$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131332e302f32342d3234203d3e20323039313039.roa File: 3134322e3234392e3131332e302f32342d3234203d3e20323039313039.roa (raw, json) Hash identifier: FXuqvaxIDacN6e0SMOR2Cjra+MqFgsNLfdZNNqGraVY= Subject key identifier: 66:C4:7F:52:B8:F0:39:F5:6F:AA:EC:F1:77:F5:AC:C5:C8:EE:C0:12 Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 29CBEE38403ED57AC593F08EAE0AE65FAB89410E Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131332e302f32342d3234203d3e20323039313039.roa Signing time: Fri 10 Oct 2025 08:16:30 +0000 ROA not before: Fri 10 Oct 2025 08:11:30 +0000 ROA not after: Fri 09 Oct 2026 08:16:30 +0000 asID: 209109 IP address blocks: 142.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:ee:38:40:3e:d5:7a:c5:93:f0:8e:ae:0a:e6:5f:ab:89:41:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Oct 10 08:11:30 2025 GMT Not After : Oct 9 08:16:30 2026 GMT Subject: CN=66C47F52B8F039F56FAAECF177F5ACC5C8EEC012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:3e:b8:f0:8c:ba:c2:21:40:5c:60:2e:8a: cb:17:30:ab:5a:0f:b7:e9:88:e4:3b:46:c1:e4:eb: e9:92:4a:26:ad:2a:29:d6:be:00:30:f3:d2:27:07: 61:af:6c:93:12:77:2d:2c:78:a5:da:ae:e6:6b:e6: c6:d4:73:8c:be:7d:93:89:3a:17:09:6f:9c:e1:f8: 02:73:2c:92:6b:94:f5:46:ed:b8:6e:08:66:6a:43: 08:49:49:a6:bf:7e:0c:1c:97:42:7f:3d:04:26:12: 72:7d:d9:9f:1a:15:28:ac:d4:b8:4c:d1:2c:71:37: b4:75:2d:6c:fc:3b:d7:cb:a6:55:30:bc:2e:a9:e9: 83:26:fe:3b:92:ee:cd:92:bc:0d:49:e4:2a:a8:e9: ad:72:1c:20:f2:c1:58:fb:c2:e9:8d:b0:3f:bc:d1: 86:72:ca:2e:12:e0:75:fc:25:cc:82:97:cb:3a:1a: e8:57:b5:14:d9:cf:0c:c6:1f:97:2e:ff:f4:21:68: e6:66:8d:90:3c:e4:26:2d:91:2c:53:58:79:57:5e: 3d:6e:64:47:eb:a6:e0:ee:c6:9a:43:5e:03:f2:ee: 58:8b:e0:e1:74:f0:3c:09:a4:6e:eb:41:1c:e6:30: 76:a5:cf:b0:d5:ae:62:e3:64:3f:da:8b:cb:62:1a: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C4:7F:52:B8:F0:39:F5:6F:AA:EC:F1:77:F5:AC:C5:C8:EE:C0:12 X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131332e302f32342d3234203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.113.0/24 Signature Algorithm: sha256WithRSAEncryption 93:c4:2a:f5:f8:8f:de:d9:c6:49:d6:2f:cd:0d:58:33:a7:93: 96:66:04:82:fa:87:e9:d1:f4:8c:5a:7f:1a:b7:bb:6c:64:2f: ba:49:eb:22:3c:86:d3:9c:bf:92:ed:82:81:fa:fd:d1:a2:5a: e4:08:42:2e:61:50:a1:f7:51:3f:dc:1b:6d:35:a6:f8:7c:2d: 2d:00:35:bf:9f:38:ec:1c:1b:25:6a:e5:ce:08:cd:dd:29:4a: 37:1e:6d:29:fd:63:2b:67:a6:06:3f:7c:cd:a3:2d:6a:30:c6: 32:1e:ea:1c:4b:d6:b8:e6:2a:6b:99:c5:c9:79:55:0f:d3:54: 56:c2:7b:c6:43:fe:9e:7a:35:fb:93:f1:c2:41:16:ce:e3:af: 8e:05:69:9d:78:43:77:d1:7d:88:a1:3b:d1:83:6d:db:54:fa: c7:cc:81:3f:ff:1a:96:a1:64:dd:df:88:a6:0f:59:7f:3f:fc: 8a:39:ce:c5:7b:fc:e7:5f:49:aa:4d:e8:27:1c:16:94:1b:e2: 19:ed:bc:23:34:50:a2:10:a9:79:58:6f:68:7d:72:4b:c2:27: cc:1e:e1:f2:d6:77:42:64:3b:e5:bf:f1:fa:d7:90:5b:d4:54: 05:65:e5:a1:10:13:74:c5:1b:d3:f8:4f:61:86:87:96:b3:71: 5c:aa:9d:cb -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUKcvuOEA+1XrFk/COrgrmX6uJQQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDEwMDgxMTMwWhcNMjYxMDA5MDgxNjMw WjAzMTEwLwYDVQQDEyg2NkM0N0Y1MkI4RjAzOUY1NkZBQUVDRjE3N0Y1QUNDNUM4 RUVDMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hY+uPCMusIh QFxgLorLFzCrWg+36YjkO0bB5OvpkkomrSop1r4AMPPSJwdhr2yTEnctLHil2q7m a+bG1HOMvn2TiToXCW+c4fgCcyySa5T1Ru24bghmakMISUmmv34MHJdCfz0EJhJy fdmfGhUorNS4TNEscTe0dS1s/DvXy6ZVMLwuqemDJv47ku7NkrwNSeQqqOmtchwg 8sFY+8LpjbA/vNGGcsouEuB1/CXMgpfLOhroV7UU2c8Mxh+XLv/0IWjmZo2QPOQm LZEsU1h5V149bmRH66bg7saaQ14D8u5Yi+DhdPA8CaRu60Ec5jB2pc+w1a5i42Q/ 2ovLYhrMAQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGbEf1K48Dn1b6rs8Xf1rMXI 7sASMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzMyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACO+XEwDQYJKoZIhvcN AQELBQADggEBAJPEKvX4j97ZxknWL80NWDOnk5ZmBIL6h+nR9Ixafxq3u2xkL7pJ 6yI8htOcv5LtgoH6/dGiWuQIQi5hUKH3UT/cG201pvh8LS0ANb+fOOwcGyVq5c4I zd0pSjcebSn9YytnpgY/fM2jLWowxjIe6hxL1rjmKmuZxcl5VQ/TVFbCe8ZD/p56 NfuT8cJBFs7jr44FaZ14Q3fRfYihO9GDbdtU+sfMgT//GpahZN3fiKYPWX8//Io5 zsV7/OdfSapN6CccFpQb4hntvCM0UKIQqXlYb2h9ckvCJ8we4fLWd0JkO+W/8frX kFvUVAVl5aEQE3TFG9P4T2GGh5azcVyqncs= -----END CERTIFICATE-----Generated at Tue Oct 21 01:30:53 2025 by rpki-client