$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa File: cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa (raw, json) Hash identifier: SR7hUHPRl4255GlYR8YlaEwt8gtyzApiKZW1b9d2MzI= Subject key identifier: 4D:F5:85:D2:EB:28:56:2B:02:6C:BC:EC:06:08:23:68:77:FB:80:C9 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584AEE268B8A55983C373A1EF900 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 11260 IP address blocks: 142.67.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:8b:8a:55:98:3c:37:3a:1e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=27864855-db08-4ea3-be28-5f18c441ee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:95:20:2e:1a:94:c2:ce:5f:1c:16:61:7f: 39:39:44:05:e2:11:28:ff:2f:47:24:28:e7:20:fd: 90:93:54:2a:40:ba:35:48:a8:c8:33:36:80:b3:7c: cb:39:b8:8f:c2:9a:ae:10:5b:02:34:1f:64:aa:f6: bf:49:15:9b:23:e1:e3:63:4e:c3:ef:ea:e9:24:65: 22:df:0c:b0:2b:7d:ab:62:1e:fe:c4:43:9d:2c:1d: 96:2b:62:01:9f:d8:58:88:ac:a6:ea:83:75:a7:ba: 6e:c6:5e:b9:f6:16:cb:da:03:84:6e:d3:ab:df:ee: c5:76:69:9e:2f:0a:04:79:aa:d2:94:33:c5:e9:50: 98:c6:3f:4d:4b:e9:81:de:d1:53:b0:6b:33:83:29: e9:91:02:f9:ad:c0:2a:dd:a8:7e:fd:0d:13:be:97: 45:4f:b8:1e:c1:5d:24:a9:d3:9e:11:c8:31:97:39: 9f:b6:55:4f:72:61:18:ed:95:c5:44:1b:86:4f:94: b6:2b:25:83:63:79:01:17:c2:75:70:75:84:c3:76: f6:b1:52:4c:0c:2d:2b:b1:72:ed:84:7d:44:b7:bf: 9a:3a:d1:0c:03:91:b9:48:57:11:a9:68:a5:91:2b: bb:d6:6f:3f:e8:15:f3:ed:b1:62:9f:e5:87:b3:1b: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:85:D2:EB:28:56:2B:02:6C:BC:EC:06:08:23:68:77:FB:80:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/cad8fe8a-2d46-3dab-a576-1e4e6790edad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 142.67.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fb:0e:21:b6:d2:af:53:a7:2b:87:da:3a:31:46:b9:e4:a6: 0f:ab:a7:8b:94:c0:2a:ae:fb:a7:a4:c5:4a:82:27:2e:45:91: 86:57:36:46:c1:7c:f7:60:58:df:5e:39:46:fd:6c:bb:56:7d: 78:2a:38:06:dd:95:e2:bd:7a:7e:c5:74:d2:7b:bc:c8:81:d0: cb:63:cf:97:37:87:9b:ff:10:5b:2e:af:62:7c:ad:76:dd:1c: c4:73:ad:d3:f8:af:21:d0:97:ab:f4:b0:13:8c:af:35:ab:65: d3:b8:1f:f6:c8:e5:b6:71:c6:da:fc:6d:79:f4:78:60:8b:17: 45:c5:f7:4a:bc:79:10:22:e6:ba:eb:a1:9d:b4:e6:f1:bf:4d: b3:9e:38:c0:e7:7f:10:c8:31:ae:2b:41:1a:d1:d6:c5:c4:6f: f6:95:8c:6b:fd:41:86:c6:4d:75:a4:65:c5:c2:03:4c:9b:84: 43:84:09:c4:f5:f5:f4:f6:9a:5d:01:21:13:03:3e:83:8a:c6: 92:2a:0a:11:5c:5a:2e:22:05:e2:f9:46:f6:74:41:97:5b:4d: a5:cb:91:37:68:5f:cf:db:bf:f4:ee:90:53:90:f7:8e:f6:98: ec:16:0e:1e:97:a7:84:d4:89:29:6c:a3:9f:f5:cf:0a:20:27: a7:ef:c1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJouKVZg8Nzoe+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk Mjc4NjQ4NTUtZGIwOC00ZWEzLWJlMjgtNWYxOGM0NDFlZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpaVIC4alMLOXxwWYX85OUQF4hEo/y9HJCjn IP2Qk1QqQLo1SKjIMzaAs3zLObiPwpquEFsCNB9kqva/SRWbI+HjY07D7+rpJGUi 3wywK32rYh7+xEOdLB2WK2IBn9hYiKym6oN1p7puxl659hbL2gOEbtOr3+7Fdmme LwoEearSlDPF6VCYxj9NS+mB3tFTsGszgynpkQL5rcAq3ah+/Q0TvpdFT7gewV0k qdOeEcgxlzmftlVPcmEY7ZXFRBuGT5S2KyWDY3kBF8J1cHWEw3b2sVJMDC0rsXLt hH1Et7+aOtEMA5G5SFcRqWilkSu71m8/6BXz7bFin+WHsxsAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE31hdLrKFYrAmy87AYII2h3+4DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvY2FkOGZlOGEtMmQ0Ni0z ZGFiLWE1NzYtMWU0ZTY3OTBlZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjkPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr7DiG20q9TpyuH2joxRrnkpg+rp4uUwCqu+6ekxUqCJy5FkYZXNkbB fPdgWN9eOUb9bLtWfXgqOAbdleK9en7FdNJ7vMiB0Mtjz5c3h5v/EFsur2J8rXbd HMRzrdP4ryHQl6v0sBOMrzWrZdO4H/bI5bZxxtr8bXn0eGCLF0XF90q8eRAi5rrr oZ205vG/TbOeOMDnfxDIMa4rQRrR1sXEb/aVjGv9QYbGTXWkZcXCA0ybhEOECcT1 9fT2ml0BIRMDPoOKxpIqChFcWi4iBeL5RvZ0QZdbTaXLkTdoX8/bv/TukFOQ9472 mOwWDh6Xp4TUiSlso5/1zwogJ6fvwSQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:42 2025 by rpki-client