$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa File: cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa (raw, json) Hash identifier: miSXtEa67PcdSDpz/xlnOoBm/6XmNwCPRi4/WQZfzFo= Subject key identifier: B0:78:6E:83:EF:16:6F:8A:05:03:93:69:67:56:44:39:C5:56:9F:4B Certificate issuer: /CN=545b8526-3b5a-46c2-b925-6c40139289cd Certificate serial: 010D0C9F4328584B90375DD85B581242DD2ABE00 Authority key identifier: 9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa Signing time: Sat 18 Oct 2025 14:15:40 +0000 ROA not before: Sat 18 Oct 2025 14:15:40 +0000 ROA not after: Fri 16 Jan 2026 15:15:40 +0000 asID: 53388 IP address blocks: 142.249.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:37:5d:d8:5b:58:12:42:dd:2a:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545b8526-3b5a-46c2-b925-6c40139289cd Validity Not Before: Oct 18 14:15:40 2025 GMT Not After : Jan 16 15:15:40 2026 GMT Subject: CN=e71b4cc7-acfc-4fe4-b08b-fa300f09c4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:38:48:a3:6c:11:7b:3b:a9:52:ac:bf:29: 89:69:4c:15:9f:a2:94:05:1b:c8:81:9a:80:ed:81: b0:46:36:1d:02:bc:38:e5:bb:78:7d:56:e3:f9:50: ff:ba:cf:51:37:92:ef:fc:60:b4:96:05:8f:47:ec: 97:a0:26:16:73:d4:66:cb:40:59:d0:2f:da:cc:98: cb:26:21:34:f8:c3:70:5b:e9:79:40:ef:c0:3b:d3: 2c:3d:b6:b2:c7:41:da:8b:1c:77:61:c4:9c:53:5f: c2:24:c3:96:a4:25:d3:5e:d5:8a:2b:ea:21:dc:08: 40:2c:60:97:ab:48:7f:f5:6d:fb:5d:ff:cf:d3:ed: fb:ad:4d:be:d7:54:be:fd:95:9c:c3:a4:4a:5b:5b: d4:8f:ee:52:ea:64:e6:37:07:f4:36:6c:66:7f:34: 03:50:79:23:a4:dd:78:12:5f:c3:fb:26:cf:5b:21: d2:5e:c7:f4:f1:d2:99:df:d4:ba:89:c8:68:ab:8f: b2:81:cd:e0:87:2b:30:6f:3a:f8:95:23:f1:99:85: e5:76:02:a2:c2:16:10:41:89:66:80:6b:7e:be:e5: 08:c0:d7:64:bf:41:b9:86:a9:ba:00:cf:2a:4b:67: e0:ad:70:9f:94:fe:42:50:d3:1f:04:c1:bd:1e:e4: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:78:6E:83:EF:16:6F:8A:05:03:93:69:67:56:44:39:C5:56:9F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl X509v3 Authority Key Identifier: keyid:9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer sbgp-ipAddrBlock: critical IPv4: 142.249.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:be:ee:2b:42:9e:ad:26:52:56:02:d5:f3:68:bd:c1:d2:8c: ef:0b:45:94:46:85:76:db:80:6b:b5:b5:97:c2:e7:63:13:7d: 0e:07:97:a9:f7:4b:84:02:58:4c:76:58:e6:bf:6d:f0:4b:0a: ed:eb:61:77:a3:5f:ab:b5:c6:98:eb:19:fa:f5:27:89:ee:3b: cb:74:79:f0:e9:83:4c:0c:ff:f1:c7:96:ca:33:d3:f0:10:27: 49:eb:4b:c4:ca:32:c7:d9:b8:b2:1d:2c:c4:4e:c6:84:04:21: c7:3e:d4:e7:fa:dc:7e:48:b2:6b:5d:86:ac:23:a3:09:d3:4d: 06:78:69:f8:9c:04:8e:2d:57:b9:ea:58:3d:47:cf:15:f2:3a: 53:c4:88:04:41:28:bc:d8:d4:c2:2e:c3:69:f1:c5:64:7e:1d: 11:fa:ac:1f:ee:22:44:ed:8f:a2:cf:c2:15:13:05:ce:be:81: 46:18:0f:89:4c:07:f2:b7:11:80:8e:c1:b1:e4:e2:45:b2:88: cf:43:f2:60:fb:03:6b:da:18:03:76:dc:cc:21:d8:be:22:65: de:07:28:24:4b:18:6c:05:e6:28:3a:03:b0:e1:aa:ab:8b:f0: 46:0a:e1:8e:4e:96:33:ed:d0:84:0d:86:50:c0:a9:ab:1d:d6: 40:10:b0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQN13YW1gSQt0qvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ1Yjg1MjYtM2I1YS00NmMyLWI5MjUtNmM0MDEzOTI4 OWNkMB4XDTI1MTAxODE0MTU0MFoXDTI2MDExNjE1MTU0MFowLzEtMCsGA1UEAxMk ZTcxYjRjYzctYWNmYy00ZmU0LWIwOGItZmEzMDBmMDljNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzs4SKNsEXs7qVKsvymJaUwVn6KUBRvIgZqA 7YGwRjYdArw45bt4fVbj+VD/us9RN5Lv/GC0lgWPR+yXoCYWc9Rmy0BZ0C/azJjL JiE0+MNwW+l5QO/AO9MsPbayx0Haixx3YcScU1/CJMOWpCXTXtWKK+oh3AhALGCX q0h/9W37Xf/P0+37rU2+11S+/ZWcw6RKW1vUj+5S6mTmNwf0NmxmfzQDUHkjpN14 El/D+ybPWyHSXsf08dKZ39S6ichoq4+ygc3ghyswbzr4lSPxmYXldgKiwhYQQYlm gGt+vuUIwNdkv0G5hqm6AM8qS2fgrXCflP5CUNMfBMG9HuTVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB4boPvFm+KBQOTaWdWRDnFVp9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDVi ODUyNi0zYjVhLTQ2YzItYjkyNS02YzQwMTM5Mjg5Y2QvY2YzZjJhNDQtNjUxZC0z MDgwLWExZmQtMzE1ODRkMWQzY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQ1Yjg1MjYtM2I1YS00NmMyLWI5 MjUtNmM0MDEzOTI4OWNkLzU0NWI4NTI2LTNiNWEtNDZjMi1iOTI1LTZjNDAxMzky ODljZC5jcmwwHwYDVR0jBBgwFoAUm3H71WvhRr1EkTToTzVL0RJXo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDViODUyNi0zYjVhLTQ2YzItYjkyNS02YzQw MTM5Mjg5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO+7itCnq0mUlYC1fNovcHSjO8LRZRGhXbbgGu1tZfC52MTfQ4Hl6n3 S4QCWEx2WOa/bfBLCu3rYXejX6u1xpjrGfr1J4nuO8t0efDpg0wM//HHlsoz0/AQ J0nrS8TKMsfZuLIdLMROxoQEIcc+1Of63H5IsmtdhqwjownTTQZ4aficBI4tV7nq WD1HzxXyOlPEiARBKLzY1MIuw2nxxWR+HRH6rB/uIkTtj6LPwhUTBc6+gUYYD4lM B/K3EYCOwbHk4kWyiM9D8mD7A2vaGAN23Mwh2L4iZd4HKCRLGGwF5ig6A7DhqquL 8EYK4Y5OljPt0IQNhlDAqasd1kAQsPk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:39 2025 by rpki-client