$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa File: c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa (raw, json) Hash identifier: OcO9K6RmA2qkTpF9ut0yP5WesUasvDIwx9VoOKjJq/M= Subject key identifier: 34:76:C9:EB:05:50:CD:7A:74:F3:26:54:BB:21:58:5B:59:D7:94:AC Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584B95A79641DB69D531DCB8E0C0 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7381 IP address blocks: 142.0.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:96:41:db:69:d5:31:dc:b8:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=76a712f1-df4c-4dfe-ad88-f9aba853882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:b4:25:e3:56:f8:db:c2:9a:17:f2:f4:ca: 6b:03:f4:8e:0e:a4:97:9b:cf:f5:e0:7a:86:d0:e9: c6:93:ec:0f:44:f7:62:74:1d:04:3e:1b:e7:91:2a: fb:41:63:ab:3a:d8:b2:8e:f6:cf:e4:75:42:72:ac: 5f:49:16:46:f2:44:2e:ae:ad:98:c0:86:54:ef:fa: e5:2d:12:c4:9b:9f:1a:30:c8:2f:b7:74:58:b8:67: 89:6f:cb:30:21:da:52:fd:27:af:fe:c3:3d:c6:dd: 78:cf:38:c1:38:08:2d:0e:9b:6c:08:0c:98:78:58: f3:68:5b:fb:4d:a8:16:6f:0d:f4:0b:7a:b9:26:4a: f3:2c:2f:60:a4:a0:d8:2f:58:ee:45:82:15:5e:0e: 85:b1:13:15:e6:95:0e:ae:a8:53:27:b2:ed:ae:9f: 51:24:9c:f5:df:48:11:82:16:7d:4f:9b:73:d2:53: d5:92:8e:07:4f:68:c0:72:8d:af:14:97:72:6c:a4: 7e:c7:61:11:38:e3:14:7a:88:b9:dd:4e:db:29:a9: 4e:fa:ba:cf:82:5e:46:fa:2c:c8:89:75:e7:bf:85: 80:00:f3:1d:79:5b:94:e1:fe:09:4b:bb:98:e7:30: 03:da:25:62:7a:d7:58:5c:39:57:fe:f2:bc:3a:d2: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:76:C9:EB:05:50:CD:7A:74:F3:26:54:BB:21:58:5B:59:D7:94:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:94:a5:68:07:60:70:00:15:0c:07:dd:98:39:7b:c8:97:ff: 02:61:33:34:ba:d4:88:a3:c2:76:18:e5:e4:e6:22:a5:1d:d3: dc:91:b7:98:0e:bc:65:61:f9:3e:a6:1b:a8:9d:ea:01:d6:c7: f8:81:61:75:1a:33:e7:aa:63:d9:e3:bc:fb:11:e1:91:83:01: 04:fb:45:e4:77:53:77:b3:27:eb:9d:23:3c:ee:21:b2:6f:c8: fe:f7:f8:2b:b0:8a:6a:57:07:5e:bf:fe:52:2c:48:06:5e:26: 3e:61:e2:a4:8f:96:c3:c2:22:b9:17:65:74:6f:6d:72:c0:9b: e1:3a:55:6a:5f:6f:77:38:3f:3d:fc:fa:1a:59:fe:ab:fb:24: c5:53:5c:df:92:35:27:3e:1d:7d:a5:d5:ca:48:7c:58:36:8f: 37:12:b1:3f:d7:8d:07:a1:f5:42:44:bd:15:ea:13:d7:48:93: f1:e8:a1:61:9b:f3:37:5b:1d:55:6e:f2:7d:92:3d:4c:d3:fd: d7:2a:a2:57:92:cb:30:45:11:54:fe:60:6e:ff:60:b5:27:3e: 99:a3:21:85:99:bd:d9:ce:e9:e7:c2:13:77:0e:9b:6b:8b:e8: 5a:37:b8:a1:e8:0f:dc:e9:d3:d5:a9:ab:8b:ba:3d:46:54:22: 85:ed:03:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5ZB22nVMdy44MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzZhNzEyZjEtZGY0Yy00ZGZlLWFkODgtZjlhYmE4NTM4ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqW0JeNW+NvCmhfy9MprA/SODqSXm8/14HqG 0OnGk+wPRPdidB0EPhvnkSr7QWOrOtiyjvbP5HVCcqxfSRZG8kQurq2YwIZU7/rl LRLEm58aMMgvt3RYuGeJb8swIdpS/Sev/sM9xt14zzjBOAgtDptsCAyYeFjzaFv7 TagWbw30C3q5JkrzLC9gpKDYL1juRYIVXg6FsRMV5pUOrqhTJ7Ltrp9RJJz130gR ghZ9T5tz0lPVko4HT2jAco2vFJdybKR+x2EROOMUeoi53U7bKalO+rrPgl5G+izI iXXnv4WAAPMdeVuU4f4JS7uY5zAD2iVietdYXDlX/vK8OtJsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR2yesFUM16dPMmVLshWFtZ15SsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYzI5ZDM1YzUtNWI2Ny0z NmM3LThhNWItZTZiMWYzYjgyZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyUpWgHYHAAFQwH3Zg5e8iX/wJhMzS61IijwnYY5eTmIqUd09yRt5gO vGVh+T6mG6id6gHWx/iBYXUaM+eqY9njvPsR4ZGDAQT7ReR3U3ezJ+udIzzuIbJv yP73+CuwimpXB16//lIsSAZeJj5h4qSPlsPCIrkXZXRvbXLAm+E6VWpfb3c4Pz38 +hpZ/qv7JMVTXN+SNSc+HX2l1cpIfFg2jzcSsT/XjQeh9UJEvRXqE9dIk/HooWGb 8zdbHVVu8n2SPUzT/dcqoleSyzBFEVT+YG7/YLUnPpmjIYWZvdnO6efCE3cOm2uL 6Fo3uKHoD9zp09Wpq4u6PUZUIoXtA8E= -----END CERTIFICATE-----Generated at Mon Oct 20 16:55:19 2025 by rpki-client