$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa File: 725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa (raw, json) Hash identifier: IUvEsQJpuhNOp24xe/65RIU7pAKFlzB6VvEqdO1QFq4= Subject key identifier: 9A:6E:AB:DA:3D:26:2A:60:79:8A:3E:4F:C9:B9:AE:2D:0F:20:EB:AC Certificate issuer: /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Certificate serial: 010D0C9F4328584B80B7719C70988BDBA0390680 Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 21724 IP address blocks: 142.54.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:71:9c:70:98:8b:db:a0:39:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=a87713d5-37bd-4e5d-b0b8-bee377a48bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:73:01:5c:cb:69:7a:ab:62:5a:a6:b4:e4: b9:26:02:be:c0:dc:91:9d:39:0a:8e:f8:c8:c8:e2: 1b:a9:f7:1e:5e:1e:b2:8b:28:24:64:58:cd:f8:3c: 43:6d:f0:13:f6:cb:cd:1b:1e:08:1f:62:e2:d3:ab: f5:e3:b8:e7:33:a7:6f:b3:fc:73:55:19:92:2c:ec: 01:81:0a:86:bb:b9:43:87:9b:59:19:29:13:7d:a4: b1:58:ce:ea:52:0b:99:23:7e:55:90:ef:a5:eb:e1: 18:98:6e:6a:8d:f8:15:da:d7:1a:a3:26:f6:5f:d1: b0:54:c6:e6:b6:8f:cd:d2:b0:38:f6:dd:8a:0c:49: 20:c6:d3:45:af:1d:f7:24:b3:17:0c:0d:67:c9:50: 09:00:db:72:56:11:77:d3:42:35:8d:c2:41:ed:b2: 55:bc:2b:41:be:ca:38:84:79:7a:ef:12:c0:b7:ea: d2:ff:15:e3:86:7d:9e:12:20:49:e0:72:a3:c7:3e: 02:bc:96:8f:c7:7c:d8:fb:1d:84:c4:52:69:38:88: bd:8a:e5:5c:01:8e:38:89:05:13:24:66:1f:09:b8: cd:53:98:fe:0e:7e:24:30:f0:ae:7b:10:a8:3f:1d: 59:7f:8e:17:79:b5:87:43:00:d5:e2:f1:df:f3:41: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:AB:DA:3D:26:2A:60:79:8A:3E:4F:C9:B9:AE:2D:0F:20:EB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl X509v3 Authority Key Identifier: keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer sbgp-ipAddrBlock: critical IPv4: 142.54.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9c:fb:3f:44:f7:9c:5e:e6:88:8a:74:22:52:a5:9f:4f:e1: f3:2c:54:c5:0c:3c:17:5e:73:50:e1:83:3b:30:84:69:4e:5f: 7f:bb:56:10:32:1f:d9:b8:2d:0a:31:cf:aa:42:36:19:0d:fb: c8:30:08:91:bb:83:e2:1d:23:6a:31:63:12:f1:96:e9:75:c9: 16:c9:a2:32:17:8d:2f:e1:27:66:8c:07:a1:03:4b:77:54:5c: 77:a2:7a:26:f2:77:83:5c:f5:c0:98:2e:a9:33:93:2d:8d:6f: 7d:fe:78:91:19:fe:e5:46:2c:21:fb:23:fc:da:cf:1a:57:de: 48:a5:53:6a:9c:96:62:c0:71:cc:13:82:3e:01:86:d9:a5:7c: 68:97:7b:bd:65:60:18:7a:07:67:6d:21:16:fd:16:e6:4b:5e: cf:b9:d9:08:86:75:5b:85:38:d1:05:1a:56:c3:aa:51:50:e5: 09:3f:c4:cb:8a:7a:7e:a7:23:ef:f0:4b:fe:0c:53:2c:13:66: 89:b0:7a:b6:7e:89:c5:cf:f9:44:7f:b4:5b:a2:7c:55:3c:ff: ce:db:7c:41:df:40:26:21:46:ba:30:1b:d6:8a:13:85:c9:45: ec:d5:fc:93:4b:8f:10:f9:90:bc:b8:7a:13:62:78:2c:3a:85: 45:8b:ff:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3GccJiL26A5BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzOGUyZWQtOTBlNC00ODk2LThhNWItMmRiNDMzNzZh MzJjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YTg3NzEzZDUtMzdiZC00ZTVkLWIwYjgtYmVlMzc3YTQ4YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5ZzAVzLaXqrYlqmtOS5JgK+wNyRnTkKjvjI yOIbqfceXh6yiygkZFjN+DxDbfAT9svNGx4IH2Li06v147jnM6dvs/xzVRmSLOwB gQqGu7lDh5tZGSkTfaSxWM7qUguZI35VkO+l6+EYmG5qjfgV2tcaoyb2X9GwVMbm to/N0rA49t2KDEkgxtNFrx33JLMXDA1nyVAJANtyVhF300I1jcJB7bJVvCtBvso4 hHl67xLAt+rS/xXjhn2eEiBJ4HKjxz4CvJaPx3zY+x2ExFJpOIi9iuVcAY44iQUT JGYfCbjNU5j+Dn4kMPCuexCoPx1Zf44XebWHQwDV4vHf80G8VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpuq9o9JipgeYo+T8m5ri0PIOusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4 ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0MzM3NmEzMmMvNzI1YmQ0ZDctN2UwMC0z YzMxLTljYmMtN2ZmNTFhMGJhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAzOGUyZWQtOTBlNC00ODk2LThh NWItMmRiNDMzNzZhMzJjLzYwMzhlMmVkLTkwZTQtNDg5Ni04YTViLTJkYjQzMzc2 YTMyYy5jcmwwHwYDVR0jBBgwFoAUKQXSFcuRrCTkVNF0V9vyB3VzTUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDM4ZTJlZC05MGU0LTQ4OTYtOGE1Yi0yZGI0 MzM3NmEzMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjjYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOc+z9E95xe5oiKdCJSpZ9P4fMsVMUMPBdec1DhgzswhGlOX3+7VhAy H9m4LQoxz6pCNhkN+8gwCJG7g+IdI2oxYxLxlul1yRbJojIXjS/hJ2aMB6EDS3dU XHeieibyd4Nc9cCYLqkzky2Nb33+eJEZ/uVGLCH7I/zazxpX3kilU2qclmLAccwT gj4BhtmlfGiXe71lYBh6B2dtIRb9FuZLXs+52QiGdVuFONEFGlbDqlFQ5Qk/xMuK en6nI+/wS/4MUywTZomwerZ+icXP+UR/tFuifFU8/87bfEHfQCYhRrowG9aKE4XJ RezV/JNLjxD5kLy4ehNieCw6hUWL/1s= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:46 2025 by rpki-client