$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa File: c8268689-1fbe-3c42-bbd4-3c7130784661.roa (raw, json) Hash identifier: KA4XIfb4k4USYidRBMmo1MHHKNhB7oiFu5MEsVILMzg= Subject key identifier: DA:32:69:12:E5:14:C3:70:86:75:53:98:F7:DD:25:C1:A9:78:57:F6 Certificate issuer: /CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Certificate serial: 010D0C9F4328584B99D7954CE8DDBD076CFCC540 Authority key identifier: 7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 611 IP address blocks: 142.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:95:4c:e8:dd:bd:07:6c:fc:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d770c5cf-d883-43bc-a72e-4ae7f90d4900 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3b3788f3-fda0-46b3-a7d8-0df3dd2e201f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:69:d9:83:ec:25:fe:54:e4:a0:72:48:ee: 5a:48:8e:50:24:5d:c4:61:18:c2:80:ab:2d:8f:d8: 72:e1:12:05:7c:0a:45:91:15:71:5b:c9:14:00:87: 12:c6:f0:3b:eb:72:4b:c6:f0:dd:56:40:92:7b:ce: 80:1c:52:f2:ee:e9:93:c5:84:7c:5c:93:db:c1:5b: c2:57:dc:02:ec:9a:83:1d:0b:b9:b3:69:df:16:85: 93:a9:b7:1b:27:c3:94:fa:92:f4:0d:07:3e:c7:59: 3f:b2:f6:51:19:9b:b1:8a:fa:76:bb:ee:44:99:0e: 19:e4:b1:2d:a5:5b:e7:30:f3:95:b3:8d:9c:55:04: 03:ff:dd:9e:0d:d2:ea:47:d3:32:ce:b4:f0:85:6f: 23:49:35:b4:c9:80:eb:03:da:0c:8d:5d:54:8a:35: 0d:eb:65:e1:66:18:9d:ce:7e:4a:0e:2f:14:c4:8d: 5f:ef:d1:d2:9b:23:bb:c6:61:00:75:e0:e8:58:e6: a9:8f:33:bd:f3:64:aa:d9:b0:06:2c:98:a9:9c:1d: 11:06:8a:1b:af:99:16:b1:6d:02:ad:37:7c:b1:d0: c0:c3:50:25:af:66:34:86:1d:06:88:1b:65:d2:b5: 55:d1:50:2b:60:be:ff:b9:94:5a:99:b6:e0:e4:f0: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:69:12:E5:14:C3:70:86:75:53:98:F7:DD:25:C1:A9:78:57:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/c8268689-1fbe-3c42-bbd4-3c7130784661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900/d770c5cf-d883-43bc-a72e-4ae7f90d4900.crl X509v3 Authority Key Identifier: keyid:7C:1E:62:77:45:49:21:21:11:77:82:62:6F:8C:D5:52:B1:BA:A8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d770c5cf-d883-43bc-a72e-4ae7f90d4900.cer sbgp-ipAddrBlock: critical IPv4: 142.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b1:3f:9b:47:15:c7:ba:3a:22:64:9e:57:f8:5d:79:5d:38: 49:39:ed:15:13:32:34:c0:07:b8:34:6e:99:fd:ab:19:c7:b8: 43:c0:49:a5:78:0e:d7:7e:ea:bd:ef:61:b4:4a:96:0d:5b:c2: e6:00:4e:72:f4:43:e5:16:b7:a0:40:56:c0:c0:6d:40:e8:ee: 57:76:8a:ff:9d:52:f4:51:64:eb:ec:2d:14:22:b5:61:74:cf: 66:d1:8c:99:5d:7a:ba:5f:a6:44:84:e9:4c:41:65:98:8c:75: 42:1b:8e:0d:bc:33:1b:ed:bb:ff:33:6e:0a:2c:8a:d0:ea:87: a6:77:98:ac:01:a5:de:f9:d9:71:5f:34:3f:0a:1c:6b:88:84: 4c:3a:21:88:c3:ff:e3:4a:75:9c:f1:9f:84:b3:4b:e5:31:82: 79:e0:fb:92:45:9a:bb:dc:ef:9c:22:f9:c0:b9:d9:4b:2f:6d: d5:a1:63:f2:d3:9f:3b:fa:89:81:ec:8f:be:7b:34:c1:06:63: 60:a2:c7:8e:03:f4:fa:27:e4:3d:7e:f3:cd:52:01:d4:68:03: 63:fe:4a:72:a0:b2:a1:55:70:2b:7d:8d:78:ff:a1:05:75:32: 79:73:b8:00:ce:48:d8:70:98:2b:10:17:56:59:5e:80:61:3e: fa:e4:f3:e3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuZ15VM6N29B2z8xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc3MGM1Y2YtZDg4My00M2JjLWE3MmUtNGFlN2Y5MGQ0 OTAwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2IzNzg4ZjMtZmRhMC00NmIzLWE3ZDgtMGRmM2RkMmUyMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoflp2YPsJf5U5KBySO5aSI5QJF3EYRjCgKst j9hy4RIFfApFkRVxW8kUAIcSxvA763JLxvDdVkCSe86AHFLy7umTxYR8XJPbwVvC V9wC7JqDHQu5s2nfFoWTqbcbJ8OU+pL0DQc+x1k/svZRGZuxivp2u+5EmQ4Z5LEt pVvnMPOVs42cVQQD/92eDdLqR9MyzrTwhW8jSTW0yYDrA9oMjV1UijUN62XhZhid zn5KDi8UxI1f79HSmyO7xmEAdeDoWOapjzO982Sq2bAGLJipnB0RBoobr5kWsW0C rTd8sdDAw1Alr2Y0hh0GiBtl0rVV0VArYL7/uZRambbg5PAXPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNoyaRLlFMNwhnVTmPfdJcGpeFf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNzcw YzVjZi1kODgzLTQzYmMtYTcyZS00YWU3ZjkwZDQ5MDAvYzgyNjg2ODktMWZiZS0z YzQyLWJiZDQtM2M3MTMwNzg0NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDc3MGM1Y2YtZDg4My00M2JjLWE3 MmUtNGFlN2Y5MGQ0OTAwL2Q3NzBjNWNmLWQ4ODMtNDNiYy1hNzJlLTRhZTdmOTBk NDkwMC5jcmwwHwYDVR0jBBgwFoAUfB5id0VJISERd4Jib4zVUrG6qC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNzcwYzVjZi1kODgzLTQzYmMtYTcyZS00YWU3 ZjkwZDQ5MDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjhEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABLE/m0cVx7o6ImSeV/hdeV04STntFRMyNMAHuDRumf2rGce4Q8BJpXgO 137qve9htEqWDVvC5gBOcvRD5Ra3oEBWwMBtQOjuV3aK/51S9FFk6+wtFCK1YXTP ZtGMmV16ul+mRITpTEFlmIx1QhuODbwzG+27/zNuCiyK0OqHpneYrAGl3vnZcV80 Pwoca4iETDohiMP/40p1nPGfhLNL5TGCeeD7kkWau9zvnCL5wLnZSy9t1aFj8tOf O/qJgeyPvns0wQZjYKLHjgP0+ifkPX7zzVIB1GgDY/5KcqCyoVVwK32NeP+hBXUy eXO4AM5I2HCYKxAXVllegGE++uTz4w== -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:07 2025 by rpki-client