$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa File: 94cb1c41-ad3a-3afa-bf43-97f45742815b.roa (raw, json) Hash identifier: 3D75Ahc4M9K04jvo1alEzCGiFU9NFDOXrBxvcY+hmQg= Subject key identifier: AF:26:59:AF:72:64:9A:24:D2:BC:99:AC:E0:6F:E6:C6:F6:7C:A2:FD Certificate issuer: /CN=32652e19-5988-41fb-a45a-66b23c523f3b Certificate serial: 010D0C9F4328584BA87A1D29937EA3DACCE63700 Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa Signing time: Fri 24 Oct 2025 02:31:32 +0000 ROA not before: Fri 24 Oct 2025 02:31:32 +0000 ROA not after: Thu 22 Jan 2026 03:31:32 +0000 asID: 134176 IP address blocks: 142.248.112.0/22 maxlen: 22 142.248.112.0/24 maxlen: 24 142.248.113.0/24 maxlen: 24 142.248.114.0/24 maxlen: 24 142.248.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:7a:1d:29:93:7e:a3:da:cc:e6:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b Validity Not Before: Oct 24 02:31:32 2025 GMT Not After : Jan 22 03:31:32 2026 GMT Subject: CN=0b2e6da2-702b-4f55-8ee5-67b2f4dd06bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:f3:04:cc:f7:b0:37:03:dd:84:61:31:d5: 0e:d7:2c:ce:aa:c0:74:0b:da:72:97:41:83:47:77: 9e:1c:26:42:78:81:32:52:2e:22:21:f8:bf:1a:33: 9a:c5:f1:a2:d3:85:5a:f7:12:80:2c:dc:25:04:ed: 40:32:ff:f7:b4:12:51:32:80:91:2b:92:31:a6:36: 41:7d:b1:21:35:36:ad:f1:17:3d:ef:c7:e3:22:24: 3b:ae:cc:ce:cf:6d:29:d0:35:5e:c2:42:bd:dc:e9: ea:3d:9f:13:ea:8f:30:c4:72:39:9f:b9:f1:5a:40: 5d:bd:52:ce:d2:3b:bb:14:2d:81:fc:46:99:33:d5: 35:aa:2b:e7:70:e2:11:f3:09:d2:59:dc:ed:3c:45: 62:9b:50:b4:cc:6c:fe:b5:e1:b4:1e:7a:53:b1:67: c0:a9:d9:ca:88:8c:ee:a8:58:f4:5f:48:23:8b:8f: f8:04:27:95:5d:39:4a:74:d7:7a:68:c9:55:f8:8b: 5a:c4:07:3b:5c:35:33:2f:a6:d7:67:85:e5:ed:67: bb:15:86:83:1f:18:7c:c7:91:56:0a:9a:c0:3b:b9: c5:25:a7:63:ed:00:cc:14:65:12:c4:4b:8d:ea:c6: 8b:c4:32:ca:d9:13:fd:23:1c:07:7e:4d:a9:3c:38: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:59:AF:72:64:9A:24:D2:BC:99:AC:E0:6F:E6:C6:F6:7C:A2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/94cb1c41-ad3a-3afa-bf43-97f45742815b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl X509v3 Authority Key Identifier: keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e1:95:01:87:06:5f:f0:93:16:cf:31:97:35:0e:b4:4a:9f: 67:26:33:73:7a:f4:2d:99:b7:74:85:fb:c2:04:e1:ad:70:24: ad:65:24:b7:3b:8c:66:65:5e:3c:cd:82:fd:0b:33:a5:4b:33: