$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa File: 666ce706-f266-3fa9-aabf-cb8681729e63.roa (raw, json) Hash identifier: SUNIh0V4tsRAud7c5hxyeWSzr8t3hYUUS9/wujtjS84= Subject key identifier: B8:E3:B8:66:7B:C4:96:B8:34:01:7C:F2:E5:78:AC:D2:08:61:E8:80 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584B95A7940797020FD999966B80 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 142.0.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:94:07:97:02:0f:d9:99:96:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5cebe3ee-6fe0-48bc-8490-0d37a01808fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:92:9c:80:51:b5:6b:39:9a:90:9b:d1:10: cf:05:f5:90:d6:db:66:bd:8b:7b:30:00:e4:ae:70: 7c:8a:65:b4:5d:75:72:10:0a:b6:5a:73:17:39:96: 1f:02:44:7b:81:b1:15:4a:72:41:02:63:fe:3d:3b: a2:ef:85:96:52:ac:40:2e:c1:72:60:8b:27:e8:2d: 41:f2:6d:46:34:c3:b9:ed:bb:91:9d:f3:66:57:32: 1f:1f:0d:0f:c1:24:ff:76:45:5f:1b:20:df:ba:23: 2c:8e:9f:10:19:b5:a4:31:eb:5a:c8:1e:82:31:6e: d1:c9:dd:dc:91:23:03:7e:dd:09:1c:dc:9c:20:bd: 96:c3:4c:52:28:e5:2c:2c:e9:9f:4e:7c:2c:3c:d8: 90:49:73:ae:31:ef:ea:cb:a8:f4:2f:3d:50:ee:c8: 34:93:1e:38:ae:0d:6a:f4:b5:0b:0d:96:b9:0d:22: b3:62:92:a5:ba:7f:c0:08:92:d0:8a:de:a6:18:64: 45:b6:34:51:91:43:de:f8:d0:35:31:07:b5:de:7d: 7a:c5:81:56:a6:9b:9e:46:96:ef:0f:e0:0a:55:00: 62:8e:3b:70:d0:a8:07:e6:7e:3f:4a:2d:f1:1c:22: 5a:93:35:5e:64:c1:aa:a6:34:f5:08:95:54:b3:68: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:B8:66:7B:C4:96:B8:34:01:7C:F2:E5:78:AC:D2:08:61:E8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d7:9b:e7:9c:4f:75:ad:3c:7f:33:88:15:b7:a8:43:b5:d3: b0:9b:18:30:cc:00:05:07:82:05:70:be:fd:6f:cd:a7:ba:d3: 62:71:34:9f:c9:f9:4a:bd:c2:76:b0:3c:31:36:df:28:15:d6: f0:ee:77:cc:cf:a1:3a:6f:0b:5a:6c:01:fe:35:2c:c5:88:e4: 99:77:a1:8a:02:47:4c:27:c7:0b:a6:83:5c:f1:2f:26:9b:89: 54:38:9d:54:43:44:bd:0a:2b:20:cb:d5:25:2c:f8:5f:fc:f0: 6a:fa:e8:f1:15:20:38:df:29:34:2d:be:1b:e3:4f:16:d4:22: 69:97:12:70:99:fe:9f:a2:59:e4:1c:a5:94:73:f7:90:a7:d5: 37:7d:d2:29:7b:59:80:67:01:00:b1:44:20:b9:a7:78:07:0a: 5c:c0:3f:7c:7e:90:36:08:cd:fb:57:0b:b1:da:9d:01:fd:bc: 54:f8:1b:df:75:7b:4c:7d:68:e6:18:9b:c1:fb:38:f8:2c:fb: 4b:d5:64:63:a5:6f:bd:ee:66:94:ef:af:3c:2a:ab:e7:df:cf: da:61:93:fa:8c:e3:cd:16:72:1b:2a:a1:df:2a:31:94:8b:c1: 75:3d:3e:f7:25:79:58:be:26:56:43:8a:4c:cc:ce:33:45:83: cf:9a:24:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5QHlwIP2ZmWa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWNlYmUzZWUtNmZlMC00OGJjLTg0OTAtMGQzN2EwMTgwOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoCSnIBRtWs5mpCb0RDPBfWQ1ttmvYt7MADk rnB8imW0XXVyEAq2WnMXOZYfAkR7gbEVSnJBAmP+PTui74WWUqxALsFyYIsn6C1B 8m1GNMO57buRnfNmVzIfHw0PwST/dkVfGyDfuiMsjp8QGbWkMetayB6CMW7Ryd3c kSMDft0JHNycIL2Ww0xSKOUsLOmfTnwsPNiQSXOuMe/qy6j0Lz1Q7sg0kx44rg1q 9LULDZa5DSKzYpKlun/ACJLQit6mGGRFtjRRkUPe+NA1MQe13n16xYFWppueRpbv D+AKVQBijjtw0KgH5n4/Si3xHCJakzVeZMGqpjT1CJVUs2icgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjjuGZ7xJa4NAF88uV4rNIIYeiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvNjY2Y2U3MDYtZjI2Ni0z ZmE5LWFhYmYtY2I4NjgxNzI5ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrXm+ecT3WtPH8ziBW3qEO107CbGDDMAAUHggVwvv1vzae602JxNJ/J +Uq9wnawPDE23ygV1vDud8zPoTpvC1psAf41LMWI5Jl3oYoCR0wnxwumg1zxLyab iVQ4nVRDRL0KKyDL1SUs+F/88Gr66PEVIDjfKTQtvhvjTxbUImmXEnCZ/p+iWeQc pZRz95Cn1Td90il7WYBnAQCxRCC5p3gHClzAP3x+kDYIzftXC7HanQH9vFT4G991 e0x9aOYYm8H7OPgs+0vVZGOlb73uZpTvrzwqq+ffz9phk/qM480Wchsqod8qMZSL wXU9PvcleVi+JlZDikzMzjNFg8+aJIk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:34 2025 by rpki-client