$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa File: 936de171-93a5-33f1-a56b-cfea2e67b068.roa (raw, json) Hash identifier: mj3MxOvf9INZT1zXrOjSvx28TIFlKX75wBpGtwN3EVU= Subject key identifier: 76:8B:61:D4:F2:B2:1F:93:54:89:63:F2:13:A1:17:84:B3:32:95:44 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584B7F6DF8C5B59C77EC4CC00380 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa Signing time: Sun 12 Oct 2025 13:56:56 +0000 ROA not before: Sun 12 Oct 2025 13:56:56 +0000 ROA not after: Sat 10 Jan 2026 14:56:56 +0000 asID: 49304 IP address blocks: 142.248.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:6d:f8:c5:b5:9c:77:ec:4c:c0:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Oct 12 13:56:56 2025 GMT Not After : Jan 10 14:56:56 2026 GMT Subject: CN=1861927f-2024-4fa4-93e8-be20cc947a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:48:55:79:36:c8:59:e4:32:8e:07:6e:e3: ad:0f:34:39:a7:5e:60:5c:c3:58:13:b2:82:a0:6d: 37:d2:5c:17:63:e9:26:fa:04:a1:f3:74:b2:e6:69: a8:55:46:8e:3b:dd:b5:f4:d8:05:c2:5d:79:20:e0: a1:78:c9:38:de:dc:70:e6:72:77:df:55:51:ba:54: ec:b0:be:65:3f:45:d9:83:e2:b7:a7:36:b9:48:00: 6e:f0:92:2d:26:63:3e:b0:15:d8:70:50:0e:06:da: c3:33:c4:a7:cc:db:c0:ed:6b:2c:27:fb:6f:ce:66: 73:af:28:e4:80:f1:2a:20:ea:ae:c4:bb:64:b7:06: 81:83:f7:0c:15:38:24:57:7a:c1:30:84:b2:8f:f3: f8:67:c3:22:b9:75:40:0f:3d:dc:4a:27:37:99:f9: 31:0f:3a:b5:5e:a0:c9:41:17:99:41:fd:f7:aa:cd: cc:75:73:ef:ae:24:70:15:c7:70:bc:76:cc:5c:e7: 9b:86:6e:45:83:6d:b5:07:7d:74:cf:5c:f3:c8:3b: 36:e2:72:ec:df:5c:d4:a5:91:45:19:5c:6a:d5:99: 4e:05:0d:3e:f3:46:b8:cd:ad:4b:4e:be:ef:63:0f: 0b:d0:57:c8:94:30:c4:7c:ef:a9:cf:6b:a5:b8:92: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8B:61:D4:F2:B2:1F:93:54:89:63:F2:13:A1:17:84:B3:32:95:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 142.248.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ad:7b:07:76:2d:90:4a:fd:73:5f:36:81:b3:e3:90:d4:f7: 38:86:3b:87:ed:7b:a0:a1:b8:36:63:ed:74:10:fe:f8:8e:d3: 49:41:c3:06:e1:c5:c6:e8:c0:25:8b:fe:05:45:0a:c3:49:dc: 62:24:12:a4:52:94:05:79:b0:1c:ec:13:f4:6a:b7:48:fb:f1: c0:86:82:c6:1c:1b:2f:85:e2:9c:8e:a7:18:c7:bc:82:a9:6a: 37:a9:38:e2:8d:e2:d9:07:12:78:08:2e:ed:4a:a0:ab:f7:1f: 21:22:87:f0:c8:2e:a1:41:f0:aa:f5:5d:92:77:89:94:9f:0d: 28:db:7c:ff:52:0d:9a:ae:50:84:60:39:0e:43:2e:af:2e:58: 79:e8:3c:e1:9c:e6:07:33:4f:92:9f:84:e1:fd:49:3b:8f:fc: c6:87:4b:52:bd:ac:fe:f5:6a:9d:7d:79:f3:32:bb:a2:0c:bd: 2e:bf:6b:fa:c2:f1:02:c3:4b:94:fa:7d:49:81:fc:18:21:e0: f4:5a:ec:ae:4b:e8:05:26:5e:03:d8:22:3e:48:eb:50:0d:a8: 15:e6:90:c3:30:15:b2:cc:9c:09:39:37:c0:9c:e6:24:c8:0b: 29:51:f5:a8:33:7c:5e:4b:d6:2d:83:d5:f7:ab:39:36:cb:48: bc:fc:46:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/bfjFtZx37EzAA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI1MTAxMjEzNTY1NloXDTI2MDExMDE0NTY1NlowLzEtMCsGA1UEAxMk MTg2MTkyN2YtMjAyNC00ZmE0LTkzZTgtYmUyMGNjOTQ3YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGdIVXk2yFnkMo4HbuOtDzQ5p15gXMNYE7KC oG030lwXY+km+gSh83Sy5mmoVUaOO9219NgFwl15IOCheMk43txw5nJ331VRulTs sL5lP0XZg+K3pza5SABu8JItJmM+sBXYcFAOBtrDM8SnzNvA7WssJ/tvzmZzryjk gPEqIOquxLtktwaBg/cMFTgkV3rBMISyj/P4Z8MiuXVADz3cSic3mfkxDzq1XqDJ QReZQf33qs3MdXPvriRwFcdwvHbMXOebhm5Fg221B310z1zzyDs24nLs31zUpZFF GVxq1ZlOBQ0+80a4za1LTr7vYw8L0FfIlDDEfO+pz2uluJJU/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaLYdTysh+TVIlj8hOhF4SzMpVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvOTM2ZGUxNzEtOTNhNS0z M2YxLWE1NmItY2ZlYTJlNjdiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGtewd2LZBK/XNfNoGz45DU9ziGO4fte6ChuDZj7XQQ/viO00lBwwbh xcbowCWL/gVFCsNJ3GIkEqRSlAV5sBzsE/Rqt0j78cCGgsYcGy+F4pyOpxjHvIKp ajepOOKN4tkHEngILu1KoKv3HyEih/DILqFB8Kr1XZJ3iZSfDSjbfP9SDZquUIRg OQ5DLq8uWHnoPOGc5gczT5KfhOH9STuP/MaHS1K9rP71ap19efMyu6IMvS6/a/rC 8QLDS5T6fUmB/Bgh4PRa7K5L6AUmXgPYIj5I61ANqBXmkMMwFbLMnAk5N8Cc5iTI CylR9agzfF5L1i2D1ferOTbLSLz8RoE= -----END CERTIFICATE-----Generated at Mon Oct 20 23:03:19 2025 by rpki-client