$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d04282a9-3818-34af-ace1-342d464b80f7.roa File: d04282a9-3818-34af-ace1-342d464b80f7.roa (raw, json) Hash identifier: LE/m0R6Vy/CLsZdQCrn/lIJc60BRAotnRyirdAE0/r0= Subject key identifier: BA:53:AF:EA:91:96:C4:6B:34:DF:88:82:72:8F:C1:76:F7:17:9A:EA Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584B8517373BE095B3970EE0ECE0 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d04282a9-3818-34af-ace1-342d464b80f7.roa Signing time: Tue 14 Oct 2025 14:36:59 +0000 ROA not before: Tue 14 Oct 2025 14:36:59 +0000 ROA not after: Mon 12 Jan 2026 15:36:59 +0000 asID: 577 IP address blocks: 142.134.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:17:37:3b:e0:95:b3:97:0e:e0:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Oct 14 14:36:59 2025 GMT Not After : Jan 12 15:36:59 2026 GMT Subject: CN=99716f7b-2b8e-458d-a2a2-8c7c08d1359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:18:af:bc:8f:1a:3b:95:95:6b:2b:33:df: 6a:7b:f8:5c:f9:7a:78:ab:56:95:47:1a:89:11:c4: a8:16:cf:90:fa:12:67:75:ce:3c:06:10:fb:7d:4b: 59:04:f9:50:86:7e:71:1b:17:50:e1:4e:d7:69:e5: 71:75:83:9f:29:52:60:64:fc:c0:35:ba:34:dc:61: 26:26:84:02:27:0a:aa:ed:af:f6:98:f6:22:b8:24: 7e:3e:b7:26:68:07:48:ef:70:78:24:39:86:13:52: 95:ba:32:ed:de:b7:20:c7:58:f2:c1:72:18:c8:ae: 86:cf:86:dc:4d:a9:01:65:12:25:a9:a9:b8:4a:c0: 53:be:29:f9:ed:73:68:36:e3:03:1b:4a:d1:38:de: 57:b2:94:d9:24:8b:63:ad:10:bc:2a:35:64:19:ac: 15:a4:fe:e0:1f:a5:c3:a7:ee:11:08:84:cc:74:20: 00:47:18:29:c3:58:75:98:1c:a1:36:0f:c0:21:9a: 31:db:12:82:96:7c:85:cf:8e:39:b4:4c:f5:45:c1: 32:26:1f:09:a2:26:7a:11:21:44:44:07:22:3d:f0: 6f:4f:44:77:3b:54:55:99:a5:6e:d5:06:53:3b:c2: c8:64:96:e5:70:11:b5:3e:10:ea:19:30:46:69:51: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:AF:EA:91:96:C4:6B:34:DF:88:82:72:8F:C1:76:F7:17:9A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d04282a9-3818-34af-ace1-342d464b80f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 142.134.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1b:94:67:93:45:9f:98:00:9e:19:1f:08:c7:3e:01:2f:8e: 8a:5e:1d:e3:02:f4:16:13:66:27:ad:50:95:24:a7:b4:26:76: a8:d4:16:c8:dd:68:b7:bb:4f:06:4a:93:0d:4f:d6:b0:bb:57: 49:90:a6:a0:a5:27:4b:eb:dd:9f:14:2f:10:1d:e9:f2:04:72: 7d:ce:a5:85:69:8b:66:e8:55:19:dd:56:d3:b2:c7:ec:19:56: ec:90:8d:8d:db:b1:5d:db:26:d5:ab:5a:c3:84:a7:e4:da:18: 30:38:c5:e4:50:45:c9:70:4e:32:09:81:dd:ea:89:83:32:7b: 9f:8a:99:e6:f9:79:14:d2:7e:5f:16:b5:9c:9f:32:75:31:65: aa:ca:61:7c:27:20:ef:c8:af:63:15:72:4e:db:83:be:f8:07: 1d:a8:bc:c4:af:0d:cd:cf:2c:40:09:5f:05:9f:94:cb:d9:e3: eb:0e:d8:52:56:0a:86:84:28:29:0d:3e:ed:21:09:38:73:36: d3:33:47:81:3b:95:31:31:d6:2b:ef:b0:62:e3:df:c6:75:5f: 22:75:84:65:58:dc:92:59:70:05:75:47:2b:16:25:c6:90:82: 0d:6f:11:12:e9:1d:96:cb:80:44:97:e3:98:82:63:cd:65:0c: 17:ba:4f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFFzc74JWzlw7g7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MTAxNDE0MzY1OVoXDTI2MDExMjE1MzY1OVowLzEtMCsGA1UEAxMk OTk3MTZmN2ItMmI4ZS00NThkLWEyYTItOGM3YzA4ZDEzNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOcYr7yPGjuVlWsrM99qe/hc+Xp4q1aVRxqJ EcSoFs+Q+hJndc48BhD7fUtZBPlQhn5xGxdQ4U7XaeVxdYOfKVJgZPzANbo03GEm JoQCJwqq7a/2mPYiuCR+PrcmaAdI73B4JDmGE1KVujLt3rcgx1jywXIYyK6Gz4bc TakBZRIlqam4SsBTvin57XNoNuMDG0rRON5XspTZJItjrRC8KjVkGawVpP7gH6XD p+4RCITMdCAARxgpw1h1mByhNg/AIZox2xKClnyFz445tEz1RcEyJh8JoiZ6ESFE RAciPfBvT0R3O1RVmaVu1QZTO8LIZJblcBG1PhDqGTBGaVF79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpTr+qRlsRrNN+IgnKPwXb3F5rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDA0MjgyYTktMzgxOC0z NGFmLWFjZTEtMzQyZDQ2NGI4MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjobAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQblGeTRZ+YAJ4ZHwjHPgEvjopeHeMC9BYTZietUJUkp7QmdqjUFsjd aLe7TwZKkw1P1rC7V0mQpqClJ0vr3Z8ULxAd6fIEcn3OpYVpi2boVRndVtOyx+wZ VuyQjY3bsV3bJtWrWsOEp+TaGDA4xeRQRclwTjIJgd3qiYMye5+Kmeb5eRTSfl8W tZyfMnUxZarKYXwnIO/Ir2MVck7bg774Bx2ovMSvDc3PLEAJXwWflMvZ4+sO2FJW CoaEKCkNPu0hCThzNtMzR4E7lTEx1ivvsGLj38Z1XyJ1hGVY3JJZcAV1RysWJcaQ gg1vERLpHZbLgESX45iCY81lDBe6T3g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:04 2025 by rpki-client