$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ad346dce-ef20-35f9-acd3-66fd32aeeba4.roa File: ad346dce-ef20-35f9-acd3-66fd32aeeba4.roa (raw, json) Hash identifier: D0LF3eppuccPluLBVZ0MLDon1F964jtGL8tJ2peR9lU= Subject key identifier: 09:4A:19:68:C6:97:D7:72:6F:84:B4:F1:CD:90:5F:D3:93:09:04:00 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584B799EFEFCF29888D85460EEE0 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ad346dce-ef20-35f9-acd3-66fd32aeeba4.roa Signing time: Fri 10 Oct 2025 12:00:52 +0000 ROA not before: Fri 10 Oct 2025 12:00:52 +0000 ROA not after: Thu 08 Jan 2026 13:00:52 +0000 asID: 400384 IP address blocks: 142.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:fe:fc:f2:98:88:d8:54:60:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 10 12:00:52 2025 GMT Not After : Jan 8 13:00:52 2026 GMT Subject: CN=0223714a-3ae5-4ce9-89e1-841dbdfd1444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:52:98:13:b4:52:79:6e:45:e6:b1:e1:1d: c5:f3:71:b5:ce:ed:ea:26:02:0d:b9:e1:a8:43:30: ea:cb:bf:1f:ed:cb:41:61:91:cb:24:d8:e4:0a:38: 77:d5:5a:3b:b2:57:08:79:53:91:41:bc:39:12:4d: b2:66:c8:51:f4:09:2e:ea:79:ff:e5:65:6d:4a:25: 22:d5:3a:2a:df:96:81:35:01:65:be:c5:93:4b:f4: cd:86:1c:d6:ef:f2:73:07:84:2a:da:36:cb:e9:59: 5d:af:03:d3:a3:1c:2f:4b:c3:6b:6c:e6:fd:e0:9d: 17:bb:10:9b:e0:d3:f6:cd:20:26:f1:b9:17:5d:9f: 3b:f2:8a:aa:d8:3a:18:fb:1b:28:c1:83:62:80:3c: 7e:9a:e4:26:75:b1:14:56:60:a3:71:fc:b2:d5:3b: 50:0a:80:d8:45:e7:bd:d5:85:e0:02:7f:7f:85:46: 41:75:47:ad:07:9a:6b:e7:d0:99:43:9d:1f:75:2c: 5e:f8:6c:7e:9e:2e:92:51:00:d7:7a:52:37:3c:7f: d4:f2:86:91:cd:b5:8e:fc:67:8f:54:8c:18:50:b0: cd:cc:dd:56:33:8b:10:7e:1c:18:57:f1:bf:a4:b0: 6b:75:c4:43:0d:f9:73:6f:56:91:91:82:61:d6:5c: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4A:19:68:C6:97:D7:72:6F:84:B4:F1:CD:90:5F:D3:93:09:04:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ad346dce-ef20-35f9-acd3-66fd32aeeba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 142.249.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4c:c9:de:a5:a4:49:9f:d0:63:a6:48:0e:e3:d8:05:f9:d5: 75:8c:39:96:0a:83:b3:56:2e:fc:9e:ea:d0:a6:43:be:47:db: 56:79:17:e7:86:93:65:d9:7a:2e:1d:03:00:18:c1:b6:ea:39: c3:32:69:79:3f:fb:0c:97:43:12:73:b8:01:d2:ee:f8:7e:1f: 21:13:35:8d:31:d0:93:5f:d5:73:c6:96:f2:99:55:a5:17:26: 6c:8f:26:3a:a5:ee:b3:be:0d:7d:6a:b5:8b:57:8d:bd:c8:dd: e4:56:b8:2f:fe:6f:2a:71:9a:c0:59:97:51:00:24:2c:70:99: cc:41:c0:67:da:05:9f:a8:17:f1:bc:57:87:cd:a9:9a:e9:3b: d6:de:ba:85:0b:f7:43:b1:df:82:c1:23:59:4f:be:3f:b8:3f: ac:b1:d0:e7:2a:47:e9:47:39:88:65:bd:7a:65:ef:56:af:7b: d2:e1:85:3c:49:77:cd:d0:60:2f:5d:f0:47:5b:a8:a9:ae:0b: 60:b7:8c:31:ad:f3:26:2a:86:1f:1a:3e:f5:d1:45:aa:71:a5: c0:64:13:89:27:f2:c6:ae:b4:5d:d3:42:e4:47:b1:b2:3b:f2: 4b:e1:55:f0:71:a8:48:65:da:36:c2:30:82:7c:71:54:36:43: a2:ab:40:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5nv788piI2FRg7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTAxMDEyMDA1MloXDTI2MDEwODEzMDA1MlowLzEtMCsGA1UEAxMk MDIyMzcxNGEtM2FlNS00Y2U5LTg5ZTEtODQxZGJkZmQxNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBFSmBO0UnluReax4R3F83G1zu3qJgINueGo QzDqy78f7ctBYZHLJNjkCjh31Vo7slcIeVORQbw5Ek2yZshR9Aku6nn/5WVtSiUi 1Toq35aBNQFlvsWTS/TNhhzW7/JzB4Qq2jbL6VldrwPToxwvS8NrbOb94J0XuxCb 4NP2zSAm8bkXXZ878oqq2DoY+xsowYNigDx+muQmdbEUVmCjcfyy1TtQCoDYRee9 1YXgAn9/hUZBdUetB5pr59CZQ50fdSxe+Gx+ni6SUQDXelI3PH/U8oaRzbWO/GeP VIwYULDNzN1WM4sQfhwYV/G/pLBrdcRDDflzb1aRkYJh1lxhsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlKGWjGl9dyb4S08c2QX9OTCQQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYWQzNDZkY2UtZWYyMC0z NWY5LWFjZDMtNjZmZDMyYWVlYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBMyd6lpEmf0GOmSA7j2AX51XWMOZYKg7NWLvye6tCmQ75H21Z5F+eG k2XZei4dAwAYwbbqOcMyaXk/+wyXQxJzuAHS7vh+HyETNY0x0JNf1XPGlvKZVaUX JmyPJjql7rO+DX1qtYtXjb3I3eRWuC/+bypxmsBZl1EAJCxwmcxBwGfaBZ+oF/G8 V4fNqZrpO9beuoUL90Ox34LBI1lPvj+4P6yx0OcqR+lHOYhlvXpl71ave9LhhTxJ d83QYC9d8EdbqKmuC2C3jDGt8yYqhh8aPvXRRapxpcBkE4kn8sautF3TQuRHsbI7 8kvhVfBxqEhl2jbCMIJ8cVQ2Q6KrQPY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:47:40 2025 by rpki-client