$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa File: 8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa (raw, json) Hash identifier: oodpCQQ6zLRscWtVX95MUrEnK5twyPgEKPrFDpne3JA= Subject key identifier: 61:A7:6F:A6:A4:2C:AD:7E:FD:82:23:BC:E2:9A:10:33:4B:B3:DB:A6 Certificate issuer: /CN=fb17e7fe-b629-4f60-b002-5a63654202da Certificate serial: 010D0C9F4328584BA39D12E04F05C6DE10583E60 Authority key identifier: 9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 396982 IP address blocks: 142.147.14.0/24 maxlen: 24 162.247.96.0/21 maxlen: 21 162.251.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:e0:4f:05:c6:de:10:58:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb17e7fe-b629-4f60-b002-5a63654202da Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2b5ae873-4114-45da-b3f4-e5719c2a80ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:e0:ae:f4:0b:7b:40:af:b1:cf:b6:d8:12: 00:95:6a:cb:94:a2:fd:77:53:99:ba:2d:05:c0:3b: 68:71:1e:d6:74:d5:85:4b:ce:d5:b2:61:30:f4:17: 93:ee:ef:ff:7a:2d:41:38:28:d6:0e:5b:fb:c8:3f: f0:5c:d2:93:22:24:50:70:fc:47:e1:15:0e:f0:7c: 4c:31:16:1b:b5:1e:f3:37:0f:b5:42:ac:2a:00:0e: 57:7b:89:0d:48:92:20:c9:5a:c3:9c:a9:da:0c:46: 3a:09:04:26:eb:f5:ff:d4:1e:55:a5:03:71:31:3c: 83:36:04:fa:83:34:53:2f:99:9d:92:bf:11:86:d6: ae:95:59:54:d5:9b:12:62:14:54:fa:c9:18:03:c9: 78:39:e7:a2:99:a0:aa:40:f1:2d:31:a3:9d:75:15: c6:9e:1b:a7:a1:cb:dc:28:4c:b0:db:36:e5:1e:e2: f2:25:04:2b:f4:7d:fc:72:db:b1:02:26:09:3c:c8: 06:ea:62:c3:95:66:ea:6a:55:d6:0b:4e:9b:b0:a3: 06:63:02:aa:af:58:2d:a6:c5:01:4f:6c:77:f5:0b: a9:df:ad:73:cc:4c:56:e0:c2:94:6d:d2:24:78:08: 20:f1:1a:34:3e:8c:78:97:2e:4b:37:26:ad:aa:5f: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A7:6F:A6:A4:2C:AD:7E:FD:82:23:BC:E2:9A:10:33:4B:B3:DB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl X509v3 Authority Key Identifier: keyid:9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer sbgp-ipAddrBlock: critical IPv4: 142.147.14.0/24 162.247.96.0/21 162.251.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:30:3f:b4:0b:07:89:1a:af:bb:8e:36:b5:a1:03:20:d1:11: 11:56:22:23:fa:9b:f8:3b:7d:8e:da:7f:08:af:28:74:24:c4: e3:25:ea:0b:49:5f:cb:da:22:0f:14:86:88:1a:86:96:7f:32: 6d:61:87:6c:fd:1e:8f:ff:72:cb:24:36:4f:e1:38:cc:4c:08: d3:15:34:d5:dc:fb:e0:d1:db:79:45:00:f2:d1:fc:5b:e6:ab: ac:85:eb:87:0f:01:01:90:e2:c0:38:36:a3:ac:c2:19:9f:7d: 9a:fd:42:c9:da:8b:c8:b1:e8:ad:55:4e:73:d8:58:1b:a8:98: 76:89:4d:78:f9:6d:95:2f:07:d8:3d:ab:2b:0d:76:eb:f5:0d: e1:84:21:72:89:b3:31:da:cd:c5:e4:12:a1:2f:4a:34:49:bb: 90:74:d6:e5:aa:2f:57:94:1a:3a:fc:ba:f2:90:93:97:a0:7c: c1:36:d4:eb:19:4f:c9:7d:78:01:ce:98:9a:8a:d9:c0:08:30: 15:8d:66:d1:69:0d:cc:a9:fa:d5:ab:3d:c9:ef:1e:e3:da:49: bd:cf:20:db:0c:38:38:82:3d:8b:a9:58:14:5a:2d:3c:d1:b5: 75:22:72:1d:3d:6c:c3:06:ae:2f:49:4f:69:b0:6c:29:bf:98: 4d:c3:b6:8b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEujnRLgTwXG3hBYPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIxN2U3ZmUtYjYyOS00ZjYwLWIwMDItNWE2MzY1NDIw MmRhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmI1YWU4NzMtNDExNC00NWRhLWIzZjQtZTU3MTljMmE4MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUvgrvQLe0Cvsc+22BIAlWrLlKL9d1OZui0F wDtocR7WdNWFS87VsmEw9BeT7u//ei1BOCjWDlv7yD/wXNKTIiRQcPxH4RUO8HxM MRYbtR7zNw+1QqwqAA5Xe4kNSJIgyVrDnKnaDEY6CQQm6/X/1B5VpQNxMTyDNgT6 gzRTL5mdkr8RhtaulVlU1ZsSYhRU+skYA8l4OeeimaCqQPEtMaOddRXGnhunocvc KEyw2zblHuLyJQQr9H38ctuxAiYJPMgG6mLDlWbqalXWC06bsKMGYwKqr1gtpsUB T2x39Qup361zzExW4MKUbdIkeAgg8Ro0Pox4ly5LNyatql9ZOQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGGnb6akLK1+/YIjvOKaEDNLs9umMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYjE3 ZTdmZS1iNjI5LTRmNjAtYjAwMi01YTYzNjU0MjAyZGEvOGY3NTU5NmQtMGRiNS0z NzY0LWJjOWEtZWY5OGViMzgyZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmIxN2U3ZmUtYjYyOS00ZjYwLWIw MDItNWE2MzY1NDIwMmRhL2ZiMTdlN2ZlLWI2MjktNGY2MC1iMDAyLTVhNjM2NTQy MDJkYS5jcmwwHwYDVR0jBBgwFoAUnPAXwac5hb3KwouFkp1borJDbuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYjE3ZTdmZS1iNjI5LTRmNjAtYjAwMi01YTYz NjU0MjAyZGEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjpMOAwQD ovdgAwQCovsUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAcwP7QLB4kar7uONrWhAyDRERFWIiP6m/g7fY7a fwivKHQkxOMl6gtJX8vaIg8UhogahpZ/Mm1hh2z9Ho//csskNk/hOMxMCNMVNNXc ++DR23lFAPLR/Fvmq6yF64cPAQGQ4sA4NqOswhmffZr9Qsnai8ix6K1VTnPYWBuo mHaJTXj5bZUvB9g9qysNduv1DeGEIXKJszHazcXkEqEvSjRJu5B01uWqL1eUGjr8 uvKQk5egfME21OsZT8l9eAHOmJqK2cAIMBWNZtFpDcyp+tWrPcnvHuPaSb3PINsM ODiCPYupWBRaLTzRtXUich09bMMGri9JT2mwbCm/mE3Dtos= -----END CERTIFICATE-----Generated at Tue Nov 4 08:06:56 2025 by rpki-client