$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/dc08be1c-e9d5-389d-9bbe-cccd88019572.roa File: dc08be1c-e9d5-389d-9bbe-cccd88019572.roa (raw, json) Hash identifier: 0covNkW4BWKNP/5qDIBubPCx7kNNi0mb+vKVGnehkOg= Subject key identifier: B2:90:C7:08:6D:33:FA:97:B3:FA:3A:88:A5:C5:40:3B:53:D2:38:FB Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584B799E34D293F4E39C4BCC6000 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/dc08be1c-e9d5-389d-9bbe-cccd88019572.roa Signing time: Fri 10 Oct 2025 11:59:17 +0000 ROA not before: Fri 10 Oct 2025 11:59:17 +0000 ROA not after: Thu 08 Jan 2026 12:59:17 +0000 asID: 400384 IP address blocks: 142.249.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:34:d2:93:f4:e3:9c:4b:cc:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 10 11:59:17 2025 GMT Not After : Jan 8 12:59:17 2026 GMT Subject: CN=f629fa77-4eb3-4cd2-b810-074072efb3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:6a:fe:9d:29:b1:27:85:08:20:75:a6:fe: f7:46:4a:7a:a4:cb:5f:20:ab:e1:ef:84:2f:93:da: 50:c5:f2:85:99:e2:35:ee:d7:7e:35:17:05:0e:9a: 68:ac:4f:ba:f6:9d:6c:2d:5b:cb:80:a7:6a:a4:97: b6:31:f8:07:22:3d:d4:41:a2:8c:d0:d7:c1:4b:14: a9:0b:6c:7c:cd:c1:60:05:8a:23:98:e8:9f:52:ef: 1c:2b:97:52:30:a6:2b:1b:87:b0:46:7a:0d:79:2c: 00:cd:84:b8:cc:69:bc:50:ed:09:a4:99:39:3a:ac: e3:e4:1b:aa:0e:c7:5f:9c:65:f4:12:79:28:8f:fb: ed:f9:20:d2:f6:6c:b9:22:2e:86:81:11:ed:4e:6e: a4:a3:32:2e:fc:d3:73:ce:69:75:1a:92:a5:17:3b: 59:6b:e9:51:75:1a:88:03:a7:01:7c:a0:a9:3a:db: 24:af:ce:25:02:e9:e6:fa:b8:71:39:25:70:c2:64: 55:fd:b2:b8:0f:c6:f3:d2:e9:05:f6:c1:1c:9c:72: 20:28:5e:2e:0f:69:a9:9c:ce:06:f9:32:8a:35:57: 3e:2a:ce:a3:a1:d3:02:50:e9:83:a4:83:7f:4e:e1: 24:fd:8c:2d:6d:61:89:d2:b0:0b:63:c3:d2:23:d6: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:C7:08:6D:33:FA:97:B3:FA:3A:88:A5:C5:40:3B:53:D2:38:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/dc08be1c-e9d5-389d-9bbe-cccd88019572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 142.249.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:40:25:52:ca:ee:24:5d:36:45:3d:2b:d2:05:e0:14:78:66: c8:2e:c7:48:fe:1b:f6:90:14:70:44:d3:8e:a2:9a:93:f7:7a: 2c:5f:09:ec:08:89:9c:a5:5e:22:43:87:25:8c:a2:80:cf:74: a2:13:b9:88:6a:49:73:29:8a:8f:64:66:1d:1b:f1:d1:5c:a6: 8d:9b:61:aa:c4:5a:9c:8b:3c:5a:75:b5:86:93:12:46:a8:f3: 43:0f:d1:89:27:4e:55:51:4b:2c:d7:9e:1a:2c:c5:26:8b:eb: 06:ab:05:d7:82:ea:d7:fb:28:14:c8:45:c0:19:42:59:09:21: eb:99:a2:75:3e:2f:3d:34:41:29:9c:4e:c2:80:45:92:b2:e7: cc:4d:c0:2d:46:61:9c:52:b5:5b:30:c6:51:1c:da:49:ac:e2: 15:44:29:fb:35:41:9d:76:4b:1a:19:e7:07:95:9d:11:5e:53: d5:80:39:f1:26:70:2c:a5:93:1f:50:a6:7b:3f:41:0b:c0:9f: 69:32:6a:35:c2:ad:2e:3e:c4:db:3f:ad:76:09:a3:84:4c:c1: e8:12:b1:37:d8:30:cf:d9:b1:e2:68:cd:0b:6e:1f:7b:bd:29: 31:fd:c6:28:f1:51:b5:a5:86:12:4c:58:af:b1:c6:ac:0f:d3: 21:36:5b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5njTSk/TjnEvMYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTAxMDExNTkxN1oXDTI2MDEwODEyNTkxN1owLzEtMCsGA1UEAxMk ZjYyOWZhNzctNGViMy00Y2QyLWI4MTAtMDc0MDcyZWZiM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxpq/p0psSeFCCB1pv73Rkp6pMtfIKvh74Qv k9pQxfKFmeI17td+NRcFDpporE+69p1sLVvLgKdqpJe2MfgHIj3UQaKM0NfBSxSp C2x8zcFgBYojmOifUu8cK5dSMKYrG4ewRnoNeSwAzYS4zGm8UO0JpJk5Oqzj5Buq DsdfnGX0Enkoj/vt+SDS9my5Ii6GgRHtTm6kozIu/NNzzml1GpKlFztZa+lRdRqI A6cBfKCpOtskr84lAunm+rhxOSVwwmRV/bK4D8bz0ukF9sEcnHIgKF4uD2mpnM4G +TKKNVc+Ks6jodMCUOmDpIN/TuEk/YwtbWGJ0rALY8PSI9Z6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKQxwhtM/qXs/o6iKXFQDtT0jj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZGMwOGJlMWMtZTlkNS0z ODlkLTliYmUtY2NjZDg4MDE5NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItAJVLK7iRdNkU9K9IF4BR4Zsgux0j+G/aQFHBE046impP3eixfCewI iZylXiJDhyWMooDPdKITuYhqSXMpio9kZh0b8dFcpo2bYarEWpyLPFp1tYaTEkao 80MP0YknTlVRSyzXnhosxSaL6warBdeC6tf7KBTIRcAZQlkJIeuZonU+Lz00QSmc TsKARZKy58xNwC1GYZxStVswxlEc2kms4hVEKfs1QZ12SxoZ5weVnRFeU9WAOfEm cCylkx9Qpns/QQvAn2kyajXCrS4+xNs/rXYJo4RMwegSsTfYMM/ZseJozQtuH3u9 KTH9xijxUbWlhhJMWK+xxqwP0yE2W+U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:39 2025 by rpki-client