$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa File: 04b2404f-71b7-3876-8428-f27437f41261.roa (raw, json) Hash identifier: gbpscjcbLIm3iywXVeNwoABYEfnQGzFQhIymhggQpKc= Subject key identifier: A2:37:08:3C:44:C7:80:58:7D:31:11:29:9F:6D:84:FF:A9:AB:A6:6C Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584AF9513E2C39ED8F350893B540 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 8075 IP address blocks: 142.0.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3e:2c:39:ed:8f:35:08:93:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5dd980d5-7400-4b16-b39d-41f6876e090b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:98:f9:0c:0e:65:f0:cf:01:38:46:1f:9d: d2:08:b3:69:99:91:e0:ea:7c:17:1c:8b:ea:f0:46: 3d:09:80:fb:8c:54:59:aa:36:24:03:e7:2f:21:e1: 71:fe:9d:37:38:d7:96:90:b5:cf:62:c0:a0:45:84: 55:12:0a:00:19:4b:06:3f:5a:6c:03:66:a9:f2:e6: d2:65:20:3e:ac:d1:17:26:1d:ac:ab:0c:5d:77:a7: 02:aa:24:88:f8:a7:53:60:15:6a:d0:2c:80:e1:33: 82:87:5d:70:e8:bd:09:31:36:52:02:2f:ad:be:18: bf:2a:dc:9f:e1:9b:36:8b:39:ff:4d:60:9b:9d:4f: 41:a3:7f:2f:19:a4:35:28:fb:a5:cc:bb:88:bb:b6: 0f:61:66:00:e0:df:8d:c4:fe:ba:66:d5:0f:82:94: b6:e8:d4:69:1a:45:21:06:d4:f7:8b:18:40:61:e6: e8:99:e6:ee:23:43:c2:3b:65:14:b7:e3:d6:31:8c: cb:7e:6d:c5:e4:cc:8e:82:fd:7e:0a:50:1e:ec:75: 9e:0f:76:f8:14:0f:76:0d:bb:de:c4:31:47:35:88: 76:26:69:6c:71:cf:ee:95:7d:9c:a5:19:70:48:32: 87:ca:8a:95:9c:f6:f0:fc:36:ff:e2:f6:88:3a:5c: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:37:08:3C:44:C7:80:58:7D:31:11:29:9F:6D:84:FF:A9:AB:A6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/04b2404f-71b7-3876-8428-f27437f41261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d8:20:df:a6:4e:39:ef:a8:97:33:19:2c:ff:c4:93:b4:b9: 34:a3:fd:f8:a9:1e:5a:fe:69:11:08:a6:e9:94:31:02:41:3e: c0:6b:e8:ea:09:32:c8:f2:90:98:9e:2f:b9:45:7f:02:a6:22: d2:27:82:5e:1d:1c:37:30:23:63:5c:12:26:ae:dc:a4:e2:10: 04:63:73:d6:a4:63:d3:ef:d9:f0:fb:d9:0e:aa:b0:67:3e:08: 81:be:fa:c3:ac:93:67:ab:dd:b5:38:6c:4d:29:bd:c7:97:bc: 4b:5b:b5:16:d8:e2:8d:c5:36:a3:cd:b5:21:3c:47:fe:be:dd: 82:6b:74:f8:3d:eb:c0:f4:c5:05:89:17:9e:6c:e4:e9:7c:9a: f2:a8:b9:7e:3d:e2:ec:37:05:dc:45:11:7b:14:42:00:8b:6e: 03:57:13:36:34:eb:9b:99:72:9a:69:aa:0a:f7:58:b6:3a:1b: 54:6d:44:f2:03:5f:d9:9d:ed:df:27:02:48:1d:cd:9a:52:cb: 01:d5:6a:8b:3f:f6:bc:da:9f:b4:25:bb:d8:f0:1c:44:2f:16: ab:eb:ca:e7:18:e4:64:a9:2c:43:d7:8f:40:17:f6:0c:11:b3: 04:35:c9:ca:a9:8c:7c:16:24:ce:f4:3d:d2:ed:a1:fb:36:33: 64:97:62:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UT4sOe2PNQiTtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWRkOTgwZDUtNzQwMC00YjE2LWIzOWQtNDFmNjg3NmUwOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6OY+QwOZfDPAThGH53SCLNpmZHg6nwXHIvq 8EY9CYD7jFRZqjYkA+cvIeFx/p03ONeWkLXPYsCgRYRVEgoAGUsGP1psA2ap8ubS ZSA+rNEXJh2sqwxdd6cCqiSI+KdTYBVq0CyA4TOCh11w6L0JMTZSAi+tvhi/Ktyf 4Zs2izn/TWCbnU9Bo38vGaQ1KPulzLuIu7YPYWYA4N+NxP66ZtUPgpS26NRpGkUh BtT3ixhAYebomebuI0PCO2UUt+PWMYzLfm3F5MyOgv1+ClAe7HWeD3b4FA92Dbve xDFHNYh2Jmlscc/ulX2cpRlwSDKHyoqVnPbw/Db/4vaIOly72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI3CDxEx4BYfTERKZ9thP+pq6ZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvMDRiMjQwNGYtNzFiNy0z ODc2LTg0MjgtZjI3NDM3ZjQxMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/YIN+mTjnvqJczGSz/xJO0uTSj/fipHlr+aREIpumUMQJBPsBr6OoJ MsjykJieL7lFfwKmItIngl4dHDcwI2NcEiau3KTiEARjc9akY9Pv2fD72Q6qsGc+ CIG++sOsk2er3bU4bE0pvceXvEtbtRbY4o3FNqPNtSE8R/6+3YJrdPg968D0xQWJ F55s5Ol8mvKouX494uw3BdxFEXsUQgCLbgNXEzY065uZcpppqgr3WLY6G1RtRPID X9md7d8nAkgdzZpSywHVaos/9rzan7Qlu9jwHEQvFqvryucY5GSpLEPXj0AX9gwR swQ1ycqpjHwWJM70PdLtofs2M2SXYtA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:48 2025 by rpki-client