$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa File: d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa (raw, json) Hash identifier: /lWFEWR9FOJbYWEgZcgOICU4NZ4rpfBrilik7BxBi7I= Subject key identifier: 85:DA:E5:9E:66:BB:73:5B:1C:AC:57:23:E5:4A:9C:AB:37:93:9E:52 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584B8EACC83AE2ADD8021118CBC0 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 62707 IP address blocks: 142.202.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c8:3a:e2:ad:d8:02:11:18:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5eee9010-2e3b-452b-b6e8-1c435da53ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:85:0e:d5:32:4c:5d:ff:b7:86:1f:00:c2:8b: 7e:07:64:7a:95:98:0e:d6:c6:2a:41:29:57:0f:e2: f9:14:41:a4:51:de:82:94:cd:c3:3c:b0:59:1a:02: 72:7b:61:ad:a0:c7:5b:37:ce:d1:b9:05:7c:f0:c4: c1:f2:dd:1c:f1:9b:5b:11:d9:bc:c5:db:9d:f0:6b: 60:c2:c5:00:8a:45:6a:b2:6f:44:25:1a:03:d0:51: ec:b6:bb:2d:b3:47:25:93:77:5d:51:22:ba:e3:5e: 67:5c:88:72:f3:a4:50:5e:46:42:6b:81:88:3c:2b: 83:8e:61:d1:5f:85:e3:e8:02:df:5e:5f:b7:90:89: d5:62:50:2e:77:af:53:84:a4:ce:6a:2a:b9:be:a9: fb:b0:ce:3e:c4:53:31:48:7b:8f:37:3b:46:fa:6f: df:2e:09:0d:11:dd:41:82:3e:51:2e:48:11:64:40: 97:ac:1a:ca:05:be:7b:05:b1:1b:d8:03:f3:9b:ca: ed:ef:94:33:35:f9:2c:8f:bd:af:e5:e5:64:27:c6: 79:83:e0:e5:4b:bc:94:37:f9:0c:7d:54:c7:29:7b: 05:94:bf:a3:3a:27:47:b5:b9:c9:a5:e8:87:64:2e: e9:dc:6c:be:f8:ff:6c:38:29:bd:c5:54:95:49:3d: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:E5:9E:66:BB:73:5B:1C:AC:57:23:E5:4A:9C:AB:37:93:9E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 142.202.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:73:03:54:da:81:8d:79:fc:b5:28:fb:8b:aa:c9:12:d5:40: a7:23:a5:d9:06:ae:96:da:e2:d6:e9:ee:41:7b:72:3d:ab:36: 35:b4:80:ec:2c:b0:59:28:ce:29:0c:2e:98:3f:3e:a7:78:bb: 80:82:83:7d:e2:5c:08:57:3d:43:1c:84:26:ad:6a:c5:ad:c4: 2c:c7:fc:1a:75:dc:4d:00:d4:a3:74:2a:47:39:77:60:1d:05: 81:32:7f:64:9f:26:86:9a:65:a0:71:b3:6c:9a:9a:1d:ae:cf: 54:2f:ba:fc:76:6f:ee:23:3c:c5:61:15:20:15:6b:44:35:fe: 5d:3d:43:3c:d3:e8:28:85:3a:3a:08:e8:91:d6:be:8a:65:60: 20:05:99:66:fa:68:3c:48:5e:d8:31:74:73:f5:e3:b9:3f:2f: 52:9a:da:2d:86:7d:cb:40:4b:f9:89:40:cf:e7:49:23:4d:df: 80:9d:d4:ea:94:e6:53:64:02:10:22:95:19:aa:50:d8:c3:e5: e2:ca:25:11:cb:72:9d:92:10:62:a9:8c:bf:b3:02:0a:35:de: 84:58:fc:e0:5e:76:10:6e:0f:38:b7:8c:a4:07:ec:e9:00:51: 24:2c:bb:36:b5:c1:ef:31:b0:d2:2f:95:c3:59:a3:0b:4a:22: 20:78:67:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMg64q3YAhEYy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWVlZTkwMTAtMmUzYi00NTJiLWI2ZTgtMWM0MzVkYTUzZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4UO1TJMXf+3hh8Awot+B2R6lZgO1sYqQSlX D+L5FEGkUd6ClM3DPLBZGgJye2GtoMdbN87RuQV88MTB8t0c8ZtbEdm8xdud8Gtg wsUAikVqsm9EJRoD0FHstrsts0clk3ddUSK6415nXIhy86RQXkZCa4GIPCuDjmHR X4Xj6ALfXl+3kInVYlAud69ThKTOaiq5vqn7sM4+xFMxSHuPNztG+m/fLgkNEd1B gj5RLkgRZECXrBrKBb57BbEb2APzm8rt75QzNfksj72v5eVkJ8Z5g+DlS7yUN/kM fVTHKXsFlL+jOidHtbnJpeiHZC7p3Gy++P9sOCm9xVSVST1ffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXa5Z5mu3NbHKxXI+VKnKs3k55SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZDBlNDRlMmQtNjkxNy0z YmE2LWE0YWYtNWE5MDcxNjQ2MmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItzA1TagY15/LUo+4uqyRLVQKcjpdkGrpba4tbp7kF7cj2rNjW0gOws sFkozikMLpg/Pqd4u4CCg33iXAhXPUMchCatasWtxCzH/Bp13E0A1KN0Kkc5d2Ad BYEyf2SfJoaaZaBxs2yamh2uz1Qvuvx2b+4jPMVhFSAVa0Q1/l09QzzT6CiFOjoI 6JHWvoplYCAFmWb6aDxIXtgxdHP147k/L1Ka2i2GfctAS/mJQM/nSSNN34Cd1OqU 5lNkAhAilRmqUNjD5eLKJRHLcp2SEGKpjL+zAgo13oRY/OBedhBuDzi3jKQH7OkA USQsuza1we8xsNIvlcNZowtKIiB4Z7I= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:41 2025 by rpki-client