$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa File: ccfaa14e-0604-3f68-b212-d207126df7b1.roa (raw, json) Hash identifier: vXClC88ACDw1+foxI59s8CfuCzV3L2bFCq9Wcho71Po= Subject key identifier: C2:52:68:55:DF:C9:C2:E6:BE:EC:0A:E4:B0:28:2C:C3:89:56:88:18 Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584B85B9D645B5A2532C6E928040 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa Signing time: Tue 14 Oct 2025 20:04:39 +0000 ROA not before: Tue 14 Oct 2025 20:04:39 +0000 ROA not after: Mon 12 Jan 2026 21:04:39 +0000 asID: 401449 IP address blocks: 142.248.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:b9:d6:45:b5:a2:53:2c:6e:92:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Oct 14 20:04:39 2025 GMT Not After : Jan 12 21:04:39 2026 GMT Subject: CN=a72069a4-7151-4523-897c-ffb7ce2ccc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:f7:b5:bf:d1:56:d1:e9:40:ae:c6:2f:bf: c6:d9:b8:0f:5b:c5:d8:5c:10:c4:9f:4c:37:4a:f1: ca:31:a8:07:bd:4c:af:f2:47:aa:5a:ca:49:0a:d0: 0c:3e:09:2a:25:d6:7f:28:68:1f:e7:b0:4d:82:1f: 68:3c:28:1d:ae:72:95:5c:ec:3a:3e:b3:5a:c0:33: e7:8b:4c:ca:7d:35:81:3f:8c:2b:fe:90:c5:4b:38: 00:3a:d9:65:eb:0f:01:ce:1d:bd:97:b0:aa:43:89: 54:d1:88:aa:66:24:70:84:20:ff:fd:74:30:13:20: 44:c9:d8:16:d0:d1:f2:75:c7:50:68:1e:78:39:9d: 0a:ed:d3:88:91:1e:34:28:1b:45:30:06:91:31:3f: 45:c5:49:03:92:1e:82:45:56:57:7b:02:4b:80:1c: 5e:bf:17:ea:17:9a:08:55:16:d0:84:fc:46:6b:2a: bb:3e:b0:e6:7c:a7:70:95:3c:31:b9:0e:a7:c9:80: 2f:ec:e2:a0:41:70:78:9c:af:5d:59:0f:48:58:63: 49:d6:71:c7:51:f2:4d:07:fb:9d:4a:81:8d:19:16: f7:c8:b4:14:b0:d1:f8:9c:17:c2:2c:2a:4c:45:9d: fc:b8:b1:00:20:22:3f:9c:6f:90:75:13:e1:d2:e8: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:68:55:DF:C9:C2:E6:BE:EC:0A:E4:B0:28:2C:C3:89:56:88:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv4: 142.248.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:11:cb:c4:1e:0c:a0:7e:c1:fb:7e:f2:bd:65:80:4e:6a:cb: fa:77:89:14:62:26:ac:1c:9f:5a:54:fb:5f:43:32:98:dc:db: 32:b3:c8:63:9c:21:ea:26:be:c0:bb:86:dc:d3:f1:cf:df:e2: 6d:38:a2:88:a4:dd:2c:8f:34:d7:59:9f:fe:e3:d8:6d:48:39: 48:fe:93:85:33:2a:19:13:cf:59:28:19:26:3d:04:6d:10:d6: f5:48:26:d4:cb:f6:24:a8:f8:26:e8:5f:c0:e1:fb:29:57:7c: 31:34:a6:46:d0:fb:7c:95:45:34:6f:2c:06:8d:e2:bf:5f:a1: ac:c1:78:f1:36:b4:71:ba:d9:0b:c2:1f:90:e2:36:90:4a:c9: 6c:27:65:57:f3:9e:9d:65:bf:b4:67:80:b7:e1:a2:1f:6c:db: 44:96:03:55:9d:19:bd:4f:79:a8:10:42:59:23:db:3b:a1:14: 3c:92:e3:92:dc:bf:84:a1:91:5a:37:97:19:99:d0:64:75:37: 25:66:84:23:d5:c8:31:91:d2:98:2b:24:5a:d2:e0:a6:e9:76: 1d:fe:02:d3:41:b3:c6:62:ea:00:b0:7e:3a:92:9d:dd:5b:7d: 13:e1:19:c9:a1:88:19:56:e5:af:dd:c6:3a:92:c6:46:4c:f2: 3c:9d:bb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFudZFtaJTLG6SgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI1MTAxNDIwMDQzOVoXDTI2MDExMjIxMDQzOVowLzEtMCsGA1UEAxMk YTcyMDY5YTQtNzE1MS00NTIzLTg5N2MtZmZiN2NlMmNjYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEj3tb/RVtHpQK7GL7/G2bgPW8XYXBDEn0w3 SvHKMagHvUyv8keqWspJCtAMPgkqJdZ/KGgf57BNgh9oPCgdrnKVXOw6PrNawDPn i0zKfTWBP4wr/pDFSzgAOtll6w8Bzh29l7CqQ4lU0YiqZiRwhCD//XQwEyBEydgW 0NHydcdQaB54OZ0K7dOIkR40KBtFMAaRMT9FxUkDkh6CRVZXewJLgBxevxfqF5oI VRbQhPxGayq7PrDmfKdwlTwxuQ6nyYAv7OKgQXB4nK9dWQ9IWGNJ1nHHUfJNB/ud SoGNGRb3yLQUsNH4nBfCLCpMRZ38uLEAICI/nG+QdRPh0uhzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJSaFXfycLmvuwK5LAoLMOJVogYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvY2NmYWExNGUtMDYwNC0z ZjY4LWIyMTItZDIwNzEyNmRmN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcRy8QeDKB+wft+8r1lgE5qy/p3iRRiJqwcn1pU+19DMpjc2zKzyGOc IeomvsC7htzT8c/f4m04ooik3SyPNNdZn/7j2G1IOUj+k4UzKhkTz1koGSY9BG0Q 1vVIJtTL9iSo+CboX8Dh+ylXfDE0pkbQ+3yVRTRvLAaN4r9foazBePE2tHG62QvC H5DiNpBKyWwnZVfznp1lv7RngLfhoh9s20SWA1WdGb1PeagQQlkj2zuhFDyS45Lc v4ShkVo3lxmZ0GR1NyVmhCPVyDGR0pgrJFrS4Kbpdh3+AtNBs8Zi6gCwfjqSnd1b fRPhGcmhiBlW5a/dxjqSxkZM8jydu0Q= -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:52 2025 by rpki-client