$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa File: 3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa (raw, json) Hash identifier: oHYJtKpZ0qtJ33lP3KBOi4LmlNKr/jcoRzrraWN3bfg= Subject key identifier: 53:43:E2:23:31:6F:35:6B:F7:DA:B0:4E:6C:00:0F:2A:8F:FF:7C:46 Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 77264D84ACD8DCB0879BFA222B08827F18684C02 Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa Signing time: Fri 10 Oct 2025 08:05:07 +0000 ROA not before: Fri 10 Oct 2025 08:00:07 +0000 ROA not after: Fri 09 Oct 2026 08:05:07 +0000 asID: 209109 IP address blocks: 142.249.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:26:4d:84:ac:d8:dc:b0:87:9b:fa:22:2b:08:82:7f:18:68:4c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Oct 10 08:00:07 2025 GMT Not After : Oct 9 08:05:07 2026 GMT Subject: CN=5343E223316F356BF7DAB04E6C000F2A8FFF7C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:e3:ed:70:6d:70:15:49:b6:94:a0:9f:c8: c0:9b:87:a3:2f:8f:b5:da:39:ea:06:ff:f6:ca:83: 43:ac:0a:47:c1:5e:3c:2e:54:2b:ec:54:f5:e0:b1: 49:7f:0b:9b:fc:07:47:e3:69:86:a8:6e:0e:d7:a7: 98:d4:65:05:7a:5f:e8:ff:ca:d4:16:34:a8:1d:c9: 08:f3:63:55:60:0b:00:29:9a:16:10:55:38:0e:64: 58:9a:87:5f:f0:be:55:da:d0:c2:d4:19:65:22:f6: b9:99:3b:2f:3e:72:a3:cd:71:db:fc:63:31:8f:89: 88:a0:c1:e5:d8:74:d1:bd:3d:ac:0b:ad:c7:46:32: 81:c4:10:bb:4b:59:b6:b9:fc:5b:06:f0:9b:23:12: 59:4f:07:a7:2b:bb:ea:90:28:a2:7c:9b:38:76:ff: 1b:c7:57:e7:56:7b:98:b3:ee:e8:57:ee:91:7c:81: 09:f8:e5:f9:2e:fa:4d:c0:a6:00:3a:96:ee:6e:9b: 4e:a4:4d:ea:d9:26:4a:80:0b:70:f3:5e:08:ff:e2: b1:51:96:f6:dc:8f:bc:e2:7a:c8:12:7f:24:4d:0f: 09:45:bf:22:70:7e:47:e8:e7:7a:99:7d:5d:f7:3b: b2:2a:c3:65:9e:32:60:da:87:99:ce:96:c3:cd:00: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:E2:23:31:6F:35:6B:F7:DA:B0:4E:6C:00:0F:2A:8F:FF:7C:46 X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:4f:d1:0b:06:05:42:b9:ca:78:c9:e4:eb:fe:b7:f4:10:b1: 7b:2a:94:f0:14:63:91:f4:80:b3:69:59:43:39:d2:98:60:3c: 9f:e3:05:20:bb:e6:8f:13:9f:16:1b:fe:76:4a:db:1e:9b:f6: 5a:1d:cd:7b:92:0b:75:21:25:72:9e:16:71:d0:95:db:a6:93: 63:14:98:40:95:30:64:3e:1a:5a:5d:0f:ee:2f:ae:d3:aa:57: 5c:61:4b:02:95:8a:8d:ef:36:96:1f:65:74:d3:c6:97:6d:32: 19:9c:c2:b0:3a:cf:38:f5:2a:3a:08:16:5f:d4:af:62:65:21: b2:be:e5:71:f5:a4:03:87:bb:aa:07:f4:c4:7b:24:d6:d3:8c: 47:ab:67:e5:04:d8:00:f3:7d:0e:82:4b:8c:dc:53:6e:44:49: 85:4a:03:52:fa:f3:2b:3c:58:63:6a:63:c2:2d:b9:6b:c4:93: a0:b9:0e:7e:61:6e:65:62:4c:1b:2d:f1:59:f1:7e:a3:76:0b: 6c:a8:6e:7f:6e:c4:1c:f9:ba:62:f6:4c:61:5d:82:36:bc:3b: e0:15:29:75:96:87:82:3c:51:e1:41:b1:19:28:98:34:1e:50: df:93:97:42:82:cb:4a:b7:08:46:ba:0b:fb:e3:9a:9f:cb:c5: e9:d1:9b:70 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUdyZNhKzY3LCHm/oiKwiCfxhoTAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDEwMDgwMDA3WhcNMjYxMDA5MDgwNTA3 WjAzMTEwLwYDVQQDEyg1MzQzRTIyMzMxNkYzNTZCRjdEQUIwNEU2QzAwMEYyQThG RkY3QzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhjj7XBtcBVJ tpSgn8jAm4ejL4+12jnqBv/2yoNDrApHwV48LlQr7FT14LFJfwub/AdH42mGqG4O 16eY1GUFel/o/8rUFjSoHckI82NVYAsAKZoWEFU4DmRYmodf8L5V2tDC1BllIva5 mTsvPnKjzXHb/GMxj4mIoMHl2HTRvT2sC63HRjKBxBC7S1m2ufxbBvCbIxJZTwen K7vqkCiifJs4dv8bx1fnVnuYs+7oV+6RfIEJ+OX5LvpNwKYAOpbubptOpE3q2SZK gAtw814I/+KxUZb23I+84nrIEn8kTQ8JRb8icH5H6Od6mX1d9zuyKsNlnjJg2oeZ zpbDzQBpywIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFND4iMxbzVr99qwTmwADyqP /3xGMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzIyZTMwMmYzMjMyMmQz MjMyMjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKO+XAwDQYJKoZIhvcN AQELBQADggEBAG1P0QsGBUK5ynjJ5Ov+t/QQsXsqlPAUY5H0gLNpWUM50phgPJ/j BSC75o8TnxYb/nZK2x6b9lodzXuSC3UhJXKeFnHQldumk2MUmECVMGQ+GlpdD+4v rtOqV1xhSwKVio3vNpYfZXTTxpdtMhmcwrA6zzj1KjoIFl/Ur2JlIbK+5XH1pAOH u6oH9MR7JNbTjEerZ+UE2ADzfQ6CS4zcU25ESYVKA1L68ys8WGNqY8ItuWvEk6C5 Dn5hbmViTBst8VnxfqN2C2yobn9uxBz5umL2TGFdgja8O+AVKXWWh4I8UeFBsRko mDQeUN+Tl0KCy0q3CEa6C/vjmp/LxenRm3A= -----END CERTIFICATE-----Generated at Mon Oct 20 20:49:16 2025 by rpki-client