$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa File: 460767ff-901b-3e59-9d58-2c9a6461ba4c.roa (raw, json) Hash identifier: KgQXJ/IOmeacVV2znBIt1xO19Pim7drd+EG7z58BOfk= Subject key identifier: 60:A2:C4:89:74:B3:55:99:CB:84:C2:E2:45:49:BA:A9:89:C7:D2:06 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BABFD09C45D576B2170144200 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 271 IP address blocks: 142.231.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:09:c4:5d:57:6b:21:70:14:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=2c6dbf02-e6cb-4e0a-bf31-1570964ce599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:66:7c:b2:ac:2d:08:0e:b0:0b:be:3c:c9: e9:44:f7:55:8d:45:62:a1:61:96:6c:22:34:21:93: 6a:20:40:f9:0a:63:cb:81:44:b4:2a:03:7a:91:a4: 9f:a9:dc:0a:b0:f3:34:d9:a7:25:25:5d:3c:8f:1c: 8f:d3:05:1b:8b:68:4e:33:a8:b3:ad:9e:31:5a:01: 5e:85:3e:42:97:53:a8:9d:93:66:a5:ad:95:bf:d7: 7b:d3:72:1b:d5:bc:ae:63:cd:59:1f:ee:98:bf:6a: 1d:84:eb:f2:02:4d:83:5a:69:b9:da:ea:cc:10:11: f1:56:51:0e:20:97:1b:fc:9e:1e:1b:fc:f9:71:35: 02:fb:7b:ed:8b:c0:2a:49:83:41:72:13:27:19:01: 2c:7f:f3:46:0e:62:c7:69:76:8b:ae:07:7e:cd:fb: 37:28:1d:88:b0:37:44:6f:ec:fe:96:90:a3:c1:16: 0b:5e:12:d6:50:af:49:f5:da:fc:0a:7c:67:d2:0e: 53:e6:0f:16:31:57:af:5f:a5:a7:07:1b:81:ad:4a: 5b:65:b5:29:70:c7:c1:18:18:e2:4a:f5:31:d1:18: 0e:46:65:81:a5:4e:19:c3:22:de:70:7a:3e:6d:8e: a3:40:43:da:0a:c5:5a:45:4a:b1:ed:ee:ca:af:c0: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A2:C4:89:74:B3:55:99:CB:84:C2:E2:45:49:BA:A9:89:C7:D2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/460767ff-901b-3e59-9d58-2c9a6461ba4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:69:0f:d7:04:e5:85:ad:44:a6:e8:be:4a:75:36:5c:8c:0a: a4:19:44:c5:d7:ff:bf:50:bf:d3:72:91:5f:98:e0:4e:9c:a2: df:29:11:3c:b3:d0:14:5f:fe:6a:91:70:28:d8:af:7e:0b:84: 08:9a:b9:6c:55:bf:90:de:6f:5e:dc:39:a4:dd:3b:9e:c1:5f: c1:1e:dd:01:4f:ac:db:ec:b0:d0:cc:87:ea:a5:b2:e4:3f:19: 28:b5:6b:b3:bf:1d:fa:61:13:d7:b0:a9:a3:1e:aa:19:b3:fb: 72:70:58:aa:17:91:74:b7:63:ba:c2:e2:b3:8d:a9:61:e4:8c: 2e:63:ec:a5:df:de:02:3e:cf:29:9a:d7:61:8f:16:8f:1f:4f: 27:07:cc:43:2c:ae:95:b2:17:1e:6d:68:19:92:f2:b2:1a:d2: a0:3a:31:a2:45:f5:3c:0c:4b:ba:60:6c:de:44:2e:e3:0e:12: c3:2b:23:76:da:d2:11:ea:66:28:90:00:a5:b3:ca:1f:ed:bf: 6b:1b:bd:a6:10:5a:f0:34:0f:62:78:e3:e8:6b:d7:65:32:94: 00:e3:64:5e:95:ec:4f:ac:ef:09:c9:55:77:ab:c1:3e:1f:aa: 23:b7:47:b5:54:6e:9b:79:50:5a:d2:db:8e:50:9f:54:d8:de: 93:6e:35:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QnEXVdrIXAUQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MmM2ZGJmMDItZTZjYi00ZTBhLWJmMzEtMTU3MDk2NGNlNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqlmfLKsLQgOsAu+PMnpRPdVjUVioWGWbCI0 IZNqIED5CmPLgUS0KgN6kaSfqdwKsPM02aclJV08jxyP0wUbi2hOM6izrZ4xWgFe hT5Cl1OonZNmpa2Vv9d703Ib1byuY81ZH+6Yv2odhOvyAk2DWmm52urMEBHxVlEO IJcb/J4eG/z5cTUC+3vti8AqSYNBchMnGQEsf/NGDmLHaXaLrgd+zfs3KB2IsDdE b+z+lpCjwRYLXhLWUK9J9dr8Cnxn0g5T5g8WMVevX6WnBxuBrUpbZbUpcMfBGBji SvUx0RgORmWBpU4ZwyLecHo+bY6jQEPaCsVaRUqx7e7Kr8BXqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCixIl0s1WZy4TC4kVJuqmJx9IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDYwNzY3ZmYtOTAxYi0z ZTU5LTlkNTgtMmM5YTY0NjFiYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtpD9cE5YWtRKbovkp1NlyMCqQZRMXX/79Qv9NykV+Y4E6cot8pETyz 0BRf/mqRcCjYr34LhAiauWxVv5Deb17cOaTdO57BX8Ee3QFPrNvssNDMh+qlsuQ/ GSi1a7O/HfphE9ewqaMeqhmz+3JwWKoXkXS3Y7rC4rONqWHkjC5j7KXf3gI+zyma 12GPFo8fTycHzEMsrpWyFx5taBmS8rIa0qA6MaJF9TwMS7pgbN5ELuMOEsMrI3ba 0hHqZiiQAKWzyh/tv2sbvaYQWvA0D2J44+hr12UylADjZF6V7E+s7wnJVXerwT4f qiO3R7VUbpt5UFrS245Qn1TY3pNuNRY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:56:45 2025 by rpki-client