$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa File: 6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa (raw, json) Hash identifier: yOFuMhv50FC9cnQ94wcJ3vmvwanjRoY4AaM7n8ni5Yo= Subject key identifier: FC:11:BA:D1:D4:6E:84:83:CF:91:11:9C:3E:9B:35:ED:8E:9D:B9:2E Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Certificate serial: 010D0C9F4328584BA39D1BB19D352F33B52E0730 Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 21659 IP address blocks: 142.202.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:b1:9d:35:2f:33:b5:2e:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8cd8686c-fab2-4803-b578-923f0b70cbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:ae:51:13:b9:4d:3e:16:c4:3a:f5:73:4d: b2:e5:5a:83:fc:a1:af:98:64:b8:8c:ae:dd:75:c3: cb:d5:4a:77:1b:cb:09:66:33:db:82:c9:fb:17:46: ce:3d:db:25:0b:be:b4:c1:6f:e2:97:1d:68:d3:a7: 44:6b:7c:76:e9:30:44:e8:c3:62:70:8a:4e:3d:48: 46:20:1b:ce:1b:14:f3:74:a0:5c:34:28:c1:35:61: 2f:f4:8d:b3:65:a8:81:0b:40:e5:6d:f0:b8:91:ae: 59:14:c5:7c:94:5f:97:ae:79:00:f4:8f:60:97:61: 3f:78:fb:09:bc:fc:c7:83:e6:96:0f:ff:f1:83:54: 22:9d:02:be:1c:db:25:32:98:3e:a2:98:6f:fa:74: 63:d8:fd:eb:ab:14:23:b4:59:c2:6a:11:99:7b:b0: b4:05:05:7b:b0:17:0e:bb:69:31:a7:bf:97:c3:5a: 2e:e1:94:95:54:35:8b:2e:09:54:4a:c1:36:1c:9a: b3:ff:cb:49:09:65:fe:4f:50:2b:cc:ba:9d:9a:95: 0b:9d:6c:95:c5:cc:ff:62:1b:28:5e:7f:b1:d9:89: b8:1f:96:79:8d:b1:17:76:0f:e1:85:01:cc:e1:20: 81:6f:fe:99:36:e8:5a:6c:65:ab:72:3c:d9:c1:63: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:11:BA:D1:D4:6E:84:83:CF:91:11:9C:3E:9B:35:ED:8E:9D:B9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6f1eb18c-4f7d-3b81-b606-c7f1d16afb07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl X509v3 Authority Key Identifier: keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer sbgp-ipAddrBlock: critical IPv4: 142.202.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7d:66:03:76:ee:6b:4c:96:cc:9d:2a:53:13:25:b7:90:84: 46:8d:07:e3:d2:fc:2d:d3:e5:c4:d4:09:d4:38:04:34:77:e8: 82:05:d7:df:da:c9:d7:69:a3:f5:f3:78:4c:5d:eb:52:da:e5: 82:94:7b:77:15:1f:21:bf:48:7b:55:ba:4f:89:f0:76:9b:d7: b7:29:08:d9:a4:c9:d2:00:aa:de:2c:24:61:ec:23:38:62:4a: 97:28:32:36:e2:65:43:36:80:44:0d:5e:e7:2e:f7:44:e1:cc: 88:ff:41:5e:77:3f:c0:a3:af:20:eb:03:45:60:ea:1f:64:d6: f4:60:39:d3:ba:b2:b0:0d:11:a7:43:0b:75:db:8d:9e:af:c2: 17:05:e1:be:e4:46:3c:bc:2e:ed:ff:40:a7:c3:cd:41:61:1e: 75:d6:0a:cc:50:9b:b4:26:1c:27:62:76:eb:aa:63:8a:1e:24: 50:5e:98:62:3b:02:df:ec:05:ff:e9:73:46:91:b3:35:5a:6b: f8:b8:78:8a:39:ef:64:27:1e:82:b9:53:47:2c:1c:70:f9:39: 33:4a:4e:36:10:77:95:c1:bb:4b:40:a1:64:24:f8:88:2b:0b: 75:f7:4b:26:ef:73:8d:12:06:f5:5a:5b:d5:62:f4:4c:3c:1c: 75:d5:52:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRuxnTUvM7UuBzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4Mzlk ZGI0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGNkODY4NmMtZmFiMi00ODAzLWI1NzgtOTIzZjBiNzBjYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+uURO5TT4WxDr1c02y5VqD/KGvmGS4jK7d dcPL1Up3G8sJZjPbgsn7F0bOPdslC760wW/ilx1o06dEa3x26TBE6MNicIpOPUhG IBvOGxTzdKBcNCjBNWEv9I2zZaiBC0DlbfC4ka5ZFMV8lF+XrnkA9I9gl2E/ePsJ vPzHg+aWD//xg1QinQK+HNslMpg+ophv+nRj2P3rqxQjtFnCahGZe7C0BQV7sBcO u2kxp7+Xw1ou4ZSVVDWLLglUSsE2HJqz/8tJCWX+T1ArzLqdmpULnWyVxcz/Yhso Xn+x2Ym4H5Z5jbEXdg/hhQHM4SCBb/6ZNuhabGWrcjzZwWPVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwRutHUboSDz5ERnD6bNe2OnbkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMzVi ZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvNmYxZWIxOGMtNGY3ZC0z YjgxLWI2MDYtYzdmMWQxNmFmYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1 OWUtMjdkYTU4MzlkZGI0L2YzNWJlNWYwLWQ0NTItNGNkOC04NTllLTI3ZGE1ODM5 ZGRiNC5jcmwwHwYDVR0jBBgwFoAUFtOG+Xk7XQ2c/Q/ztW8EbY13WNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2Rh NTgzOWRkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh9ZgN27mtMlsydKlMTJbeQhEaNB+PS/C3T5cTUCdQ4BDR36IIF19/a yddpo/XzeExd61La5YKUe3cVHyG/SHtVuk+J8Hab17cpCNmkydIAqt4sJGHsIzhi SpcoMjbiZUM2gEQNXucu90ThzIj/QV53P8CjryDrA0Vg6h9k1vRgOdO6srANEadD C3XbjZ6vwhcF4b7kRjy8Lu3/QKfDzUFhHnXWCsxQm7QmHCdiduuqY4oeJFBemGI7 At/sBf/pc0aRszVaa/i4eIo572QnHoK5U0csHHD5OTNKTjYQd5XBu0tAoWQk+Igr C3X3Sybvc40SBvVaW9Vi9Ew8HHXVUq8= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:54 2025 by rpki-client