$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa File: d8100009-70c0-3912-8d76-a269e3657e98.roa (raw, json) Hash identifier: PnmrXRnqLU03rU81jWuQ2pxW3moqegzyk5dqt5na13Q= Subject key identifier: 2F:AF:71:B9:64:24:C1:C0:9D:6B:72:6B:B6:97:44:38:BC:81:9E:3E Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78C8F113BDF271B1A2080 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 143.55.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:8f:11:3b:df:27:1b:1a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a4028489-135c-433f-a9fb-ffadb82fb917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b9:9b:a6:8b:45:2b:a5:0d:81:74:3b:b6:42: da:d0:1d:e8:68:48:d3:76:6a:30:cf:de:b3:59:db: 01:1d:9a:a3:81:56:8e:55:29:40:50:61:ba:4c:ba: f3:63:45:f2:38:6d:0c:ae:64:33:0a:10:04:93:16: bd:df:8e:ca:40:ad:2c:33:16:ab:21:8d:63:e1:65: b8:e4:a9:89:a5:68:7d:7d:ce:76:0c:2d:9d:ab:50: de:57:6b:e7:1f:c4:6d:f8:a4:10:8e:9d:5e:e1:84: 2b:6b:dd:57:ed:ca:cd:79:61:02:7a:4f:4e:c0:32: 3e:29:e0:be:87:4f:ac:57:f1:f2:b3:05:4b:9f:b5: 94:41:02:33:6c:a7:82:f3:e0:83:ea:25:98:28:ce: 30:0a:b0:94:1c:29:5b:98:cb:b2:6f:99:74:06:2e: 1b:e3:98:27:fe:af:33:a1:91:0a:0c:90:96:0f:b8: 19:7b:b5:ae:3f:ea:ab:54:fd:d1:0d:1f:45:7c:3e: 4c:4f:90:eb:f6:31:4e:17:f4:8f:61:d5:8e:cd:49: c0:cc:08:9e:f5:c3:d4:93:04:71:b4:6a:2f:8b:46: d3:80:4b:a3:d0:58:eb:a5:fa:30:d9:ed:bd:70:40: 93:e3:f7:27:48:74:b3:61:a4:b8:f5:59:c6:74:45: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:71:B9:64:24:C1:C0:9D:6B:72:6B:B6:97:44:38:BC:81:9E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d8100009-70c0-3912-8d76-a269e3657e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 143.55.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fd:e7:99:a9:b0:54:65:3a:8b:4a:d9:fa:70:71:39:a5:25: f1:73:fa:88:91:2d:d5:26:75:ce:80:f0:fb:bd:bc:eb:75:10: 09:4c:53:a5:d1:fc:d2:94:07:0c:30:7f:69:d9:b5:af:f1:ca: 04:83:84:b5:d4:98:82:81:ec:e1:6e:fd:eb:94:e9:a5:9f:2d: e6:b1:1a:ad:14:04:2b:85:a6:63:24:89:42:bb:eb:50:80:45: a1:1e:26:64:43:07:5e:d4:2c:3b:0a:5d:75:7b:97:50:2f:58: ce:43:a7:f7:e5:78:55:bc:61:b1:2f:21:e7:4c:11:45:c9:94: 9f:cb:b4:56:8d:9a:b6:ba:68:07:cb:21:59:e1:bb:fd:ee:83: a7:4d:42:ed:29:7b:9e:cd:bc:69:89:d8:78:2b:aa:91:b2:94: bb:2c:31:65:20:35:e2:e0:4b:3e:4a:e8:3b:cc:6f:b2:e4:31: 1d:3d:22:f2:ba:35:de:0e:28:a4:72:71:d0:f4:f7:d0:0e:8c: 10:45:5c:b9:4f:4a:7a:bf:cf:bd:44:51:c1:cd:30:39:0b:12: 87:9f:56:be:0d:31:ce:02:a5:a2:f7:6a:15:48:a5:ff:7f:95: 7e:c2:29:11:06:ae:ab:12:63:0f:7a:e0:7a:57:68:32:03:f3: f2:46:12:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4yPETvfJxsaIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTQwMjg0ODktMTM1Yy00MzNmLWE5ZmItZmZhZGI4MmZiOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LmbpotFK6UNgXQ7tkLa0B3oaEjTdmowz96z WdsBHZqjgVaOVSlAUGG6TLrzY0XyOG0MrmQzChAEkxa9347KQK0sMxarIY1j4WW4 5KmJpWh9fc52DC2dq1DeV2vnH8Rt+KQQjp1e4YQra91X7crNeWECek9OwDI+KeC+ h0+sV/HyswVLn7WUQQIzbKeC8+CD6iWYKM4wCrCUHClbmMuyb5l0Bi4b45gn/q8z oZEKDJCWD7gZe7WuP+qrVP3RDR9FfD5MT5Dr9jFOF/SPYdWOzUnAzAie9cPUkwRx tGovi0bTgEuj0Fjrpfow2e29cECT4/cnSHSzYaS49VnGdEUHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+vcblkJMHAnWtya7aXRDi8gZ4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDgxMDAwMDktNzBjMC0z OTEyLThkNzYtYTI2OWUzNjU3ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjzeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD955mpsFRlOotK2fpwcTmlJfFz+oiRLdUmdc6A8Pu9vOt1EAlMU6XR /NKUBwwwf2nZta/xygSDhLXUmIKB7OFu/euU6aWfLeaxGq0UBCuFpmMkiUK761CA RaEeJmRDB17ULDsKXXV7l1AvWM5Dp/fleFW8YbEvIedMEUXJlJ/LtFaNmra6aAfL IVnhu/3ug6dNQu0pe57NvGmJ2HgrqpGylLssMWUgNeLgSz5K6DvMb7LkMR09IvK6 Nd4OKKRycdD099AOjBBFXLlPSnq/z71EUcHNMDkLEoefVr4NMc4CpaL3ahVIpf9/ lX7CKREGrqsSYw964HpXaDID8/JGEqM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:52 2025 by rpki-client