$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa File: b35b0921-1e78-3994-826e-db1aceee4813.roa (raw, json) Hash identifier: qQ5u8YcaDsS2/fPFX1I1KzdDMtG5HG/foW/2DuKUuGE= Subject key identifier: EF:AD:00:DD:BA:30:2A:50:CB:D4:92:29:61:49:95:D0:A7:56:40:97 Certificate issuer: /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Certificate serial: 010D0C9F4328584B7A524C878A46E673B17C6A00 Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa Signing time: Fri 10 Oct 2025 18:02:08 +0000 ROA not before: Fri 10 Oct 2025 18:02:08 +0000 ROA not after: Thu 08 Jan 2026 19:02:08 +0000 asID: 400882 IP address blocks: 142.249.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:52:4c:87:8a:46:e6:73:b1:7c:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Validity Not Before: Oct 10 18:02:08 2025 GMT Not After : Jan 8 19:02:08 2026 GMT Subject: CN=8abb31b3-85a2-4bc2-bbac-61e30de050fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:52:e8:10:d6:65:17:81:3f:92:d7:1c:c9: df:61:44:0f:be:0d:b5:17:c3:ba:52:46:43:60:71: 37:ce:6c:a7:c3:2e:85:3e:85:f3:48:0b:57:19:a0: de:8c:7b:8a:fa:6a:47:33:aa:c7:55:f9:71:6a:6e: 8c:e1:7a:8b:49:20:2a:a6:36:1c:90:9f:02:3c:cb: 99:3a:a8:07:94:c4:7c:5c:a9:74:ef:68:09:db:70: a3:e1:e9:55:09:47:12:ab:a7:8d:94:64:8c:90:3b: 87:dd:1b:07:84:10:43:e6:e1:91:34:5f:eb:6b:42: 04:a9:6e:10:2a:b5:6c:71:c2:23:71:f7:ed:c6:24: 1b:39:c0:b4:56:ac:0a:35:8c:e7:55:5b:ba:9c:25: 7c:76:ff:b3:78:66:c8:c1:f7:89:fc:00:3e:83:fd: 6d:d7:d5:0a:e9:c8:e1:42:1e:37:81:d0:08:47:40: a2:bb:c0:f4:8b:1a:50:49:14:42:9c:3f:11:db:4f: 05:59:26:c1:96:11:42:25:33:be:6a:d9:bc:e6:68: f0:c1:2a:9a:2a:3d:68:66:26:dc:b0:e3:d1:58:a3: b3:9e:62:8c:18:e4:a6:72:7b:52:a8:32:2c:ad:bf: 20:59:ce:1c:4d:fc:ec:e5:eb:db:12:56:33:3c:a8: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AD:00:DD:BA:30:2A:50:CB:D4:92:29:61:49:95:D0:A7:56:40:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl X509v3 Authority Key Identifier: keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer sbgp-ipAddrBlock: critical IPv4: 142.249.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c3:f8:c8:54:18:54:4d:cd:a4:a2:54:0d:49:47:a4:47:c7: e4:2b:e4:9f:94:3c:85:fe:9c:63:ed:a3:95:d1:ba:01:c7:99: 16:bb:e8:20:9a:13:e7:3f:68:81:d6:8a:d9:57:1c:2d:12:88: 7c:2b:d4:d3:84:ca:47:8f:58:37:b7:3c:4b:33:5a:ed:bc:fc: fa:eb:cc:28:47:3c:6d:d8:97:8a:15:af:04:04:05:e9:20:6a: 0e:c6:2d:00:14:ab:e0:fc:28:9b:3a:6b:e7:95:49:6f:4a:e3: 6d:34:35:cd:a7:cf:47:47:3c:93:41:30:62:7e:a2:7e:cf:d8: 6b:a3:ee:cc:f3:81:26:2c:f4:66:f3:77:1b:0f:dc:b7:78:60: a0:db:95:cb:1a:f5:16:6d:d3:4a:46:93:d3:b5:cc:e8:c1:3b: 16:bf:54:07:36:bd:97:5f:fc:76:90:15:28:3a:63:5f:7d:52: f4:91:9c:6f:02:3e:8d:4d:f8:ff:99:cd:51:61:65:f2:91:3d: 6b:fc:7f:9d:46:b9:66:c3:3c:4e:7f:08:79:46:75:e7:26:80: 2f:71:b8:0f:67:d9:c2:73:a7:93:c4:a8:be:89:7b:ef:01:86: 93:5a:5e:e7:0e:96:05:07:44:36:2d:22:dc:9c:78:28:2f:fc: 1b:e9:25:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6UkyHikbmc7F8agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFkODZkMDAtZjZlNS00N2E3LTkzMmMtMDQ4YTZjYzBj NDI3MB4XDTI1MTAxMDE4MDIwOFoXDTI2MDEwODE5MDIwOFowLzEtMCsGA1UEAxMk OGFiYjMxYjMtODVhMi00YmMyLWJiYWMtNjFlMzBkZTA1MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18RS6BDWZReBP5LXHMnfYUQPvg21F8O6UkZD YHE3zmynwy6FPoXzSAtXGaDejHuK+mpHM6rHVflxam6M4XqLSSAqpjYckJ8CPMuZ OqgHlMR8XKl072gJ23Cj4elVCUcSq6eNlGSMkDuH3RsHhBBD5uGRNF/ra0IEqW4Q KrVsccIjcfftxiQbOcC0VqwKNYznVVu6nCV8dv+zeGbIwfeJ/AA+g/1t19UK6cjh Qh43gdAIR0Ciu8D0ixpQSRRCnD8R208FWSbBlhFCJTO+atm85mjwwSqaKj1oZibc sOPRWKOznmKMGOSmcntSqDIsrb8gWc4cTfzs5evbElYzPKgIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+tAN26MCpQy9SSKWFJldCnVkCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4 NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhhNmNjMGM0MjcvYjM1YjA5MjEtMWU3OC0z OTk0LTgyNmUtZGIxYWNlZWU0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFkODZkMDAtZjZlNS00N2E3LTkz MmMtMDQ4YTZjYzBjNDI3LzgxZDg2ZDAwLWY2ZTUtNDdhNy05MzJjLTA0OGE2Y2Mw YzQyNy5jcmwwHwYDVR0jBBgwFoAU6edUqU0xhxQtXcuRSykkoYq7bvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhh NmNjMGM0MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbD+MhUGFRNzaSiVA1JR6RHx+Qr5J+UPIX+nGPto5XRugHHmRa76CCa E+c/aIHWitlXHC0SiHwr1NOEykePWDe3PEszWu28/PrrzChHPG3Yl4oVrwQEBekg ag7GLQAUq+D8KJs6a+eVSW9K4200Nc2nz0dHPJNBMGJ+on7P2Guj7szzgSYs9Gbz dxsP3Ld4YKDblcsa9RZt00pGk9O1zOjBOxa/VAc2vZdf/HaQFSg6Y199UvSRnG8C Po1N+P+ZzVFhZfKRPWv8f51GuWbDPE5/CHlGdecmgC9xuA9n2cJzp5PEqL6Je+8B hpNaXucOlgUHRDYtItyceCgv/BvpJSU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:18:04 2025 by rpki-client