f6:63:b3:b1:61:37:51:73:87:d0:94:3f:fb:6b:f7:f6:44:d6: 0a:5b:ba:2b:1f:61:9f:1f:ea:1b:16:8f:ce:8d:d5:2a:91:43: 91:3b:1e:1b:ac:a6:ec:73:6e:9a:c8:af:ca:e3:12:02:cd:7f: a8:e7:2e:95:1a:43:7f:ec:db:f8:20:fc:d8:65:c4:58:fd:21: 24:54:68:4a:8f:8b:5d:9d:9d:3c:b5:3e:5c:2e:f0:30:fe:16: fc:b9:a8:dc:75:cc:c8:91:e4:1b:cc:e9:e3:8e:0b:30:54:9c: 5a:17:7c:b5:77:38:2d:25:90:ba:b4:ef:41:16:4f:ff:3b:ff: cf:1d:46:45:ca:41:65:72:9a:1f:17:98:ed:5a:f8:8f:00:d5: 92:b3:f3:0e:00:54:64:81:b4:d1:7b:9a:f6:14:90:7d:85:23: 77:e2:e9:3d:cd:3e:93:b6:b5:22:ad:9a:bf:5e:88:27:da:40: 70:f2:99:a2:79:d0:b1:7b:65:3a:2d:df:78:74:9a:f8:53:45: 21:df:e7:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuoeh0pk36j2szmNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI2NTJlMTktNTk4OC00MWZiLWE0NWEtNjZiMjNjNTIz ZjNiMB4XDTI1MTAyNDAyMzEzMloXDTI2MDEyMjAzMzEzMlowLzEtMCsGA1UEAxMk MGIyZTZkYTItNzAyYi00ZjU1LThlZTUtNjdiMmY0ZGQwNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4fzBMz3sDcD3YRhMdUO1yzOqsB0C9pyl0GD R3eeHCZCeIEyUi4iIfi/GjOaxfGi04Va9xKALNwlBO1AMv/3tBJRMoCRK5IxpjZB fbEhNTat8Rc978fjIiQ7rszOz20p0DVewkK93OnqPZ8T6o8wxHI5n7nxWkBdvVLO 0ju7FC2B/EaZM9U1qivncOIR8wnSWdztPEVim1C0zGz+teG0HnpTsWfAqdnKiIzu qFj0X0gji4/4BCeVXTlKdNd6aMlV+ItaxAc7XDUzL6bXZ4Xl7We7FYaDHxh8x5FW CprAO7nFJadj7QDMFGUSxEuN6saLxDLK2RP9IxwHfk2pPDjP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8mWa9yZJok0ryZrOBv5sb2fKL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1 MmUxOS01OTg4LTQxZmItYTQ1YS02NmIyM2M1MjNmM2IvOTRjYjFjNDEtYWQzYS0z YWZhLWJmNDMtOTdmNDU3NDI4MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzI2NTJlMTktNTk4OC00MWZiLWE0 NWEtNjZiMjNjNTIzZjNiLzMyNjUyZTE5LTU5ODgtNDFmYi1hNDVhLTY2YjIzYzUy M2YzYi5jcmwwHwYDVR0jBBgwFoAUrWJ7cveJh0NtZMJTwuOF0WzytQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1MmUxOS01OTg4LTQxZmItYTQ1YS02NmIy M2M1MjNmM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3hlQGHBl/wkxbPMZc1DrRKn2cmM3N69C2Zt3SF+8IE4a1wJK1lJLc7 jGZlXjzNgv0LM6VLM/Zjs7FhN1Fzh9CUP/tr9/ZE1gpbuisfYZ8f6hsWj86N1SqR Q5E7HhuspuxzbprIr8rjEgLNf6jnLpUaQ3/s2/gg/NhlxFj9ISRUaEqPi12dnTy1 Plwu8DD+Fvy5qNx1zMiR5BvM6eOOCzBUnFoXfLV3OC0lkLq070EWT/87/88dRkXK QWVymh8XmO1a+I8A1ZKz8w4AVGSBtNF7mvYUkH2FI3fi6T3NPpO2tSKtmr9eiCfa QHDymaJ50LF7ZTot33h0mvhTRSHf52E= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:01 2025 by rpki-client