$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa File: bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa (raw, json) Hash identifier: kCaLHXJchOrKM+57mp/7LRiYXEjCh73rsUyevOuA8Uc= Subject key identifier: FE:A5:BF:E1:85:B3:73:0E:2F:11:32:1E:AC:17:09:69:23:FF:33:3B Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584B87BD0411EAF1B83050BC2400 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa Signing time: Wed 15 Oct 2025 13:22:40 +0000 ROA not before: Wed 15 Oct 2025 13:22:40 +0000 ROA not after: Tue 13 Jan 2026 14:22:40 +0000 asID: 153371 IP address blocks: 142.249.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:bd:04:11:ea:f1:b8:30:50:bc:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Oct 15 13:22:40 2025 GMT Not After : Jan 13 14:22:40 2026 GMT Subject: CN=aceff481-3714-4303-96ce-464e7df1101d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:e8:66:ac:89:34:b5:97:e2:56:57:b8:23: 3e:d0:b8:29:69:c6:aa:22:e0:e5:fa:18:6a:75:f1: 08:e5:f3:ab:a4:3d:01:d7:fd:e2:0e:19:9f:64:72: 8f:75:c5:ac:0f:cf:43:41:73:ba:fd:c6:9d:e3:75: 8c:02:63:37:6c:ba:95:55:db:92:0e:65:18:9f:8e: 5f:88:d0:b6:ad:00:e5:09:1e:c1:ea:16:77:0b:b6: f3:71:1a:5f:94:47:37:b7:74:4e:77:2a:da:11:f8: 3a:2c:1c:65:20:57:76:5c:73:d7:cd:91:09:2a:cb: f1:d5:14:2a:9c:73:1c:16:b9:64:21:24:75:d5:74: 15:11:f6:ed:7d:81:b6:1f:6f:c0:0e:42:0f:73:aa: 48:88:55:55:e0:5e:b7:ac:98:b8:21:84:20:12:e0: 07:f9:22:dd:66:a6:a4:48:80:88:67:ae:fc:d7:02: db:b4:0c:98:d5:08:38:ff:9c:e8:c8:0d:e9:93:ac: 3c:42:58:ea:62:01:32:9a:76:79:18:a7:bb:5b:ce: 9b:03:7f:45:69:ee:71:c9:64:51:6f:30:86:4f:26: 5f:7d:15:54:46:46:7f:7b:b2:17:7d:7c:85:82:a5: 2b:16:07:b3:a6:d0:4f:f3:cf:5d:2c:29:93:55:a9: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:BF:E1:85:B3:73:0E:2F:11:32:1E:AC:17:09:69:23:FF:33:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 142.249.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2c:48:02:1e:b1:1d:b2:fc:66:c8:6e:a7:f8:09:8d:79:0e: 70:da:2e:53:ab:75:e5:3b:4f:2f:23:55:ee:26:7a:82:76:c8: 2e:0a:45:41:9f:d6:ab:59:6d:94:fb:c7:49:7a:28:25:c7:f1: e7:d8:58:bb:97:9b:99:2c:52:58:54:ad:ec:0d:29:c9:8f:01: e8:ee:68:b1:9d:40:18:bf:8c:c6:17:73:2e:8d:92:9a:1f:d4: c7:8a:95:1c:39:97:51:35:d1:ba:f2:0b:65:0f:69:90:38:3d: bd:fe:77:48:94:cb:2e:69:5e:f9:8f:6a:8d:bb:e7:73:de:8c: 0f:56:69:79:86:3a:1e:52:9b:7f:03:ef:22:15:19:37:2e:7e: bb:4b:6c:30:34:0d:f2:fe:e3:f6:51:40:33:0b:2e:89:40:99: 2b:6e:ba:ee:a2:4e:b6:b0:2c:65:f6:cb:61:63:a5:1b:cd:c6: 39:b7:8a:13:47:49:34:13:0a:5b:e5:4d:cb:1f:1b:d9:f6:09: db:89:22:23:eb:f7:4f:42:fe:b3:d0:42:37:e8:0f:69:56:24: cb:cd:f5:9a:79:1f:1b:34:d4:b7:24:ed:ff:f0:a4:9a:37:d4: c2:8e:7e:17:d4:e1:65:9f:f1:f5:ed:c7:db:25:38:8f:19:a5: 77:d4:a6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHvQQR6vG4MFC8JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MTAxNTEzMjI0MFoXDTI2MDExMzE0MjI0MFowLzEtMCsGA1UEAxMk YWNlZmY0ODEtMzcxNC00MzAzLTk2Y2UtNDY0ZTdkZjExMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvPoZqyJNLWX4lZXuCM+0LgpacaqIuDl+hhq dfEI5fOrpD0B1/3iDhmfZHKPdcWsD89DQXO6/cad43WMAmM3bLqVVduSDmUYn45f iNC2rQDlCR7B6hZ3C7bzcRpflEc3t3ROdyraEfg6LBxlIFd2XHPXzZEJKsvx1RQq nHMcFrlkISR11XQVEfbtfYG2H2/ADkIPc6pIiFVV4F63rJi4IYQgEuAH+SLdZqak SICIZ6781wLbtAyY1Qg4/5zoyA3pk6w8QljqYgEymnZ5GKe7W86bA39Fae5xyWRR bzCGTyZffRVURkZ/e7IXfXyFgqUrFgezptBP889dLCmTVakZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6lv+GFs3MOLxEyHqwXCWkj/zM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvYmNmM2VkNmYtODhhNi0z ZDhhLWFmZDEtYjdlNzVmZjU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwsSAIesR2y/GbIbqf4CY15DnDaLlOrdeU7Ty8jVe4meoJ2yC4KRUGf 1qtZbZT7x0l6KCXH8efYWLuXm5ksUlhUrewNKcmPAejuaLGdQBi/jMYXcy6Nkpof 1MeKlRw5l1E10bryC2UPaZA4Pb3+d0iUyy5pXvmPao2753PejA9WaXmGOh5Sm38D 7yIVGTcufrtLbDA0DfL+4/ZRQDMLLolAmStuuu6iTrawLGX2y2FjpRvNxjm3ihNH STQTClvlTcsfG9n2CduJIiPr909C/rPQQjfoD2lWJMvN9Zp5Hxs01Lck7f/wpJo3 1MKOfhfU4WWf8fXtx9slOI8ZpXfUpjs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:05 2025 by rpki-client