$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa File: b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa (raw, json) Hash identifier: AktTcTe40wa4p1Rlc6xsBSNcb43T3JhKx/4/ednwte4= Subject key identifier: 42:7E:DD:40:A0:F1:EB:23:2E:DA:4E:0A:0F:48:5A:CA:49:BB:38:C4 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584B95A7962C2F99931075C2ED80 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 53658 IP address blocks: 142.0.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:96:2c:2f:99:93:10:75:c2:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=70ba4e7e-8c2b-4fd7-a05d-969598dcd646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:aa:ea:a7:69:24:2b:02:79:a3:2d:43:a5: 06:8a:99:d8:c2:03:33:13:67:53:c6:58:92:80:b7: c6:7c:dd:6d:d4:e6:bd:02:2c:61:40:17:62:f8:63: f6:7e:7d:53:d4:d7:30:5c:a0:59:d5:9b:4f:34:c5: 59:d0:5f:1a:04:9c:15:13:f2:fe:e0:46:99:dc:85: d4:52:a9:cd:ea:46:d3:85:65:36:d1:57:b5:0a:4a: e2:b4:9d:1b:0e:48:aa:0c:56:d4:1e:48:ab:ac:5e: 00:06:5e:e1:5d:ac:c4:b4:bc:d1:34:3a:06:65:83: a4:63:bb:44:82:60:4f:00:fe:59:39:a7:d8:f3:7c: 6e:e4:d4:1b:0a:d4:27:2b:3f:0b:11:5d:b7:8a:28: 1a:f2:bf:a3:7c:47:3d:21:10:fb:05:b4:e0:c4:72: c5:d4:3e:a5:30:de:eb:6e:eb:e0:6b:e2:35:6f:f0: 0c:8f:6b:be:09:7a:ee:37:06:a9:4c:5a:bf:06:06: 99:cd:40:52:14:18:ab:ff:96:5a:05:fe:83:13:70: 45:95:50:08:a9:0b:85:31:89:56:04:71:70:cd:65: dc:a2:11:6d:94:bd:f5:b7:93:43:32:0f:c8:e7:2e: 02:b3:5d:ca:61:aa:94:e7:99:29:a2:29:1a:82:d3: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7E:DD:40:A0:F1:EB:23:2E:DA:4E:0A:0F:48:5A:CA:49:BB:38:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:36:58:47:31:5a:1a:9a:88:20:63:59:88:76:d2:b5:4e:af: 1d:6d:87:ec:d1:11:4e:11:f5:83:8a:a3:fe:3c:71:f2:30:b8: 85:94:99:c6:b9:63:ec:df:1b:1b:26:55:84:80:06:cf:59:37: 37:11:ce:75:bd:74:58:7f:a1:78:c3:71:8a:62:b0:2c:e0:da: 98:a4:50:5d:fa:8b:87:39:cb:8d:73:7a:1d:8d:dc:53:e1:58: b7:3f:e3:06:54:60:e8:d4:f3:6d:ea:5b:b7:b2:48:5a:52:dc: ec:a0:43:45:4c:37:79:e9:eb:66:13:8a:6b:37:55:68:5b:18: c9:b0:df:63:a6:b2:a0:b1:1c:17:66:f7:63:46:ff:2a:83:2b: dc:aa:1b:0e:3d:41:3d:46:f2:22:c4:e4:a0:5c:ac:92:ca:8c: 14:a1:39:0b:21:6e:a4:be:93:10:b1:ec:d4:14:9e:b3:1a:c5: 50:34:f2:af:92:0b:a6:e0:22:62:23:0b:18:48:c5:c6:88:62: de:a5:39:6e:27:84:8e:4d:48:0a:2d:29:e4:bd:50:bd:3e:c0: 27:2a:02:96:0b:1a:0f:9f:91:d5:e8:d7:7e:26:cf:d0:e2:a9: 30:af:93:c4:8e:84:94:0b:1a:ae:b1:b4:65:29:db:f0:b3:18: c1:12:ca:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5YsL5mTEHXC7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzBiYTRlN2UtOGMyYi00ZmQ3LWEwNWQtOTY5NTk4ZGNkNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0eq6qdpJCsCeaMtQ6UGipnYwgMzE2dTxliS gLfGfN1t1Oa9AixhQBdi+GP2fn1T1NcwXKBZ1ZtPNMVZ0F8aBJwVE/L+4EaZ3IXU UqnN6kbThWU20Ve1CkritJ0bDkiqDFbUHkirrF4ABl7hXazEtLzRNDoGZYOkY7tE gmBPAP5ZOafY83xu5NQbCtQnKz8LEV23iiga8r+jfEc9IRD7BbTgxHLF1D6lMN7r buvga+I1b/AMj2u+CXruNwapTFq/BgaZzUBSFBir/5ZaBf6DE3BFlVAIqQuFMYlW BHFwzWXcohFtlL31t5NDMg/I5y4Cs13KYaqU55kpoikagtN03wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ+3UCg8esjLtpOCg9IWspJuzjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYjVhZjUzYzUtYTFjNC0z ZGE4LTk5YzUtZjU1ODJhZDBmZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo2WEcxWhqaiCBjWYh20rVOrx1th+zREU4R9YOKo/48cfIwuIWUmca5 Y+zfGxsmVYSABs9ZNzcRznW9dFh/oXjDcYpisCzg2pikUF36i4c5y41zeh2N3FPh WLc/4wZUYOjU823qW7eySFpS3OygQ0VMN3np62YTims3VWhbGMmw32OmsqCxHBdm 92NG/yqDK9yqGw49QT1G8iLE5KBcrJLKjBShOQshbqS+kxCx7NQUnrMaxVA08q+S C6bgImIjCxhIxcaIYt6lOW4nhI5NSAotKeS9UL0+wCcqApYLGg+fkdXo134mz9Di qTCvk8SOhJQLGq6xtGUp2/CzGMESyuU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:29 2025 by rpki-client