$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa File: a33a56b6-e265-34a5-bf48-48025a40dec3.roa (raw, json) Hash identifier: 1lCLjneptgzElKZqdVPPLRTXs8IhVQtk+vL6LL/k3Kw= Subject key identifier: D9:16:5C:D7:4A:13:DE:64:FD:FB:35:13:36:5F:25:64:2C:B8:52:49 Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584B98122F2B33F950521CA83900 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa Signing time: Tue 21 Oct 2025 09:47:12 +0000 ROA not before: Tue 21 Oct 2025 09:47:12 +0000 ROA not after: Mon 19 Jan 2026 10:47:12 +0000 asID: 137535 IP address blocks: 142.248.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:12:2f:2b:33:f9:50:52:1c:a8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Oct 21 09:47:12 2025 GMT Not After : Jan 19 10:47:12 2026 GMT Subject: CN=53bd94c3-9ccf-4a7a-bd04-84c097cf9c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:7d:81:51:af:4a:ca:6f:ed:e1:a7:21:31: 3f:91:fc:64:a7:01:26:d4:90:69:1a:3a:d3:8d:70: 4e:6e:88:eb:9b:67:b7:05:ef:4b:2a:d4:a5:87:43: 18:a0:4d:cf:4f:e4:68:54:42:48:4c:f4:03:1f:e8: f1:ba:65:3e:3b:47:80:ff:0c:5f:64:4a:ba:2e:79: 75:53:a2:de:6a:22:e9:0d:5c:84:ec:68:0c:50:71: 1b:3d:09:f4:cf:70:a3:a5:4f:a0:b1:e5:24:32:6b: fc:ef:2d:05:17:44:14:a8:1c:13:58:f2:1c:7e:62: e0:42:1c:de:07:b9:9e:ec:b2:ee:06:c3:d6:9f:30: 5a:61:3d:17:64:c3:01:f4:fc:b9:16:bb:ad:0e:d7: 55:9a:4d:c4:3b:c3:7b:db:48:1a:2f:42:41:be:e7: cc:55:7e:c0:e6:2c:7e:05:9b:20:1e:c7:ad:33:a5: 06:f4:44:4f:34:63:1f:e9:bd:18:ef:82:4d:c0:a3: fe:47:c0:76:6a:99:43:ec:db:af:12:b3:36:71:d8: bf:53:bb:e1:02:31:dc:a5:d0:69:bc:c9:17:fc:39: 9d:9a:60:60:a8:e8:0b:5e:ba:05:27:8f:2a:b3:6b: 48:5b:f7:12:17:61:3b:81:fb:f0:9b:bd:e1:93:c2: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:5C:D7:4A:13:DE:64:FD:FB:35:13:36:5F:25:64:2C:B8:52:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5e:59:e2:9b:91:7b:c5:65:79:10:ec:db:25:d7:bc:47:b7: 27:25:ff:78:bc:f1:d0:00:fd:2e:4c:01:2b:d1:12:b2:a7:5b: ec:d5:b5:28:cd:b5:4c:78:f4:a4:59:a1:13:58:ef:94:47:e1: aa:6a:d8:cf:dd:59:27:4f:5e:40:9c:b9:85:71:70:16:b3:0e: d1:4f:24:56:5a:8f:c5:9e:35:81:80:96:b0:3b:d5:04:06:ba: ab:d4:8f:70:d0:4f:fc:a1:48:e5:70:92:99:c8:17:67:75:6c: 1d:15:27:da:6e:ff:61:df:b4:c0:02:cf:bf:d5:f0:5f:4f:27: 3b:ed:bb:5a:36:1a:42:36:75:de:fa:35:90:dc:bf:dd:97:83: f7:57:7b:7b:b7:c8:af:ca:41:a9:c4:8e:9c:67:cc:37:03:9d: 79:ed:f0:88:39:db:f1:35:f4:75:7b:0b:c5:a4:2b:ee:2b:db: bf:37:61:3c:5f:e0:c9:30:05:a4:bf:b3:e7:27:a7:41:31:6e: a4:12:ff:0c:60:05:e2:f3:d3:99:eb:82:6a:53:f3:4d:81:61: 77:23:60:97:d3:9e:12:a0:b6:fb:f0:d8:0e:60:8e:e9:d1:0f: c5:36:91:18:18:1a:52:ee:1a:b9:7c:9b:8b:63:99:27:d9:1e: 48:53:6f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYEi8rM/lQUhyoOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI1MTAyMTA5NDcxMloXDTI2MDExOTEwNDcxMlowLzEtMCsGA1UEAxMk NTNiZDk0YzMtOWNjZi00YTdhLWJkMDQtODRjMDk3Y2Y5YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNV9gVGvSspv7eGnITE/kfxkpwEm1JBpGjrT jXBObojrm2e3Be9LKtSlh0MYoE3PT+RoVEJITPQDH+jxumU+O0eA/wxfZEq6Lnl1 U6LeaiLpDVyE7GgMUHEbPQn0z3CjpU+gseUkMmv87y0FF0QUqBwTWPIcfmLgQhze B7me7LLuBsPWnzBaYT0XZMMB9Py5FrutDtdVmk3EO8N720gaL0JBvufMVX7A5ix+ BZsgHsetM6UG9ERPNGMf6b0Y74JNwKP+R8B2aplD7NuvErM2cdi/U7vhAjHcpdBp vMkX/DmdmmBgqOgLXroFJ48qs2tIW/cSF2E7gfvwm73hk8KUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkWXNdKE95k/fs1EzZfJWQsuFJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvYTMzYTU2YjYtZTI2NS0z NGE1LWJmNDgtNDgwMjVhNDBkZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9eWeKbkXvFZXkQ7Nsl17xHtycl/3i88dAA/S5MASvRErKnW+zVtSjN tUx49KRZoRNY75RH4apq2M/dWSdPXkCcuYVxcBazDtFPJFZaj8WeNYGAlrA71QQG uqvUj3DQT/yhSOVwkpnIF2d1bB0VJ9pu/2HftMACz7/V8F9PJzvtu1o2GkI2dd76 NZDcv92Xg/dXe3u3yK/KQanEjpxnzDcDnXnt8Ig52/E19HV7C8WkK+4r2783YTxf 4MkwBaS/s+cnp0ExbqQS/wxgBeLz05nrgmpT802BYXcjYJfTnhKgtvvw2A5gjunR D8U2kRgYGlLuGrl8m4tjmSfZHkhTbzs= -----END CERTIFICATE-----Generated at Thu Nov 6 05:51:59 2025 by rpki-client