$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/d1b189ff-b8d0-3f1e-9327-eeae4f852d69.roa File: d1b189ff-b8d0-3f1e-9327-eeae4f852d69.roa (raw, json) Hash identifier: UIq/kB8uIpBRkFo4MSFqawq+fzXOajsjW0Des0nqWw4= Subject key identifier: 49:FB:EA:CC:71:C6:D0:1B:5D:EA:06:D3:A6:59:58:2C:F7:B6:9A:E4 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584B7B1B9B0FE1E06A622A58A4A0 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/d1b189ff-b8d0-3f1e-9327-eeae4f852d69.roa Signing time: Sat 11 Oct 2025 00:47:45 +0000 ROA not before: Sat 11 Oct 2025 00:47:45 +0000 ROA not after: Fri 09 Jan 2026 01:47:45 +0000 asID: 8003 IP address blocks: 142.248.228.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1b:9b:0f:e1:e0:6a:62:2a:58:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Oct 11 00:47:45 2025 GMT Not After : Jan 9 01:47:45 2026 GMT Subject: CN=86fffc1b-0e24-491f-8bb1-1e17b8f10477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:69:c5:0b:ba:34:9d:44:20:70:17:1b:9f: ed:dc:6b:84:b1:58:17:ad:b6:13:67:ee:cb:3b:c0: 48:16:1d:a9:49:71:81:26:01:4c:d6:7e:10:f4:0e: 02:81:b5:c2:60:18:13:8b:6b:15:37:86:25:0e:a8: 4e:f6:c6:9f:f5:81:99:dd:05:ee:e2:63:44:9b:70: d6:06:56:1c:f0:5b:5a:48:cc:c4:bf:df:16:57:3c: 6a:bf:a4:7f:b0:48:56:f1:a2:37:d3:76:72:4d:ff: 08:83:d8:4f:9a:f2:69:ca:5f:3d:ab:81:30:f8:51: 7e:e0:08:ad:13:cd:81:fd:80:51:d6:85:bc:c5:4c: 7b:e7:f6:c9:46:8d:16:7b:0c:d9:56:5e:f8:e8:aa: 8d:cb:cf:15:79:08:92:4c:f0:ec:a6:4a:2e:db:de: ce:0d:52:86:90:d4:62:2c:83:8f:fc:4d:9d:79:fd: 52:4e:95:78:ee:b9:d4:d5:c5:bd:c2:86:ed:97:1e: ea:6c:6c:4e:a3:36:2a:17:51:41:4e:45:e9:2a:f3: 13:e4:4f:4c:fd:d2:58:b2:03:ff:61:34:f1:b4:f5: 76:95:89:c5:f8:34:71:4b:27:59:5c:f7:f0:c0:fd: e5:a7:d3:a1:c2:62:5c:80:82:e7:24:27:1a:f0:7e: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:EA:CC:71:C6:D0:1B:5D:EA:06:D3:A6:59:58:2C:F7:B6:9A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/d1b189ff-b8d0-3f1e-9327-eeae4f852d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:68:b4:c4:95:fb:23:fd:27:26:b4:ac:ac:81:35:67:5f:12: 6f:16:eb:f1:8b:24:e9:2c:1d:c8:97:a3:bf:62:13:20:7e:e5: e6:86:19:de:4c:e8:ba:a0:bd:1b:37:09:20:b5:e6:fe:c7:78: 67:9c:46:0c:84:19:68:14:81:09:7a:f9:c6:81:5a:bb:21:27: 03:da:4c:13:62:2a:82:2a:94:90:cc:9b:85:b7:f5:ab:5c:e1: c2:27:5b:d4:30:2d:39:3d:09:3b:c4:58:4b:68:e6:23:1d:05: 38:d6:17:89:7f:77:3c:7e:c5:73:ea:4a:14:13:6e:b1:3f:b8: 07:69:64:ff:02:2d:86:f8:3a:d8:9e:d1:79:50:51:52:ff:f7: 1a:91:e6:2f:6c:40:d3:e4:2c:d1:70:96:f3:13:ad:5d:a9:d9: 7b:ef:51:16:92:1c:7b:f7:1f:45:e3:cd:5d:b1:5a:fa:e3:55: 44:d1:a2:51:41:a0:58:cb:2c:3e:9e:4e:98:b2:f1:c8:d5:27: 00:74:ba:48:8f:8a:d0:da:2e:37:71:c0:4f:c2:a6:d5:3b:cc: 05:8a:77:7c:76:15:53:81:81:80:85:8a:f7:13:45:0a:6c:44: 48:f3:3a:c5:53:6a:bf:cb:77:c8:57:39:17:ea:3f:56:14:9c: 2b:4f:ac:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7G5sP4eBqYipYpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTAxMTAwNDc0NVoXDTI2MDEwOTAxNDc0NVowLzEtMCsGA1UEAxMk ODZmZmZjMWItMGUyNC00OTFmLThiYjEtMWUxN2I4ZjEwNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPtpxQu6NJ1EIHAXG5/t3GuEsVgXrbYTZ+7L O8BIFh2pSXGBJgFM1n4Q9A4CgbXCYBgTi2sVN4YlDqhO9saf9YGZ3QXu4mNEm3DW BlYc8FtaSMzEv98WVzxqv6R/sEhW8aI303ZyTf8Ig9hPmvJpyl89q4Ew+FF+4Ait E82B/YBR1oW8xUx75/bJRo0WewzZVl746KqNy88VeQiSTPDspkou297ODVKGkNRi LIOP/E2def1STpV47rnU1cW9wobtlx7qbGxOozYqF1FBTkXpKvMT5E9M/dJYsgP/ YTTxtPV2lYnF+DRxSydZXPfwwP3lp9OhwmJcgILnJCca8H7YLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn76sxxxtAbXeoG06ZZWCz3tprkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvZDFiMTg5ZmYtYjhkMC0z ZjFlLTkzMjctZWVhZTRmODUyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxotMSV+yP9Jya0rKyBNWdfEm8W6/GLJOksHciXo79iEyB+5eaGGd5M 6LqgvRs3CSC15v7HeGecRgyEGWgUgQl6+caBWrshJwPaTBNiKoIqlJDMm4W39atc 4cInW9QwLTk9CTvEWEto5iMdBTjWF4l/dzx+xXPqShQTbrE/uAdpZP8CLYb4Otie 0XlQUVL/9xqR5i9sQNPkLNFwlvMTrV2p2XvvURaSHHv3H0XjzV2xWvrjVUTRolFB oFjLLD6eTpiy8cjVJwB0ukiPitDaLjdxwE/CptU7zAWKd3x2FVOBgYCFivcTRQps REjzOsVTar/Ld8hXORfqP1YUnCtPrEA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:25 2025 by rpki-client