$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa File: 234fe58b-199e-3247-b983-9ce4a12667f6.roa (raw, json) Hash identifier: DTVYcPm+JF4XiXwdHEGu1sg2eZJOFtbEuVqyPtVXyug= Subject key identifier: 67:E1:53:4B:E5:0E:99:65:B2:7B:93:E8:BF:BB:00:BE:89:AC:C8:15 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B9E0796229620632DF41C4800 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 142.147.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:96:22:96:20:63:2d:f4:1c:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=97a67b6a-7f3c-4845-be73-89096d296d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:69:00:cc:a2:e6:f7:45:07:2f:1e:d1:ae:9d: 0d:81:4c:2e:1b:63:da:ea:ee:da:f3:e0:7f:13:4d: cb:f3:1f:ba:2b:db:30:35:ea:b3:ab:80:2f:a1:87: df:fc:a2:1f:e0:49:b9:41:21:3a:61:cf:dd:c0:00: 27:65:d8:98:a4:9e:4f:25:ca:81:6a:33:63:69:7b: d3:ae:05:b5:59:1d:57:7d:7c:68:55:4c:8f:1b:4e: 9f:db:7c:c4:e1:f7:56:80:78:09:ee:d6:4c:2b:bb: 78:59:37:54:ba:22:36:a6:d9:a2:14:4a:e2:98:a7: dd:c4:f9:bd:90:6b:77:03:17:d9:6b:47:96:8c:4b: 88:99:3d:ce:e9:ea:19:8a:59:c8:ea:b9:42:d1:70: ff:b8:18:18:e8:71:25:bf:21:09:ea:fe:db:27:00: d5:81:a0:4a:1b:c0:a9:69:49:8a:1e:20:c5:fb:ad: fa:52:a9:d8:aa:7c:15:f9:b0:1d:ed:13:1e:91:f6: 66:34:07:a1:eb:0f:c4:c9:2e:73:7f:dd:7a:3a:02: b9:d7:b2:4b:58:11:66:2f:e4:cf:56:a7:e9:53:c2: 3f:b6:fa:7c:27:ec:20:ce:0c:5a:26:39:3e:7e:a9: 77:47:f5:a6:2e:b0:da:e4:64:7a:56:d4:ec:b3:f3: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E1:53:4B:E5:0E:99:65:B2:7B:93:E8:BF:BB:00:BE:89:AC:C8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a0:c9:23:ca:75:a8:04:b3:c9:10:c5:8e:80:94:a7:ac:30: fb:45:f1:4e:7f:cb:35:e8:62:62:31:ba:7c:ba:5e:27:10:de: 3b:e5:d1:88:5d:29:25:cf:0a:3f:8c:24:03:9f:f0:0a:d8:da: 3e:14:cf:0f:35:f7:f5:7f:56:7b:6c:a2:2a:62:e2:21:f3:62: ec:42:de:b1:3a:9e:5e:f9:7b:0f:a0:b7:df:e8:9c:77:c5:c3: a3:51:7f:22:32:6f:85:b4:37:a4:fb:c7:05:c7:62:b1:aa:d6: ba:12:a8:98:a0:94:50:12:46:d8:52:ce:59:79:5d:95:89:f0: cd:f9:13:ba:79:d6:62:6a:5a:cb:1a:76:28:ff:a8:3b:3e:92: 43:0f:bd:59:da:6e:84:62:9c:b4:61:d5:93:0e:d6:5d:9b:e8: bd:9c:fe:9c:01:7f:07:b5:52:74:ed:f8:df:98:75:0c:f0:38: a5:31:ec:af:5f:b1:c1:d6:01:4c:83:88:8c:a4:8e:0c:a4:a8: f4:c0:5f:ac:81:9b:ba:72:17:17:b4:c6:b8:c4:f9:f3:08:7e: 13:ce:7c:de:d8:a7:6f:2d:f9:8c:ef:f9:41:4e:f3:51:bb:d4: df:67:54:e5:44:02:c9:68:24:5d:1b:63:99:84:23:9c:56:2e: d9:72:f6:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5YiliBjLfQcSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OTdhNjdiNmEtN2YzYy00ODQ1LWJlNzMtODkwOTZkMjk2ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGkAzKLm90UHLx7Rrp0NgUwuG2Pa6u7a8+B/ E03L8x+6K9swNeqzq4AvoYff/KIf4Em5QSE6Yc/dwAAnZdiYpJ5PJcqBajNjaXvT rgW1WR1XfXxoVUyPG06f23zE4fdWgHgJ7tZMK7t4WTdUuiI2ptmiFErimKfdxPm9 kGt3AxfZa0eWjEuImT3O6eoZilnI6rlC0XD/uBgY6HElvyEJ6v7bJwDVgaBKG8Cp aUmKHiDF+636UqnYqnwV+bAd7RMekfZmNAeh6w/EyS5zf916OgK517JLWBFmL+TP VqfpU8I/tvp8J+wgzgxaJjk+fql3R/WmLrDa5GR6VtTss/ND2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfhU0vlDpllsnuT6L+7AL6JrMgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMjM0ZmU1OGItMTk5ZS0z MjQ3LWI5ODMtOWNlNGExMjY2N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSgySPKdagEs8kQxY6AlKesMPtF8U5/yzXoYmIxuny6XicQ3jvl0Yhd KSXPCj+MJAOf8ArY2j4Uzw819/V/Vntsoipi4iHzYuxC3rE6nl75ew+gt9/onHfF w6NRfyIyb4W0N6T7xwXHYrGq1roSqJiglFASRthSzll5XZWJ8M35E7p51mJqWssa dij/qDs+kkMPvVnaboRinLRh1ZMO1l2b6L2c/pwBfwe1UnTt+N+YdQzwOKUx7K9f scHWAUyDiIykjgykqPTAX6yBm7pyFxe0xrjE+fMIfhPOfN7Yp28t+Yzv+UFO81G7 1N9nVOVEAsloJF0bY5mEI5xWLtly9hg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:12 2025 by rpki-client