$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/c47b3125-e43c-3314-9fdc-30c1d0223270.roa File: c47b3125-e43c-3314-9fdc-30c1d0223270.roa (raw, json) Hash identifier: kRPhME6NcqHk+qgd0O1tMbcnp6zH3CBmcdWuZEFJmW4= Subject key identifier: 26:AA:3B:0B:BD:30:59:B3:4F:68:96:D6:70:B3:F2:C5:58:D3:35:EB Certificate issuer: /CN=545b8526-3b5a-46c2-b925-6c40139289cd Certificate serial: 010D0C9F4328584B8B23D231DD3C0A46DFDE2900 Authority key identifier: 9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/c47b3125-e43c-3314-9fdc-30c1d0223270.roa Signing time: Thu 09 Oct 2025 22:59:42 +0000 ROA not before: Thu 09 Oct 2025 22:59:42 +0000 ROA not after: Wed 07 Jan 2026 23:59:42 +0000 asID: 13383 IP address blocks: 142.249.252.0/23 maxlen: 24 142.249.254.0/24 maxlen: 24 142.249.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:23:d2:31:dd:3c:0a:46:df:de:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545b8526-3b5a-46c2-b925-6c40139289cd Validity Not Before: Oct 9 22:59:42 2025 GMT Not After : Jan 7 23:59:42 2026 GMT Subject: CN=f71fad00-ded3-47a4-b310-25463ad6cc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:29:51:0b:48:04:cc:e0:70:d1:fc:8c:d2: 83:70:85:d5:8b:30:f5:29:58:b4:90:37:4b:81:6b: 36:f2:33:0b:98:84:ed:64:c1:86:db:43:f3:32:26: d0:31:f9:35:07:2e:a8:ca:2b:bc:d4:19:46:37:e0: 4e:4d:bd:20:e6:56:c3:5d:ea:f8:d7:ce:56:18:ca: a1:dd:eb:93:51:e7:59:2f:ba:d4:1b:52:8e:64:5d: 21:04:8e:af:dd:53:f3:a8:dd:7e:50:5c:e4:31:bc: ef:3c:fa:40:f1:66:f9:48:91:d6:c9:df:d3:20:7f: 3c:2e:ff:82:ea:9a:c9:c4:43:72:f8:2f:b7:17:ae: 45:02:4c:a7:e4:4a:57:8e:4e:58:f9:15:4a:1c:7e: 64:8f:d4:c1:a0:68:43:6f:07:9d:54:65:99:a9:bb: e6:fe:9d:d1:c8:68:54:6a:60:c7:5e:95:1a:64:71: b6:9d:e6:86:18:85:29:9b:f0:7d:bc:49:74:58:68: dc:d1:79:b4:5d:d0:da:6c:e5:28:1c:ce:6c:bf:8b: ac:31:39:88:6a:0c:f4:d9:1d:fa:05:bd:02:c4:0c: b6:fb:4b:0d:c4:ff:94:f7:b1:04:89:cd:db:f4:ae: 97:5f:7f:27:a8:b9:08:12:f6:75:e9:78:3a:54:6a: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AA:3B:0B:BD:30:59:B3:4F:68:96:D6:70:B3:F2:C5:58:D3:35:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/c47b3125-e43c-3314-9fdc-30c1d0223270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl X509v3 Authority Key Identifier: keyid:9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer sbgp-ipAddrBlock: critical IPv4: 142.249.