$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa File: 346ff034-1c54-37d5-9980-289efa2829b6.roa (raw, json) Hash identifier: uymAcrPoQlKw99EzBiV3Dm7UdyiZd9elJoI2KepQWWw= Subject key identifier: 07:D5:12:8F:F5:33:87:89:E9:C3:E5:1F:44:1A:6F:96:3D:62:AC:E1 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584B9E07961253603BD79B5CD980 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 142.147.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:96:12:53:60:3b:d7:9b:5c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=28689fad-325c-40ff-bbf9-f7cfae1455cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f2:9f:cd:9b:47:7e:fc:52:26:10:4b:6b:9c: 96:6a:6e:4b:5c:3b:96:77:20:f0:9a:81:0a:99:17: 58:0e:19:e2:7f:62:46:9c:2d:4f:d2:cb:58:25:7d: c3:f6:7f:55:90:c0:72:5a:91:5b:fc:2b:47:4d:57: da:96:44:84:8a:1e:f7:d6:22:e7:15:30:da:b2:9a: a5:5e:06:e8:ea:3e:60:4d:8c:f1:2a:d6:79:f8:0c: 82:60:95:3a:31:b0:ea:59:53:1b:4a:69:8d:50:57: 96:29:de:92:0b:34:10:60:bf:70:ee:58:7b:72:41: f8:74:76:9d:e8:15:87:06:bb:10:c2:11:4c:56:fc: bc:de:bc:e4:91:ab:a4:0b:12:0f:c4:95:ba:68:d4: 98:21:32:41:28:d6:cd:88:13:92:ee:5a:ba:b3:9b: ba:6a:9f:ff:c2:c4:36:ec:5d:a6:7b:31:ae:9a:1f: 84:b2:af:bd:b3:cd:57:15:47:a9:99:38:54:41:27: f3:88:49:42:04:c6:5f:c3:3d:25:3d:b4:48:97:fb: 8d:47:89:3c:47:b6:ca:bd:8d:52:a3:e5:1b:63:ae: de:60:10:75:c1:67:61:94:b1:9e:d8:0c:29:c6:50: b0:17:bb:cb:21:90:2c:48:bb:2d:73:ab:44:c9:4f: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:12:8F:F5:33:87:89:E9:C3:E5:1F:44:1A:6F:96:3D:62:AC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3b:12:3c:ff:a3:74:1d:21:ca:91:28:31:1c:5f:1b:d1:dd: f7:ed:c3:60:13:9d:d7:87:db:6e:80:d7:b0:6a:f0:2c:1c:30: d0:f6:50:c9:00:d5:ae:04:c9:8a:dd:f1:b3:c0:ff:ab:6d:6a: ce:fb:62:89:9a:ed:45:b9:c8:fb:17:24:ae:f4:99:c6:66:9e: 38:30:29:e2:a7:91:9d:03:ed:93:9c:da:a8:1d:17:2b:b4:fa: 52:92:e5:1b:43:d1:20:77:e6:be:13:83:a9:d3:60:a8:a3:e6: 22:42:f6:19:c4:f1:ab:ed:cc:2c:8b:96:aa:82:aa:47:9e:b0: 8b:0c:24:fd:1c:2c:f1:72:d6:c1:02:f1:63:61:08:f4:7b:30: 14:e1:48:f1:95:46:fe:9b:e2:e3:0d:86:46:8b:85:1f:81:85: c9:ae:59:b8:bf:16:09:ef:80:d8:25:78:9e:5a:45:6c:03:f5: 49:4b:ff:0b:4e:85:25:d9:87:95:e0:c4:c1:28:61:18:a1:ff: 74:e5:01:1b:79:11:25:a0:a1:3b:ac:a8:90:95:f4:1b:fe:46: 1c:14:fb:2e:82:77:10:59:37:34:0d:e5:24:c0:07:86:6e:70: 76:1d:35:fc:51:81:d1:0a:ca:38:b4:a1:8c:31:ec:ae:22:32: fe:bc:db:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5YSU2A715tc2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Mjg2ODlmYWQtMzI1Yy00MGZmLWJiZjktZjdjZmFlMTQ1NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfKfzZtHfvxSJhBLa5yWam5LXDuWdyDwmoEK mRdYDhnif2JGnC1P0stYJX3D9n9VkMByWpFb/CtHTVfalkSEih731iLnFTDaspql Xgbo6j5gTYzxKtZ5+AyCYJU6MbDqWVMbSmmNUFeWKd6SCzQQYL9w7lh7ckH4dHad 6BWHBrsQwhFMVvy83rzkkaukCxIPxJW6aNSYITJBKNbNiBOS7lq6s5u6ap//wsQ2 7F2mezGumh+Esq+9s81XFUepmThUQSfziElCBMZfwz0lPbRIl/uNR4k8R7bKvY1S o+UbY67eYBB1wWdhlLGe2AwpxlCwF7vLIZAsSLstc6tEyU8KXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfVEo/1M4eJ6cPlH0Qab5Y9YqzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMzQ2ZmYwMzQtMWM1NC0z N2Q1LTk5ODAtMjg5ZWZhMjgyOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU7Ejz/o3QdIcqRKDEcXxvR3fftw2ATndeH226A17Bq8CwcMND2UMkA 1a4EyYrd8bPA/6ttas77Yoma7UW5yPsXJK70mcZmnjgwKeKnkZ0D7ZOc2qgdFyu0 +lKS5RtD0SB35r4Tg6nTYKij5iJC9hnE8avtzCyLlqqCqkeesIsMJP0cLPFy1sEC 8WNhCPR7MBThSPGVRv6b4uMNhkaLhR+BhcmuWbi/FgnvgNgleJ5aRWwD9UlL/wtO hSXZh5XgxMEoYRih/3TlARt5ESWgoTusqJCV9Bv+RhwU+y6CdxBZNzQN5STAB4Zu cHYdNfxRgdEKyji0oYwx7K4iMv682yE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:15 2025 by rpki-client