$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa File: 795e35c7-74bf-3f59-839a-450438e81357.roa (raw, json) Hash identifier: gK2mz/alpwHqaPZRzMbQbK+BN4jKdbyiRjOlRxlOmL8= Subject key identifier: EF:C8:B6:6F:75:18:E6:BC:4C:56:5C:78:20:92:0C:06:2D:CD:13:85 Certificate issuer: /CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Certificate serial: 010D0C9F4328584B78A8F416DD2493DD5E167480 Authority key identifier: B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa Signing time: Fri 10 Oct 2025 03:45:07 +0000 ROA not before: Fri 10 Oct 2025 03:45:07 +0000 ROA not after: Thu 08 Jan 2026 04:45:07 +0000 asID: 8075 IP address blocks: 142.249.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:a8:f4:16:dd:24:93:dd:5e:16:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Validity Not Before: Oct 10 03:45:07 2025 GMT Not After : Jan 8 04:45:07 2026 GMT Subject: CN=28d04bc4-19fe-4dc9-ae19-fd6af28767db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:e2:d5:04:12:79:0a:09:a0:1a:16:c2:8d: 1c:b5:ee:f0:6d:e5:8e:ea:dd:7d:62:3b:fb:c8:65: 6b:3a:7f:2f:60:d5:c8:23:d3:01:c1:f3:f0:6b:8d: 00:73:3c:7d:43:f7:fe:99:75:9f:6e:f0:6c:cb:45: 0b:07:f8:d9:b7:66:d5:0d:b2:d0:b5:bf:0f:2d:82: 71:e7:ed:f9:f3:f2:0f:3f:0f:a1:eb:41:89:dc:46: 79:19:87:d3:c1:02:48:15:09:68:dc:75:8b:62:8e: fa:6c:43:23:3d:95:1e:85:48:e5:73:f6:54:75:2b: b6:bf:f7:db:ab:a1:e3:ca:94:a8:78:ac:cf:23:57: bf:ae:2c:34:ef:0e:4c:c8:1a:21:2d:1d:ef:71:8a: 05:13:e1:58:6f:3a:9a:dd:21:ec:9d:e1:b4:4f:dd: 2f:ce:be:19:ae:d7:fb:b0:47:01:14:2d:e6:34:2c: 23:2b:53:ad:8f:b2:56:05:03:8d:ed:0f:42:ff:84: 75:99:44:17:3a:70:34:e5:f5:8e:44:10:8a:9d:1d: 34:88:a6:89:b3:e7:f7:93:9c:ac:bc:16:56:91:99: 44:6e:56:6b:bd:87:06:a1:a2:0b:dd:d9:de:e0:80: c6:1b:57:84:60:ad:6f:7f:96:04:9d:da:cd:e3:83: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C8:B6:6F:75:18:E6:BC:4C:56:5C:78:20:92:0C:06:2D:CD:13:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl X509v3 Authority Key Identifier: keyid:B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer sbgp-ipAddrBlock: critical IPv4: 142.249.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4b:ee:df:c5:43:ea:71:92:ef:03:50:d3:be:ba:a3:30:14: ac:c6:66:00:4e:06:74:28:65:8e:ea:22:5a:b0:df:69:30:d4: 3b:25:27:44:ab:5b:7b:3d:20:c1:8c:01:f7:d8:64:bb:88:3e: f0:ef:b2:03:19:50:e1:09:84:5e:9e:a3:11:a6:f8:99:51:3e: 30:75:60:61:3b:97:d9:ff:5c:04:a1:aa:ba:66:c6:67:9b:de: da:51:38:b8:e7:72:d3:98:02:b4:0f:13:ac:c7:1e:8d:0a:e7: a1:54:0c:77:e5:88:f7:68:66:c0:df:bc:65:d7:6e:81:55:f6: 24:30:1a:3e:48:3d:93:ed:12:35:a7:63:d1:11:0a:02:30:a2: fa:28:f1:fd:fe:e6:3d:77:91:b2:d3:d2:80:75:0a:7b:37:d5: 38:5a:ca:4b:d6:6a:55:b1:a7:9b:c9:fe:65:5e:9d:89:eb:a9: fa:7b:59:f7:bc:cd:a9:2b:1d:a5:a0:1b:2c:f8:00:2f:d0:7a: ee:64:03:f8:12:da:f1:80:ad:6b:c5:5f:f2:d2:da:c9:e2:3e: 70:f5:1b:5e:a1:ef:bc:c2:54:0e:82:d8:d5:94:14:96:ee:84: f7:38:25:ba:e1:62:bc:d8:fe:57:7f:6c:57:c7:54:4e:aa:7c: 9e:75:cd:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4qPQW3SST3V4WdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM4YzllMTEtNjJhNy00M2Q2LTg4MGMtZjcxNDcyMzBi ZmEwMB4XDTI1MTAxMDAzNDUwN1oXDTI2MDEwODA0NDUwN1owLzEtMCsGA1UEAxMk MjhkMDRiYzQtMTlmZS00ZGM5LWFlMTktZmQ2YWYyODc2N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQbi1QQSeQoJoBoWwo0cte7wbeWO6t19Yjv7 yGVrOn8vYNXII9MBwfPwa40Aczx9Q/f+mXWfbvBsy0ULB/jZt2bVDbLQtb8PLYJx 5+358/IPPw+h60GJ3EZ5GYfTwQJIFQlo3HWLYo76bEMjPZUehUjlc/ZUdSu2v/fb q6HjypSoeKzPI1e/riw07w5MyBohLR3vcYoFE+FYbzqa3SHsneG0T90vzr4Zrtf7 sEcBFC3mNCwjK1Otj7JWBQON7Q9C/4R1mUQXOnA05fWORBCKnR00iKaJs+f3k5ys vBZWkZlEblZrvYcGoaIL3dne4IDGG1eEYK1vf5YEndrN44NArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/Itm91GOa8TFZceCCSDAYtzROFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhj OWUxMS02MmE3LTQzZDYtODgwYy1mNzE0NzIzMGJmYTAvNzk1ZTM1YzctNzRiZi0z ZjU5LTgzOWEtNDUwNDM4ZTgxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmM4YzllMTEtNjJhNy00M2Q2LTg4 MGMtZjcxNDcyMzBiZmEwL2JjOGM5ZTExLTYyYTctNDNkNi04ODBjLWY3MTQ3MjMw YmZhMC5jcmwwHwYDVR0jBBgwFoAUt7CKTOPgqhoGSMfUoe48tEuooHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhjOWUxMS02MmE3LTQzZDYtODgwYy1mNzE0 NzIzMGJmYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvlfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9L7t/FQ+pxku8DUNO+uqMwFKzGZgBOBnQoZY7qIlqw32kw1DslJ0Sr W3s9IMGMAffYZLuIPvDvsgMZUOEJhF6eoxGm+JlRPjB1YGE7l9n/XAShqrpmxmeb 3tpROLjnctOYArQPE6zHHo0K56FUDHfliPdoZsDfvGXXboFV9iQwGj5IPZPtEjWn Y9ERCgIwovoo8f3+5j13kbLT0oB1Cns31ThaykvWalWxp5vJ/mVenYnrqfp7Wfe8 zakrHaWgGyz4AC/Qeu5kA/gS2vGArWvFX/LS2sniPnD1G16h77zCVA6C2NWUFJbu hPc4JbrhYrzY/ld/bFfHVE6qfJ51zag= -----END CERTIFICATE-----Generated at Sun Oct 19 22:46:46 2025 by rpki-client