$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa File: 9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa (raw, json) Hash identifier: oFwVRShBelOxc+ezvjhwmuSkbNkihwQ9AKw9Z9Iy4Hs= Subject key identifier: D6:26:41:46:DE:E3:5C:32:E0:6D:4D:3A:BE:95:3B:B5:E3:A2:FF:8C Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78C7A73B0AD77BFF0F580 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 143.55.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:7a:73:b0:ad:77:bf:f0:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a5cf36ab-8a4f-49d7-bfb8-b851bbb097aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:8d:02:d6:53:9f:e3:4c:79:75:04:15:6e: 82:ec:aa:56:e1:70:25:44:d7:2f:22:a3:93:6e:24: 23:e8:da:58:5a:9d:e2:cc:23:cb:67:36:33:c6:7e: 0e:bd:42:9f:ce:a3:fb:db:95:f4:12:7e:84:28:46: 59:44:d4:6a:d7:3f:f1:31:ae:0b:e8:4c:73:4e:b1: 75:20:33:da:ee:ff:97:c1:8f:41:1a:8c:73:b6:5d: ed:cc:5b:1c:69:76:38:4f:e6:16:56:99:b2:0c:bb: 1f:05:69:45:0b:03:3e:0a:7b:e4:8f:75:d9:d4:23: 23:a1:64:1a:f3:d8:94:b8:4a:fb:74:a5:16:0f:90: 55:b0:b9:e7:e7:d4:d8:51:d7:7e:9f:82:b1:de:8c: 62:3a:b3:1c:fb:94:c8:6d:b3:50:a1:1a:40:0b:88: 95:92:90:6f:0a:67:cb:87:bf:3d:ae:87:61:57:14: 67:13:2b:09:6a:29:12:6a:3c:1c:d7:1e:33:e5:35: 86:2d:69:a0:fb:18:30:23:f3:79:f2:74:fb:ea:bb: 0e:01:88:9c:38:ba:4b:67:3b:4b:01:df:d2:53:f3: 9c:26:62:82:e1:ae:14:d7:e8:f3:73:3d:8c:ae:d8: 72:6a:31:62:60:45:8f:a4:14:82:88:19:b6:6c:07: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:41:46:DE:E3:5C:32:E0:6D:4D:3A:BE:95:3B:B5:E3:A2:FF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9f0fe4ec-5408-3401-93b7-0d1fd95e4ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:05:91:2a:9e:a7:f5:35:dc:a5:19:b7:ec:93:bd:43:c1:c8: b3:2a:0c:6c:36:3b:8c:79:5d:80:01:79:d2:e9:9a:76:46:84: 09:60:e6:e4:cc:1e:c8:50:5f:d5:b2:09:e3:02:ab:75:10:61: 08:05:57:34:35:8f:00:9c:3d:a1:ec:71:9a:a0:fd:e7:b8:0c: 30:3a:32:77:b4:79:e1:90:11:48:e0:35:33:b1:cd:71:4a:ec: 9a:3b:ca:fc:e1:8e:8e:cb:a0:d2:14:ae:a6:56:7e:d0:f4:a9: ea:f1:1f:78:ba:bc:5d:06:c9:5f:6a:05:5b:84:ab:92:6a:a9: 95:cd:b4:b1:3c:1e:db:1e:a0:b5:ff:02:01:d0:a3:12:d5:22: c7:ec:6d:7b:fb:f5:15:48:35:ac:63:1e:42:7c:ad:f3:96:dc: e2:12:f4:6d:9b:f7:6d:e9:dc:2d:97:3b:c2:e8:00:cd:6b:11: f6:d7:e2:a1:19:fe:f6:00:68:84:cf:02:87:fa:eb:d3:3d:3b: 05:3f:eb:fc:df:22:9c:16:75:5b:31:be:78:41:5e:2c:bd:4d: 2f:7b:72:7e:b8:0e:69:8f:c8:48:6e:ab:9e:05:d1:b4:5b:c9: 60:a1:a0:92:93:53:6a:28:0c:26:d3:04:f2:24:9c:84:34:d5: 12:f0:96:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4x6c7Ctd7/w9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTVjZjM2YWItOGE0Zi00OWQ3LWJmYjgtYjg1MWJiYjA5N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsSNAtZTn+NMeXUEFW6C7KpW4XAlRNcvIqOT biQj6NpYWp3izCPLZzYzxn4OvUKfzqP725X0En6EKEZZRNRq1z/xMa4L6ExzTrF1 IDPa7v+XwY9BGoxztl3tzFscaXY4T+YWVpmyDLsfBWlFCwM+Cnvkj3XZ1CMjoWQa 89iUuEr7dKUWD5BVsLnn59TYUdd+n4Kx3oxiOrMc+5TIbbNQoRpAC4iVkpBvCmfL h789rodhVxRnEysJaikSajwc1x4z5TWGLWmg+xgwI/N58nT76rsOAYicOLpLZztL Ad/SU/OcJmKC4a4U1+jzcz2MrthyajFiYEWPpBSCiBm2bAc/zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYmQUbe41wy4G1NOr6VO7Xjov+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOWYwZmU0ZWMtNTQwOC0z NDAxLTkzYjctMGQxZmQ5NWU0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjzdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwFkSqep/U13KUZt+yTvUPByLMqDGw2O4x5XYABedLpmnZGhAlg5uTM HshQX9WyCeMCq3UQYQgFVzQ1jwCcPaHscZqg/ee4DDA6Mne0eeGQEUjgNTOxzXFK 7Jo7yvzhjo7LoNIUrqZWftD0qerxH3i6vF0GyV9qBVuEq5JqqZXNtLE8HtseoLX/ AgHQoxLVIsfsbXv79RVINaxjHkJ8rfOW3OIS9G2b923p3C2XO8LoAM1rEfbX4qEZ /vYAaITPAof669M9OwU/6/zfIpwWdVsxvnhBXiy9TS97cn64DmmPyEhuq54F0bRb yWChoJKTU2ooDCbTBPIknIQ01RLwlpk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:08 2025 by rpki-client