$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa File: 65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa (raw, json) Hash identifier: RUZup+/rxqkNBil78oqViTF6h4QSx24tU0oLdHuWDhI= Subject key identifier: 9C:B6:6A:A5:32:C9:88:B0:4D:B8:57:A9:24:76:F2:14:37:B8:32:EA Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BA7CCEFDDDDAD10636165D480 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 271 IP address blocks: 142.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ef:dd:dd:ad:10:63:61:65:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=8fcfe78e-58df-4a9a-898f-dd9f930eadf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:1a:3a:68:eb:be:9d:c4:58:0b:58:bc:f2: a4:68:16:60:00:11:01:52:82:e0:f8:79:f9:85:95: f1:5a:60:28:d9:8a:87:cf:e7:4b:eb:5e:f9:1e:66: 8a:58:6e:60:ae:7d:73:cb:07:78:00:9c:18:95:37: 5c:30:4f:dd:38:c7:cb:2b:14:6d:3c:7c:6d:f4:a1: cb:d8:2a:84:83:cc:95:6e:2a:c6:e7:c5:48:ef:84: 00:9f:96:45:e7:03:77:0f:c9:46:ad:08:1f:ac:8a: a4:71:a0:01:ce:57:46:8f:c4:00:e7:a2:9d:d1:3d: 0c:ea:de:79:d3:a2:7d:a9:bd:d2:30:9e:91:a2:e9: f1:66:94:a9:6b:46:ab:8c:51:51:0e:83:48:77:fd: a8:3c:29:df:08:1e:9e:37:11:77:63:b8:14:df:ef: ab:81:e9:e5:30:24:56:3c:25:8a:39:9c:04:e9:7a: ca:49:c1:21:c1:2a:b9:75:5b:b1:9d:9f:cc:c6:87: 1b:81:0a:23:bd:ee:93:f2:a9:fe:54:b6:57:c0:ae: 55:6e:45:5c:62:60:35:48:53:64:c7:46:7a:27:6f: 42:e7:96:11:78:a8:c9:69:55:12:36:8b:17:9c:ee: 45:24:c5:2e:6f:1d:36:f9:85:20:59:0b:50:d6:8c: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:6A:A5:32:C9:88:B0:4D:B8:57:A9:24:76:F2:14:37:B8:32:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/65053fbc-1631-3f8a-b9a0-7b674aa98e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:90:23:f2:5d:83:f5:53:d8:27:d0:e8:91:f4:a7:34:39:66: c4:1b:af:5d:a4:1c:ef:61:bf:4b:5d:1f:cd:7e:e0:15:a9:b3: 64:e3:66:e5:5b:67:ca:be:c7:fa:68:25:8a:79:c2:26:0a:ae: d6:d2:53:87:c0:c9:1e:d3:ad:1c:38:4c:46:5e:7d:f5:74:24: 95:a1:a6:e0:73:fc:a0:07:ab:80:fb:d3:38:b7:db:63:62:c5: ea:6b:a1:ae:a3:7d:6a:d0:b4:69:38:64:22:4c:81:9a:04:bc: 59:8e:de:43:0b:4f:03:f0:dd:a8:eb:88:9f:ed:49:8e:48:5a: 07:f1:94:9b:9d:dc:96:69:86:22:98:80:bc:37:84:41:66:f6: e1:3d:b2:22:2f:bd:87:cf:f2:75:73:1b:6a:a8:c5:67:7e:81: a5:ef:f7:92:0c:f4:9e:e7:b3:74:d4:d9:d2:ca:b7:f0:a5:16: b6:dc:0a:e5:8f:f5:15:82:44:19:d6:4e:e7:3d:b0:90:37:28: a1:d0:e2:3c:fb:0f:23:03:69:79:4e:20:19:ac:3f:74:5d:a9: 69:5b:54:67:c6:5a:b5:d6:ab:53:1c:f1:80:9a:22:51:87:cf: af:cc:07:51:69:aa:96:37:70:3e:41:86:76:ca:89:5d:1d:f4: 63:13:e9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzO/d3a0QY2Fl1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGZjZmU3OGUtNThkZi00YTlhLTg5OGYtZGQ5ZjkzMGVhZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhUaOmjrvp3EWAtYvPKkaBZgABEBUoLg+Hn5 hZXxWmAo2YqHz+dL6175HmaKWG5grn1zywd4AJwYlTdcME/dOMfLKxRtPHxt9KHL 2CqEg8yVbirG58VI74QAn5ZF5wN3D8lGrQgfrIqkcaABzldGj8QA56Kd0T0M6t55 06J9qb3SMJ6RounxZpSpa0arjFFRDoNId/2oPCnfCB6eNxF3Y7gU3++rgenlMCRW PCWKOZwE6XrKScEhwSq5dVuxnZ/MxocbgQojve6T8qn+VLZXwK5VbkVcYmA1SFNk x0Z6J29C55YReKjJaVUSNosXnO5FJMUubx02+YUgWQtQ1oyrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy2aqUyyYiwTbhXqSR28hQ3uDLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNjUwNTNmYmMtMTYzMS0z ZjhhLWI5YTAtN2I2NzRhYTk4ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaQI/Jdg/VT2CfQ6JH0pzQ5ZsQbr12kHO9hv0tdH81+4BWps2TjZuVb Z8q+x/poJYp5wiYKrtbSU4fAyR7TrRw4TEZeffV0JJWhpuBz/KAHq4D70zi322Ni xeproa6jfWrQtGk4ZCJMgZoEvFmO3kMLTwPw3ajriJ/tSY5IWgfxlJud3JZphiKY gLw3hEFm9uE9siIvvYfP8nVzG2qoxWd+gaXv95IM9J7ns3TU2dLKt/ClFrbcCuWP 9RWCRBnWTuc9sJA3KKHQ4jz7DyMDaXlOIBmsP3RdqWlbVGfGWrXWq1Mc8YCaIlGH z6/MB1FpqpY3cD5BhnbKiV0d9GMT6ck= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:19 2025 by rpki-client