$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: JqeFfzQ4BOMn/qAzvVRAge7cksuffFDOKZcXXAZBBdM= Subject key identifier: 99:97:DB:D9:6C:78:68:D3:DA:AB:CC:54:75:C6:19:4F:16:C3:6F:1D Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584B5F372343B53B2659C1689000 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:23:43:b5:3b:26:59:c1:68:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=ed26ca5f-5a1a-4dee-9799-891cde462922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:64:7d:9c:13:bb:be:90:9d:01:54:07:08: 82:90:46:96:e8:3d:12:85:75:d6:9e:11:6e:fe:bc: 8d:53:1c:6c:e4:23:27:7a:99:0a:c4:37:4c:5d:8e: 90:f0:b2:85:ee:18:bb:01:31:24:6f:19:aa:6e:6d: e1:9c:02:48:fb:99:07:f4:bd:d5:e6:6b:64:a7:02: 4a:fb:b2:40:6a:5f:f4:b8:ea:12:b0:35:59:82:b8: ec:1a:f0:46:ed:b4:41:5f:13:0a:11:a9:df:de:fd: 33:f2:08:51:40:7b:a4:e6:ea:76:6a:23:fb:14:c5: 0b:9a:87:8e:e6:f9:5f:c7:3c:c8:3c:ed:a2:ec:ec: fc:c8:01:4a:77:08:39:17:24:15:00:4e:62:f4:9d: 0c:82:58:fb:d0:43:ba:01:78:a4:62:0a:af:86:d2: b2:f0:22:0b:5c:ce:e1:ed:54:2c:f6:4f:af:66:f5: 1f:7e:a1:17:c4:3c:81:0a:05:ef:13:0e:17:82:16: 3f:b6:25:24:8f:39:3f:12:f6:7e:44:05:45:92:ed: a0:63:17:9e:62:08:7a:dc:2e:d2:de:17:7a:f2:e3: d9:bf:91:29:7a:c7:b8:90:47:1a:9b:8a:2d:cd:51: b2:e9:4d:ce:4b:72:da:b7:5c:07:1f:73:44:8b:52: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:DB:D9:6C:78:68:D3:DA:AB:CC:54:75:C6:19:4F:16:C3:6F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bc:9b:3f:c1:f2:2a:21:af:76:aa:97:75:e5:8d:c2:69:6e: 2f:67:bb:e3:3e:d4:36:0d:ad:c4:b1:87:99:4f:36:90:0b:37: 80:05:f5:d4:d6:bc:14:73:8b:b0:bc:e3:4b:c2:08:5a:8c:61: d9:c5:a5:96:ed:43:08:be:30:be:94:85:eb:16:f2:c5:29:88: 74:6d:cf:db:db:c1:57:8d:12:d0:4f:0a:c8:aa:3e:fe:39:5e: 0a:b9:59:c6:89:89:86:d0:d8:c2:ec:7e:6e:e0:42:25:31:6a: 2b:ff:d3:c0:15:7e:d5:65:e7:a9:81:91:89:80:2b:ea:15:60: 49:0b:fb:ed:86:65:a9:8a:bf:97:19:e6:0c:f4:3b:9d:07:5d: 70:55:86:0f:82:65:ba:fd:c0:1b:07:b1:3f:d1:6c:72:9a:df: 0a:7d:7f:c1:bc:97:b7:de:d2:23:73:c3:a3:15:67:3f:87:02: de:27:53:bf:e6:7d:f1:75:d4:c7:96:c2:a9:83:40:e7:ab:e9: 7b:ab:2e:88:c1:83:8e:14:c2:0f:5b:c0:1e:3e:90:26:38:07: 99:34:e3:81:13:ad:76:4c:98:89:1a:2b:29:1b:a8:34:37:bb: f5:62:f1:85:e3:7f:43:5e:63:30:9a:d3:4b:ad:39:05:e3:ef: 55:3c:75:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyNDtTsmWcFokAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWQyNmNhNWYtNWExYS00ZGVlLTk3OTktODkxY2RlNDYyOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeNkfZwTu76QnQFUBwiCkEaW6D0ShXXWnhFu /ryNUxxs5CMnepkKxDdMXY6Q8LKF7hi7ATEkbxmqbm3hnAJI+5kH9L3V5mtkpwJK +7JAal/0uOoSsDVZgrjsGvBG7bRBXxMKEanf3v0z8ghRQHuk5up2aiP7FMULmoeO 5vlfxzzIPO2i7Oz8yAFKdwg5FyQVAE5i9J0Mglj70EO6AXikYgqvhtKy8CILXM7h 7VQs9k+vZvUffqEXxDyBCgXvEw4XghY/tiUkjzk/EvZ+RAVFku2gYxeeYgh63C7S 3hd68uPZv5Epese4kEcam4otzVGy6U3OS3Lat1wHH3NEi1JG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmX29lseGjT2qvMVHXGGU8Ww28dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC8mz/B8iohr3aql3XljcJpbi9nu+M+1DYNrcSxh5lPNpALN4AF9dTW vBRzi7C840vCCFqMYdnFpZbtQwi+ML6UhesW8sUpiHRtz9vbwVeNEtBPCsiqPv45 Xgq5WcaJiYbQ2MLsfm7gQiUxaiv/08AVftVl56mBkYmAK+oVYEkL++2GZamKv5cZ 5gz0O50HXXBVhg+CZbr9wBsHsT/RbHKa3wp9f8G8l7fe0iNzw6MVZz+HAt4nU7/m ffF11MeWwqmDQOer6XurLojBg44Uwg9bwB4+kCY4B5k044ETrXZMmIkaKykbqDQ3 u/Vi8YXjf0NeYzCa00utOQXj71U8dec= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:01 2025 by rpki-client