$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa File: 7be81d92-8583-3cc6-9516-da5af3f567c1.roa (raw, json) Hash identifier: Oa6V7n+YLT9YecmQKS8kOd/x5XTWyD75r+kqYbUYM1Y= Subject key identifier: A3:95:50:65:95:77:EA:52:B9:E5:93:E6:0E:45:AB:C2:89:09:CC:91 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584B7B1C2E6C2CD30F748BD94540 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa Signing time: Sat 11 Oct 2025 00:48:55 +0000 ROA not before: Sat 11 Oct 2025 00:48:55 +0000 ROA not after: Fri 09 Jan 2026 01:48:55 +0000 asID: 152878 IP address blocks: 142.248.228.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1c:2e:6c:2c:d3:0f:74:8b:d9:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Oct 11 00:48:55 2025 GMT Not After : Jan 9 01:48:55 2026 GMT Subject: CN=12858ade-5723-4bed-a7ac-b1ead102d7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:c6:d4:d6:eb:05:d2:19:06:44:59:b7:ef: f7:31:bf:cb:4a:4f:ef:86:d2:20:47:b5:59:47:36: 13:dc:60:cf:2c:24:dc:8a:44:41:81:74:30:76:0c: 98:75:40:76:5b:bc:07:bf:84:3a:e0:bc:d6:ce:54: c1:8f:47:27:85:3e:be:c7:04:c7:10:00:14:b9:a8: 03:45:ba:9e:39:33:98:70:7c:fa:a3:83:00:dd:ed: f3:d0:93:ed:ce:1e:42:af:7c:de:20:48:10:0a:17: 80:f0:3c:6a:2e:cd:fc:c9:d7:00:05:9c:e7:08:48: 65:5d:81:b0:72:2d:8f:ee:f3:56:96:10:a6:95:bb: a1:2d:4a:fe:4b:c9:e3:2c:da:c7:b7:c4:3c:cf:f2: 6d:ff:a6:bf:84:6c:60:d9:c1:86:5f:65:47:34:11: 50:6a:48:52:e7:c6:a2:84:ad:b9:4e:6b:c5:01:fa: 17:9a:81:ad:d1:33:55:9b:dc:aa:ea:be:da:46:e9: be:87:ce:cf:06:7d:7e:d2:70:2e:f6:0f:86:a0:1b: e6:04:2d:24:f6:7e:f8:91:4d:df:e2:57:d1:e0:c5: 2f:e1:fa:06:f1:d6:50:02:b1:dc:58:58:0d:da:42: b5:79:5e:6a:48:28:ea:f6:c1:2d:21:f2:fd:a8:23: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:50:65:95:77:EA:52:B9:E5:93:E6:0E:45:AB:C2:89:09:CC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/7be81d92-8583-3cc6-9516-da5af3f567c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b0:97:72:81:95:10:57:22:96:85:31:04:00:33:37:73:a9: dc:2b:a1:4c:c2:cb:62:e9:fa:6e:de:52:6b:1c:81:38:97:ef: 9c:06:b6:77:96:53:13:02:b1:5d:a4:b5:e5:44:df:a0:2c:71: 67:6d:32:22:50:4b:bb:29:5e:11:91:78:9e:96:23:b9:2d:8e: d6:dc:d2:14:f7:22:dc:d0:5f:d7:8f:1c:b7:da:8b:d7:08:62: c7:0f:c0:e4:a8:43:60:26:fd:0d:ad:d3:50:ca:34:71:68:53: cf:e7:f1:51:46:e4:93:ff:05:b5:1b:0e:e5:4c:84:06:5f:8e: 66:20:b8:03:ba:2c:6a:4c:f7:4f:68:01:0c:8e:5a:f5:55:5b: bf:44:8a:96:ef:a1:76:e4:5c:c2:ae:3f:5a:4a:70:67:75:01: 3d:8d:5d:13:9f:a6:43:9d:a9:34:df:4f:f6:c3:66:b3:06:65: 86:9b:89:ba:e9:f4:b4:ab:e2:b2:5a:de:a6:23:21:f0:55:46: 82:71:b5:a6:d3:52:a0:37:a5:ac:02:12:a9:6a:f1:68:65:13: 5b:7a:50:ba:b2:71:94:39:b9:5b:27:60:1d:a0:73:91:fb:14: 29:00:7a:ff:29:85:0e:0b:60:77:0a:ec:a1:20:06:5f:0d:34: a6:79:2f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7HC5sLNMPdIvZRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTAxMTAwNDg1NVoXDTI2MDEwOTAxNDg1NVowLzEtMCsGA1UEAxMk MTI4NThhZGUtNTcyMy00YmVkLWE3YWMtYjFlYWQxMDJkN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikLG1NbrBdIZBkRZt+/3Mb/LSk/vhtIgR7VZ RzYT3GDPLCTcikRBgXQwdgyYdUB2W7wHv4Q64LzWzlTBj0cnhT6+xwTHEAAUuagD RbqeOTOYcHz6o4MA3e3z0JPtzh5Cr3zeIEgQCheA8DxqLs38ydcABZznCEhlXYGw ci2P7vNWlhCmlbuhLUr+S8njLNrHt8Q8z/Jt/6a/hGxg2cGGX2VHNBFQakhS58ai hK25TmvFAfoXmoGt0TNVm9yq6r7aRum+h87PBn1+0nAu9g+GoBvmBC0k9n74kU3f 4lfR4MUv4foG8dZQArHcWFgN2kK1eV5qSCjq9sEtIfL9qCPApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOVUGWVd+pSueWT5g5Fq8KJCcyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvN2JlODFkOTItODU4My0z Y2M2LTk1MTYtZGE1YWYzZjU2N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADewl3KBlRBXIpaFMQQAMzdzqdwroUzCy2Lp+m7eUmscgTiX75wGtneW UxMCsV2kteVE36AscWdtMiJQS7spXhGReJ6WI7ktjtbc0hT3ItzQX9ePHLfai9cI YscPwOSoQ2Am/Q2t01DKNHFoU8/n8VFG5JP/BbUbDuVMhAZfjmYguAO6LGpM909o AQyOWvVVW79EipbvoXbkXMKuP1pKcGd1AT2NXROfpkOdqTTfT/bDZrMGZYabibrp 9LSr4rJa3qYjIfBVRoJxtabTUqA3pawCEqlq8WhlE1t6ULqycZQ5uVsnYB2gc5H7 FCkAev8phQ4LYHcK7KEgBl8NNKZ5L2I= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:48 2025 by rpki-client