$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json) Hash identifier: kLeynUFXt5ya8n/tPFJcqzU+fj1mI1l8edxVAyd/ePU= Subject key identifier: 55:46:68:00:AD:25:16:86:3E:E5:38:AB:66:44:A9:3C:FB:D7:48:ED Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584B7B55AF7135E3A9B8BDB919C0 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa Signing time: Sat 11 Oct 2025 02:44:46 +0000 ROA not before: Sat 11 Oct 2025 02:44:46 +0000 ROA not after: Fri 09 Jan 2026 03:44:46 +0000 asID: 33039 IP address blocks: 142.248.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:55:af:71:35:e3:a9:b8:bd:b9:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Oct 11 02:44:46 2025 GMT Not After : Jan 9 03:44:46 2026 GMT Subject: CN=8b7ed5f6-df05-4e11-a42d-6cd73ab9b860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:a6:ae:07:48:03:05:23:11:78:9c:40:b2: fb:59:db:39:90:97:2f:63:07:0a:77:56:bf:43:c9: 33:55:f1:c1:d7:c6:7a:ee:77:5e:e2:9c:10:d1:f1: 5d:43:00:d9:7e:2c:30:ef:f3:62:19:23:d2:19:1a: 6d:9e:3b:ba:01:49:df:ea:8a:c1:ec:f5:c4:a1:96: cb:0e:ef:52:4c:11:b6:68:cd:af:1d:06:7d:03:d0: 42:e4:67:c1:38:aa:b9:cc:0c:ff:35:e3:4b:34:c8: ca:e1:bd:99:52:b2:9d:b2:40:56:0c:8b:ea:d2:e9: ee:29:3f:52:3a:1b:ed:6a:db:d0:a8:5e:6b:b6:05: 62:bf:89:ac:dd:52:95:ee:af:9e:06:62:ab:8f:b5: 8b:a5:90:58:69:8f:32:1b:9f:fe:cf:37:a0:9f:b4: 4e:a8:74:fb:d2:d9:15:ef:86:54:fd:a1:54:45:04: 1b:d6:2f:d4:27:87:b3:96:45:2d:1e:76:6e:d3:85: 3a:50:c2:dc:49:f4:d4:83:8f:ae:8b:2b:ff:47:8c: d5:e8:26:b1:58:28:3c:fb:68:28:49:f8:02:3c:19: 76:75:34:2d:7b:cd:5f:63:66:0e:a3:70:de:74:b2: 8a:ec:a9:65:05:cd:ec:df:4a:45:ff:f0:0c:db:09: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:46:68:00:AD:25:16:86:3E:E5:38:AB:66:44:A9:3C:FB:D7:48:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 142.248.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:de:9d:91:30:83:a2:43:d8:15:3a:7f:d9:76:49:85:e8:d7: 34:ae:c0:06:2e:a5:58:f2:3f:bb:f0:75:39:03:95:d0:1e:a6: 41:ac:6f:61:f7:29:ce:59:bb:26:33:55:7c:c7:59:9b:6f:6f: 4f:6a:37:f8:4d:67:0b:51:ab:2e:ac:1e:07:f1:13:3e:e3:47: 07:6c:4e:25:71:d5:b9:b8:6e:2a:42:45:b5:0e:c1:b0:65:34: 3c:7f:0a:7c:2d:a7:8e:06:29:0c:b4:5e:b1:87:2b:71:d9:f8: f5:92:26:d0:a4:ec:c3:11:d1:23:91:0d:af:2c:48:5a:07:27: 15:df:ad:58:5c:fc:cd:bf:89:29:a5:a9:f8:2c:38:1f:21:d0: c6:67:c5:19:c6:59:57:d9:de:a2:04:a9:c9:c1:cf:b1:c7:04: d1:44:aa:39:31:52:d9:34:7c:bb:75:ca:eb:75:83:27:22:68: 2b:62:76:95:c9:b8:d3:56:5a:75:24:a9:0d:b4:bb:c9:c3:1d: f6:77:83:ba:56:a2:f7:b8:71:69:06:ba:de:5f:cd:ea:d3:09: c0:0d:25:e3:4c:4c:c0:b4:9e:ba:05:2f:39:f8:e4:9e:6b:42: c9:c1:c2:d4:da:61:ed:73:02:0b:87:05:09:49:86:1d:18:82: b4:00:85:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Va9xNeOpuL25GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MTAxMTAyNDQ0NloXDTI2MDEwOTAzNDQ0NlowLzEtMCsGA1UEAxMk OGI3ZWQ1ZjYtZGYwNS00ZTExLWE0MmQtNmNkNzNhYjliODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnumrgdIAwUjEXicQLL7Wds5kJcvYwcKd1a/ Q8kzVfHB18Z67nde4pwQ0fFdQwDZfiww7/NiGSPSGRptnju6AUnf6orB7PXEoZbL Du9STBG2aM2vHQZ9A9BC5GfBOKq5zAz/NeNLNMjK4b2ZUrKdskBWDIvq0unuKT9S OhvtatvQqF5rtgViv4ms3VKV7q+eBmKrj7WLpZBYaY8yG5/+zzegn7ROqHT70tkV 74ZU/aFURQQb1i/UJ4ezlkUtHnZu04U6UMLcSfTUg4+uiyv/R4zV6CaxWCg8+2go SfgCPBl2dTQte81fY2YOo3DedLKK7KllBc3s30pF//AM2wlh8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVGaACtJRaGPuU4q2ZEqTz710jtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzg0NDIyMDMtMGEyMy0z YzQwLTg5NDEtNmY0OWY4YTVmYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbenZEwg6JD2BU6f9l2SYXo1zSuwAYupVjyP7vwdTkDldAepkGsb2H3 Kc5ZuyYzVXzHWZtvb09qN/hNZwtRqy6sHgfxEz7jRwdsTiVx1bm4bipCRbUOwbBl NDx/Cnwtp44GKQy0XrGHK3HZ+PWSJtCk7MMR0SORDa8sSFoHJxXfrVhc/M2/iSml qfgsOB8h0MZnxRnGWVfZ3qIEqcnBz7HHBNFEqjkxUtk0fLt1yut1gyciaCtidpXJ uNNWWnUkqQ20u8nDHfZ3g7pWove4cWkGut5fzerTCcANJeNMTMC0nroFLzn45J5r QsnBwtTaYe1zAguHBQlJhh0YgrQAhVI= -----END CERTIFICATE-----Generated at Wed Oct 22 00:04:23 2025 by rpki-client