$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa File: 8601f692-9955-3e20-8a52-638414938344.roa (raw, json) Hash identifier: DrZSF7HGER+e1aQXnNeoF8iWHykKZ7fg+GJu3aKoS8E= Subject key identifier: 4A:1E:43:85:08:89:21:32:4A:03:7E:C5:56:37:6F:37:A0:62:DD:ED Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584B95A79655E6345C7B659444EC Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 55002 IP address blocks: 142.0.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:96:55:e6:34:5c:7b:65:94:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=da2ffeec-896d-42ef-a6ed-da90fd123e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:18:e2:84:4d:63:19:cc:c9:2a:41:a5:3c: 3a:63:2a:7c:53:c7:62:69:f1:93:28:ef:c4:2d:e0: b2:08:78:18:fe:4f:47:77:cb:92:f8:19:f4:c9:3c: 04:10:4e:3d:52:b4:65:ce:ac:9b:e4:e7:10:c2:69: 50:fc:c4:80:9f:c5:17:8b:5f:bd:2b:e5:91:db:7f: 8d:ca:9e:e3:39:0a:19:ab:2f:4a:21:39:5c:0d:fb: 69:34:26:d9:12:ad:c6:53:b1:89:06:f5:e9:20:66: 4c:47:fb:c3:03:77:6c:c0:d6:a8:84:0f:87:4d:68: ff:b1:d7:2c:4f:e1:14:1f:0c:68:42:61:a2:ad:db: 88:3a:5e:12:ea:9f:39:ac:77:43:d0:c1:ee:a8:65: 2d:5e:ee:e7:70:b4:11:64:71:2c:ba:12:40:1c:74: c2:f0:09:d6:fa:09:d2:de:94:21:7c:2a:e0:69:29: 63:00:db:58:14:34:07:9f:35:a6:27:8b:23:9a:ce: d6:f2:5e:34:54:e1:30:9a:ea:74:9e:70:64:b8:42: 30:ca:bd:6c:f6:f9:04:2a:a0:60:cc:e2:f2:75:00: c7:ce:f2:ad:47:2b:fb:77:0e:80:e8:49:f1:4d:5f: a2:fe:32:d0:ea:8a:dc:32:10:7b:a7:47:88:11:f6: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1E:43:85:08:89:21:32:4A:03:7E:C5:56:37:6F:37:A0:62:DD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c5:68:1d:84:58:c1:e0:8d:98:77:6d:73:2c:80:61:b1:6c: f3:f0:e1:2d:c0:56:2c:5b:b1:1d:04:69:ef:a0:37:5b:3e:10: 96:f1:66:d9:e7:fa:3a:a3:f6:7f:32:18:16:40:29:ff:3b:a5: 9c:ef:1c:30:c2:fb:b7:6e:e2:3c:3e:2f:d4:0c:15:55:96:4a: e8:0d:1c:a8:58:7e:5c:7e:21:6a:65:0e:8f:95:a8:aa:66:5d: f2:fb:67:6c:7b:6b:0a:97:8e:96:25:8d:cb:3b:01:67:c7:fe: 83:94:48:1e:93:36:e2:8a:7d:2e:b5:8e:5f:96:04:f7:e1:ca: 26:29:53:92:e9:32:72:d8:cd:f1:a6:3e:fe:7b:b8:1d:ee:6d: d1:82:57:e0:11:ba:12:51:cd:7d:de:5d:d7:04:a2:89:d3:28: 3d:b1:9b:e7:56:1a:3a:4f:5f:e1:81:87:84:4c:c1:66:bd:4b: 07:a1:21:b6:b5:69:42:39:ca:e6:fb:6b:98:7c:fe:af:51:be: 63:69:d8:da:80:79:8a:ef:73:5c:10:c3:a5:40:a5:e4:78:55: 31:47:b4:04:42:ba:c7:5f:66:12:2c:47:93:4f:f7:7f:89:3f: fa:91:8a:1f:12:2b:c5:f6:69:51:cb:f9:97:2f:80:09:de:10: 90:de:72:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5ZV5jRce2WUROwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGEyZmZlZWMtODk2ZC00MmVmLWE2ZWQtZGE5MGZkMTIzZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxsY4oRNYxnMySpBpTw6Yyp8U8diafGTKO/E LeCyCHgY/k9Hd8uS+Bn0yTwEEE49UrRlzqyb5OcQwmlQ/MSAn8UXi1+9K+WR23+N yp7jOQoZqy9KITlcDftpNCbZEq3GU7GJBvXpIGZMR/vDA3dswNaohA+HTWj/sdcs T+EUHwxoQmGirduIOl4S6p85rHdD0MHuqGUtXu7ncLQRZHEsuhJAHHTC8AnW+gnS 3pQhfCrgaSljANtYFDQHnzWmJ4sjms7W8l40VOEwmup0nnBkuEIwyr1s9vkEKqBg zOLydQDHzvKtRyv7dw6A6EnxTV+i/jLQ6orcMhB7p0eIEfbv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoeQ4UIiSEySgN+xVY3bzegYt3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvODYwMWY2OTItOTk1NS0z ZTIwLThhNTItNjM4NDE0OTM4MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTFaB2EWMHgjZh3bXMsgGGxbPPw4S3AVixbsR0Eae+gN1s+EJbxZtnn +jqj9n8yGBZAKf87pZzvHDDC+7du4jw+L9QMFVWWSugNHKhYflx+IWplDo+VqKpm XfL7Z2x7awqXjpYljcs7AWfH/oOUSB6TNuKKfS61jl+WBPfhyiYpU5LpMnLYzfGm Pv57uB3ubdGCV+ARuhJRzX3eXdcEoonTKD2xm+dWGjpPX+GBh4RMwWa9SwehIba1 aUI5yub7a5h8/q9RvmNp2NqAeYrvc1wQw6VApeR4VTFHtARCusdfZhIsR5NP93+J P/qRih8SK8X2aVHL+ZcvgAneEJDecoA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:54 2025 by rpki-client