$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa File: d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa (raw, json) Hash identifier: Q7QIH7fp8aBjHHgBuVBiag/0prv3sTHAoJmbJvQ6N/Q= Subject key identifier: 95:8D:76:3D:21:37:EA:AB:39:64:CD:86:CB:2B:16:64:18:EE:9C:ED Certificate issuer: /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06 Certificate serial: 010D0C9F4328584B36BC56F796470ED0102C1940 Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 7950 IP address blocks: 142.87.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:56:f7:96:47:0e:d0:10:2c:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=2595c68f-3014-40ab-9f60-a263a6479523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:69:bd:1a:70:58:d9:73:2d:a9:27:09:1b: 14:14:05:e5:eb:48:a6:99:f0:27:0a:5c:22:0b:f9: 9c:f4:8a:c7:bd:f3:65:81:4f:9e:7d:a5:72:cb:d2: 1c:ad:2c:f6:8f:2c:c2:03:a6:1a:f7:b8:3b:57:d1: c0:98:83:74:e8:94:d0:e9:13:da:4d:41:40:7c:c7: d1:6d:b6:f4:fb:24:f7:ff:0a:da:62:93:90:03:0e: 5f:67:54:22:af:ce:bb:54:ba:00:23:39:40:30:86: d2:67:7d:44:ed:1d:ac:4c:73:1e:fe:9f:12:ae:26: 13:96:75:ff:c5:6f:74:ca:0f:fd:27:47:82:26:c9: fd:37:cf:fb:ab:dc:ba:a5:50:39:ec:44:2a:89:3e: 80:82:64:46:65:23:2f:8c:0f:b3:b6:a5:66:54:70: 1d:fc:51:e1:7d:68:fc:1a:f6:71:f2:41:c6:cf:e4: 55:d1:8a:8e:fb:99:5b:40:6f:98:f6:31:0d:98:f0: 1e:34:c4:ab:8f:46:3a:30:8e:f3:b8:aa:29:12:22: d6:4d:65:53:39:89:80:63:11:45:0b:2f:41:3a:5a: ed:ae:33:d6:51:21:c1:63:0b:8f:1c:d0:b8:a8:8a: 66:0c:c5:c6:a5:4c:6b:d7:60:41:08:db:ff:2c:d5: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:76:3D:21:37:EA:AB:39:64:CD:86:CB:2B:16:64:18:EE:9C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/d1a9a6e0-cb93-3f98-b9e1-7b7959d69a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl X509v3 Authority Key Identifier: keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer sbgp-ipAddrBlock: critical IPv4: 142.87.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f4:90:ac:7a:e6:01:35:49:21:3d:a1:9b:8d:35:27:e0:4d: 92:be:fa:21:4c:1c:ab:b6:67:2e:6b:91:ce:b3:5f:53:85:f7: 7e:90:36:d0:cf:84:25:65:42:20:77:66:4e:4a:60:ce:73:f2: d9:8c:81:7e:bb:13:c1:71:da:04:5c:f6:d2:39:be:de:61:28: 70:39:f4:24:84:4a:eb:e9:51:93:48:19:24:46:44:12:e4:93: c2:d3:5d:46:f8:8d:45:c3:af:d7:20:d8:7d:a0:13:ce:0f:b9: 21:f5:7c:b1:b3:22:b5:d5:7a:96:a5:91:55:c1:75:3b:55:04: 9d:45:6a:5f:4c:40:00:22:30:fb:90:64:48:e7:a8:40:f4:d3: ac:b6:34:a2:a0:d7:92:4d:5a:99:09:a0:b9:2c:a2:6e:11:23: e1:de:9c:a1:5a:1a:cc:f7:2f:e2:d6:a1:f9:91:4b:c1:ed:2c: 38:f8:de:cf:52:57:78:1f:ff:9a:b6:23:55:4b:e1:c0:ef:01: b3:15:3f:91:90:b8:7b:01:26:d4:64:d0:06:50:be:fb:c6:fe: 81:f8:81:8c:15:0d:36:1d:a0:05:78:b0:e2:f0:f7:9e:89:e8: 13:51:13:c2:c4:2d:18:12:fb:c3:f7:ec:f6:31:0a:98:a1:24: 59:e9:71:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFb3lkcO0BAsGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1 ZTA2MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MjU5NWM2OGYtMzAxNC00MGFiLTlmNjAtYTI2M2E2NDc5NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75pvRpwWNlzLaknCRsUFAXl60immfAnClwi C/mc9IrHvfNlgU+efaVyy9IcrSz2jyzCA6Ya97g7V9HAmIN06JTQ6RPaTUFAfMfR bbb0+yT3/wraYpOQAw5fZ1Qir867VLoAIzlAMIbSZ31E7R2sTHMe/p8SriYTlnX/ xW90yg/9J0eCJsn9N8/7q9y6pVA57EQqiT6AgmRGZSMvjA+ztqVmVHAd/FHhfWj8 GvZx8kHGz+RV0YqO+5lbQG+Y9jENmPAeNMSrj0Y6MI7zuKopEiLWTWVTOYmAYxFF Cy9BOlrtrjPWUSHBYwuPHNC4qIpmDMXGpUxr12BBCNv/LNXsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWNdj0hN+qrOWTNhssrFmQY7pztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2 MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvZDFhOWE2ZTAtY2I5My0z Zjk4LWI5ZTEtN2I3OTU5ZDY5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4 NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2 NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjld1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP0kKx65gE1SSE9oZuNNSfgTZK++iFMHKu2Zy5rkc6zX1OF936QNtDP hCVlQiB3Zk5KYM5z8tmMgX67E8Fx2gRc9tI5vt5hKHA59CSESuvpUZNIGSRGRBLk k8LTXUb4jUXDr9cg2H2gE84PuSH1fLGzIrXVepalkVXBdTtVBJ1Fal9MQAAiMPuQ ZEjnqED006y2NKKg15JNWpkJoLksom4RI+HenKFaGsz3L+LWofmRS8HtLDj43s9S V3gf/5q2I1VL4cDvAbMVP5GQuHsBJtRk0AZQvvvG/oH4gYwVDTYdoAV4sOLw956J 6BNRE8LELRgS+8P37PYxCpihJFnpcYI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:25 2025 by rpki-client