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c7:51:3c:6f:a9:b9:f4:d9:f6:a3:96:01:f8:79:06:04:c7: 1a:aa:27:79:6d:55:3c:62:d5:8e:5f:d6:4d:0b:c2:96:fe:5e: 7f:ea:95:92:5b:8f:38:f5:4d:e4:71:04:85:86:0f:61:ea:30: a5:15:42:75:73:05:20:af:09:fb:33:da:8a:6c:25:0d:3f:fb: 81:42:8d:21:02:64:b7:57:a7:c3:7a:dd:82:9a:f2:f7:b5:46: be:a0:ae:a9:e8:32:1e:8f:96:eb:59:c9:49:91:7f:8b:af:0a: c9:ac:e0:75:f7:b9:39:9d:5e:ab:54:33:f3:68:34:92:de:c6: 31:7b:6b:c9:4a:a4:a5:fc:56:ea:2a:31:ec:18:57:55:d3:1d: 34:59:5d:b4:f4:dd:ff:16:3a:2b:7e:07:5e:9c:f7:ec:c8:64: cd:e6:ba:d2:d3:cb:88:06:0d:08:4a:40:3f:47:ea:26:30:13: 53:fa:89:44:91:f7:c5:78:76:41:22:a7:b1:69:d1:42:39:3c: e8:be:66:6d:cf:cd:5c:9a:e3:05:cf:6e:75:fa:8d:fd:a8:0a: 3c:68:96:1d:80:40:ff:83:81:08:4c:9b:67:da:89:5f:d6:6e: 2d:cd:bd:a3:4e:e0:43:42:f2:d4:89:24:13:e9:4e:08:6a:e9: fc:43:f4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLI9Ix3TwKRt/eKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ1Yjg1MjYtM2I1YS00NmMyLWI5MjUtNmM0MDEzOTI4 OWNkMB4XDTI1MTAwOTIyNTk0MloXDTI2MDEwNzIzNTk0MlowLzEtMCsGA1UEAxMk ZjcxZmFkMDAtZGVkMy00N2E0LWIzMTAtMjU0NjNhZDZjYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisopUQtIBMzgcNH8jNKDcIXVizD1KVi0kDdL gWs28jMLmITtZMGG20PzMibQMfk1By6oyiu81BlGN+BOTb0g5lbDXer4185WGMqh 3euTUedZL7rUG1KOZF0hBI6v3VPzqN1+UFzkMbzvPPpA8Wb5SJHWyd/TIH88Lv+C 6prJxENy+C+3F65FAkyn5EpXjk5Y+RVKHH5kj9TBoGhDbwedVGWZqbvm/p3RyGhU amDHXpUaZHG2neaGGIUpm/B9vEl0WGjc0Xm0XdDabOUoHM5sv4usMTmIagz02R36 Bb0CxAy2+0sNxP+U97EEic3b9K6XX38nqLkIEvZ16Xg6VGrM/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaqOwu9MFmzT2iW1nCz8sVY0zXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDVi ODUyNi0zYjVhLTQ2YzItYjkyNS02YzQwMTM5Mjg5Y2QvYzQ3YjMxMjUtZTQzYy0z MzE0LTlmZGMtMzBjMWQwMjIzMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQ1Yjg1MjYtM2I1YS00NmMyLWI5 MjUtNmM0MDEzOTI4OWNkLzU0NWI4NTI2LTNiNWEtNDZjMi1iOTI1LTZjNDAxMzky ODljZC5jcmwwHwYDVR0jBBgwFoAUm3H71WvhRr1EkTToTzVL0RJXo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDViODUyNi0zYjVhLTQ2YzItYjkyNS02YzQw MTM5Mjg5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/HUTxvqbn02fajlgH4eQYExxqqJ3ltVTxi1Y5f1k0Lwpb+Xn/qlZJb jzj1TeRxBIWGD2HqMKUVQnVzBSCvCfsz2opsJQ0/+4FCjSECZLdXp8N63YKa8ve1 Rr6grqnoMh6PlutZyUmRf4uvCsms4HX3uTmdXqtUM/NoNJLexjF7a8lKpKX8Vuoq MewYV1XTHTRZXbT03f8WOit+B16c9+zIZM3mutLTy4gGDQhKQD9H6iYwE1P6iUSR 98V4dkEip7Fp0UI5POi+Zm3PzVya4wXPbnX6jf2oCjxolh2AQP+DgQhMm2faiV/W bi3NvaNO4ENC8tSJJBPpTghq6fxD9Dc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:55:36 2025 by rpki-client