$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa File: b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa (raw, json) Hash identifier: MJPyysMn2wUXIlbdojNCf32tQ9Rw56wFWkAL8VsLcKs= Subject key identifier: B8:B4:63:AC:3E:AC:D6:8E:47:E1:79:BF:41:9F:05:E5:C0:23:CD:58 Certificate issuer: /CN=e286fd28-0939-48b9-86ba-cbe791497d15 Certificate serial: 010D0C9F4328584B8EACD5744BBC9ABB36FFAC40 Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 142.202.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d5:74:4b:bc:9a:bb:36:ff:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=25b950b1-58eb-464c-a4df-5d020ae9858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:69:27:8c:89:8f:75:77:44:40:34:6e:7e: d0:4f:cd:23:75:2f:2b:a1:9e:68:1f:07:63:64:de: 49:e9:91:86:cc:33:11:32:27:8d:45:48:ec:c6:10: 91:60:2f:01:74:b0:28:65:bf:c3:07:e3:5d:1f:dc: 22:43:a1:5b:09:9c:b3:e8:1b:69:a5:af:d1:4d:57: c6:3a:9d:c1:e6:f7:ea:a6:4c:fb:1d:26:3b:17:cb: ec:0c:c2:09:f1:dd:b2:5b:20:e3:72:0d:03:72:67: 76:31:b5:85:59:fb:f9:dc:5b:54:5c:80:4d:f4:ca: ff:b8:11:2f:5d:20:13:5b:b5:86:ce:bf:23:3d:c8: d1:d4:22:b4:a3:5c:eb:12:4c:83:8b:20:44:0e:9d: 04:38:1f:32:62:f5:22:2f:5f:81:c1:19:8b:7d:7d: 36:2f:23:89:75:6d:cd:1e:af:e2:03:c2:42:7d:ec: 42:c3:d2:cb:2a:b6:eb:9d:8f:33:84:08:f2:2c:c8: 9d:72:eb:94:d5:a9:71:4f:39:12:79:b2:bb:d7:0f: 89:f5:61:c7:69:a7:b6:bf:73:e9:d3:34:e5:00:c3: 3f:95:4d:d2:5a:eb:8b:12:e9:06:05:f8:f6:76:a4: c6:e4:81:43:a9:d7:a6:c1:c2:a4:f2:d7:ae:1d:e9: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:63:AC:3E:AC:D6:8E:47:E1:79:BF:41:9F:05:E5:C0:23:CD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl X509v3 Authority Key Identifier: keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer sbgp-ipAddrBlock: critical IPv4: 142.202.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:46:55:7a:65:4d:c0:c7:db:1b:f7:64:19:9f:53:ca:fc:12: 13:50:7e:d9:e5:0f:33:2a:7b:ad:ea:44:30:d4:d2:78:69:81: 35:68:be:27:2f:0e:18:32:b3:dd:a2:3d:46:25:14:c7:49:7a: 56:22:6c:13:7e:1c:36:9a:9d:af:f6:fa:37:30:69:b6:2e:cb: 70:6b:96:36:c6:03:85:e5:74:10:5a:3c:be:e0:2c:cd:9b:51: 5a:fa:04:41:a9:50:65:a2:55:7c:8b:c0:97:a5:ca:e8:db:35: 60:ea:8a:f6:9f:c5:39:f4:79:b3:be:ec:95:42:a1:1c:9d:2d: aa:17:90:0a:d0:9d:86:ef:ff:b2:97:98:8f:32:11:33:a2:4b: 66:f8:60:29:3f:e5:e3:89:e4:6d:79:56:e8:45:71:34:c1:f0: 24:2f:71:64:4b:67:73:c0:ba:7d:40:4a:e8:03:0c:22:99:4b: d7:d4:25:d1:1b:61:ec:d3:f4:99:4a:0a:0e:58:26:03:30:33: e6:51:96:68:af:e4:fe:19:c9:e9:21:11:0d:ff:7a:ab:0d:5b: f8:cb:ef:33:83:ae:c6:62:e0:6a:58:64:42:37:9f:ed:02:b3: 92:89:5a:47:17:8c:12:4d:71:b1:17:83:4f:26:35:46:8c:53: 9b:c2:c4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNV0S7yauzb/rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3 ZDE1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjViOTUwYjEtNThlYi00NjRjLWE0ZGYtNWQwMjBhZTk4NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgndpJ4yJj3V3REA0bn7QT80jdS8roZ5oHwdj ZN5J6ZGGzDMRMieNRUjsxhCRYC8BdLAoZb/DB+NdH9wiQ6FbCZyz6Btppa/RTVfG Op3B5vfqpkz7HSY7F8vsDMIJ8d2yWyDjcg0Dcmd2MbWFWfv53FtUXIBN9Mr/uBEv XSATW7WGzr8jPcjR1CK0o1zrEkyDiyBEDp0EOB8yYvUiL1+BwRmLfX02LyOJdW3N Hq/iA8JCfexCw9LLKrbrnY8zhAjyLMidcuuU1alxTzkSebK71w+J9WHHaae2v3Pp 0zTlAMM/lU3SWuuLEukGBfj2dqTG5IFDqdemwcKk8teuHemfAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi0Y6w+rNaOR+F5v0GfBeXAI81YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2 ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvYjZjOGY5OTEtMDlmYS0z YzA3LTk1NWItNzA0YTJjNmQ3MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2 YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5 N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3 OTE0OTdkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdGVXplTcDH2xv3ZBmfU8r8EhNQftnlDzMqe63qRDDU0nhpgTVovicv Dhgys92iPUYlFMdJelYibBN+HDaana/2+jcwabYuy3BrljbGA4XldBBaPL7gLM2b UVr6BEGpUGWiVXyLwJelyujbNWDqivafxTn0ebO+7JVCoRydLaoXkArQnYbv/7KX mI8yETOiS2b4YCk/5eOJ5G15VuhFcTTB8CQvcWRLZ3PAun1ASugDDCKZS9fUJdEb YezT9JlKCg5YJgMwM+ZRlmiv5P4ZyekhEQ3/eqsNW/jL7zODrsZi4GpYZEI3n+0C s5KJWkcXjBJNcbEXg08mNUaMU5vCxPE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:13:36 2025 by rpki-client