$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa File: 3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa (raw, json) Hash identifier: ajzezJTZhBoqCCPirBzjR56HNEXnXTQ/0k3wVAZKLV4= Subject key identifier: C5:B9:FF:CC:1A:E1:55:95:D0:C5:84:9F:77:FA:72:05:BE:10:F6:0D Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 3590B0C533747B021080D40E4C04CC4D445CFBC4 Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa Signing time: Fri 10 Oct 2025 08:15:56 +0000 ROA not before: Fri 10 Oct 2025 08:10:56 +0000 ROA not after: Fri 09 Oct 2026 08:15:56 +0000 asID: 209109 IP address blocks: 142.249.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:90:b0:c5:33:74:7b:02:10:80:d4:0e:4c:04:cc:4d:44:5c:fb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Oct 10 08:10:56 2025 GMT Not After : Oct 9 08:15:56 2026 GMT Subject: CN=C5B9FFCC1AE15595D0C5849F77FA7205BE10F60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:44:4a:88:43:cb:76:ab:92:4c:2a:0a:4c: 0a:b3:40:99:8a:6a:45:4d:80:50:39:ed:33:c3:3e: c0:63:3d:c2:cf:2f:c9:aa:4f:f6:72:e3:f4:1c:d6: bf:59:a3:e2:7b:c7:99:97:c3:34:03:3d:50:08:e6: bd:f5:42:29:18:bc:9b:b5:dc:0c:b2:fc:39:52:5d: 40:fe:70:41:d3:34:27:21:88:69:6a:07:bf:23:4a: fd:8b:24:9c:bc:8c:64:1f:9c:8e:ca:e2:49:bf:de: 46:da:db:81:fe:3f:6e:00:9d:03:7a:00:03:f7:63: 22:bd:2e:f1:8a:c9:29:d0:f6:bf:54:88:d6:a7:50: 19:d9:c6:be:1c:88:e9:cf:a2:b3:e4:9b:32:e4:b2: 30:06:43:47:6d:54:05:88:78:55:41:6a:1c:d2:bb: c0:17:c7:d5:69:7e:34:ac:70:79:4a:03:2f:d5:36: 58:46:e8:23:05:58:52:3c:e0:92:e5:8f:ac:80:ac: 7b:95:0f:52:ac:d4:83:69:77:a0:2c:ee:64:c6:d8: 20:5f:e6:98:95:80:e8:cd:f0:36:b1:02:80:6b:fe: f6:34:7d:01:4a:77:a5:6c:3a:69:39:d1:be:e0:64: 0b:86:28:78:f9:47:34:39:ea:5f:bc:bb:e7:a0:42: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B9:FF:CC:1A:E1:55:95:D0:C5:84:9F:77:FA:72:05:BE:10:F6:0D X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.112.0/24 Signature Algorithm: sha256WithRSAEncryption 73:19:e6:ca:02:ec:62:24:02:bb:98:50:6d:4b:71:b1:53:14: 90:cd:46:28:ae:1f:08:b7:3b:c1:21:25:20:a8:84:15:a4:7d: 51:13:20:79:fa:1f:52:4b:7d:7e:5a:64:90:5e:e7:3e:f7:b4: b9:98:ae:e3:ae:a4:d8:60:1e:f9:f5:ff:e7:2a:65:78:a2:b6: e0:8c:e8:d4:1f:b2:69:90:63:57:80:98:74:cd:c4:5d:b6:91: f5:9e:0d:ab:c4:c1:da:58:38:f2:aa:4d:49:5d:64:ad:d8:e2: 80:3b:27:e6:3b:7a:7a:5a:dd:a8:40:fe:44:16:76:43:bf:9d: 64:ba:6d:f2:ae:6b:27:b3:05:d7:28:57:17:d4:87:55:a3:ec: b9:f8:30:fe:c5:89:09:d2:01:85:2f:2b:19:db:91:75:b1:58: a2:97:21:2b:73:4c:41:85:fa:6e:34:d3:16:57:5a:2f:d8:62: 9a:d5:f7:ba:34:f6:98:0b:c2:58:9b:26:c5:c4:47:e4:ca:fd: 9c:a5:e4:d0:17:58:17:bd:70:ee:69:c2:18:36:16:7f:77:46: ff:7f:27:da:fc:e3:26:00:1e:98:91:f6:a7:6e:01:ce:80:49: 29:20:00:1f:12:03:43:37:52:6c:d6:91:a7:37:cf:fe:4a:5e: d6:10:5c:06 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUNZCwxTN0ewIQgNQOTATMTURc+8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDEwMDgxMDU2WhcNMjYxMDA5MDgxNTU2 WjAzMTEwLwYDVQQDEyhDNUI5RkZDQzFBRTE1NTk1RDBDNTg0OUY3N0ZBNzIwNUJF MTBGNjBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKtESohDy3ar kkwqCkwKs0CZimpFTYBQOe0zwz7AYz3Czy/Jqk/2cuP0HNa/WaPie8eZl8M0Az1Q COa99UIpGLybtdwMsvw5Ul1A/nBB0zQnIYhpage/I0r9iyScvIxkH5yOyuJJv95G 2tuB/j9uAJ0DegAD92MivS7xiskp0Pa/VIjWp1AZ2ca+HIjpz6Kz5Jsy5LIwBkNH bVQFiHhVQWoc0rvAF8fVaX40rHB5SgMv1TZYRugjBVhSPOCS5Y+sgKx7lQ9SrNSD aXegLO5kxtggX+aYlYDozfA2sQKAa/72NH0BSnelbDppOdG+4GQLhih4+Uc0Oepf vLvnoEIczQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMW5/8wa4VWV0MWEn3f6cgW+ EPYNMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzIyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACO+XAwDQYJKoZIhvcN AQELBQADggEBAHMZ5soC7GIkAruYUG1LcbFTFJDNRiiuHwi3O8EhJSCohBWkfVET IHn6H1JLfX5aZJBe5z73tLmYruOupNhgHvn1/+cqZXiituCM6NQfsmmQY1eAmHTN xF22kfWeDavEwdpYOPKqTUldZK3Y4oA7J+Y7enpa3ahA/kQWdkO/nWS6bfKuayez BdcoVxfUh1Wj7Ln4MP7FiQnSAYUvKxnbkXWxWKKXIStzTEGF+m400xZXWi/YYprV 97o09pgLwlibJsXER+TK/Zyl5NAXWBe9cO5pwhg2Fn93Rv9/J9r84yYAHpiR9qdu Ac6ASSkgAB8SA0M3UmzWkac3z/5KXtYQXAY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:31:24 2025 by rpki-client