoC5Wlp8gas8OzyKyuykOIVYov7p Okl/3/x3MEHLxwIO1QdFrAYxXhLiATfdPbAGsVwLQ9bBs0N3+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvRxS/XHBtgq4kSWIdFU8kRqFS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNj NTUyYy01ZTIzLTQ5ODktOGFmMC05NDUwMDk0NDQyZTgvMDRhZTRiNzItNTViZi0z Y2JjLWFmM2MtMTUwMWFiYzVmYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWMzYzU1MmMtNWUyMy00OTg5LThh ZjAtOTQ1MDA5NDQ0MmU4LzFjM2M1NTJjLTVlMjMtNDk4OS04YWYwLTk0NTAwOTQ0 NDJlOC5jcmwwHwYDVR0jBBgwFoAUGpOw4GB9XUWnpf4CDPsZhiD+zJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNjNTUyYy01ZTIzLTQ5ODktOGFmMC05NDUw MDk0NDQyZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALun+oECx27MrtfTp1zAgn6+lOvL/9nfQ9CIg5gHLls6KAQur6roINA G5QbWBQ9mDVUTgbyL9zf7kx0onuRe4YxuZxwvGeRCO7J1pEtOykotsdZHF8d7MuC XE406OJUW3zQ9AJudKC7CQxCQf6pzTSSHnUnpqbmuMbSzISZtWVIh52H5leksp8f nPcf1cLJDStO/WIeT5RvIe7jhMk/5x459MwrTsSKULBAgIdBdjJrkBE3cDNigaos ZGZW1dwAAleKdJBMvpxAOq4HU6OXCBUunOuj/MK9V7deyKxfIZ/QqfucVZUJFV3d xEI4d4R1Y5b5nKgtd4tLeifXYdhz2xk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:13 2025 by rpki-client