$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa File: 9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa (raw, json) Hash identifier: 4bYWUfypS4ZdW9/ZzOADLv6tdKTwmlQd6ytf6xPyY8c= Subject key identifier: B2:C3:D1:F9:2E:33:66:34:D3:D8:0D:E6:D2:EA:97:BA:84:5B:4A:CB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6FF748F45BADB71757B07280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 63.142.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:48:f4:5b:ad:b7:17:57:b0:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=002fe456-a338-4135-8526-cafd0cff68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:02:8e:7e:fc:ab:71:58:11:48:17:30:d4: ab:aa:f0:7e:56:23:90:7d:fe:dd:a5:2a:58:ee:40: 90:0f:df:2c:e3:60:5c:d9:2e:f8:39:f1:97:f0:5a: da:31:43:13:90:22:0a:d3:10:24:bf:f4:74:98:4d: a0:cd:32:81:19:8f:f2:20:99:5e:d8:93:14:51:92: 2f:ab:b4:36:bf:57:3a:d4:09:be:0e:50:eb:a8:ec: c5:92:2a:b0:ea:75:74:7d:7b:8a:45:76:c3:12:bf: 4e:13:1a:bd:c9:cf:cc:b9:2e:29:e8:12:60:48:2b: 08:95:a7:6a:ed:d3:68:12:c8:61:4e:0c:dc:2b:ee: 07:83:ae:ac:76:9b:fe:a2:24:2f:43:74:af:92:0e: 3a:72:df:03:87:d1:80:2d:10:b8:09:05:b4:cb:c6: 87:0b:2b:90:28:70:0e:48:f2:c7:7d:80:9b:69:78: 05:d5:eb:23:7a:8d:73:05:80:b6:c1:f3:89:d0:4a: 04:ab:87:c1:ef:79:31:72:58:b8:b4:e0:ba:62:85: cf:c3:f6:e6:ef:11:e4:3d:83:37:e4:d5:37:10:be: 36:24:ac:61:ab:2e:1e:f5:66:69:f6:99:ce:07:d1: d3:ac:85:8a:2c:f1:99:76:d9:10:c5:c6:7d:37:90: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:D1:F9:2E:33:66:34:D3:D8:0D:E6:D2:EA:97:BA:84:5B:4A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9cae3248-0eb8-3469-b4af-aecb41d5ede6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 63.142.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5d:7a:3a:10:30:5b:8d:c5:4e:c8:20:02:71:13:c5:b6:f0: 26:71:0f:41:2a:9d:e5:91:2f:91:ed:cc:a3:fc:b3:bf:42:e1: 54:cb:0e:0d:ae:94:cb:9c:ea:58:93:97:09:c8:36:44:94:4d: 42:e4:fd:13:94:e0:9c:fb:cb:04:cf:f3:9e:37:8c:1d:9f:d7: 1c:88:90:33:bd:23:f7:02:88:9f:27:69:db:86:db:91:6e:30: 1f:cf:3e:89:0f:2a:4c:30:9d:8e:83:ff:63:83:fe:bd:9a:39: b6:1e:3b:70:d9:bd:0c:a8:07:74:c8:93:bf:6f:e4:7e:86:3a: 2f:11:c7:8b:9e:74:6b:b1:31:f6:b4:ab:92:56:5f:e4:26:b7: f2:94:6e:01:ab:2c:b3:49:0d:df:b4:e8:db:e4:a4:68:f8:68: f2:82:49:3f:eb:33:b8:99:ae:94:e8:71:cd:4e:2e:af:36:7b: b8:8c:24:38:3c:e1:ad:17:6d:b2:bf:76:31:6c:14:86:24:2b: 39:6f:cf:c8:da:b8:de:fe:8b:4b:de:90:76:0b:b0:4d:00:e1: 1f:5d:0f:47:23:1b:2c:a9:3f:8c:06:24:c2:dc:a5:44:04:dd: 1b:62:a6:d6:1c:4e:f3:de:61:57:0c:14:96:4a:2e:e2:a4:1f: 3f:8a:f7:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90j0W623F1ewcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MDAyZmU0NTYtYTMzOC00MTM1LTg1MjYtY2FmZDBjZmY2OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8QCjn78q3FYEUgXMNSrqvB+ViOQff7dpSpY 7kCQD98s42Bc2S74OfGX8FraMUMTkCIK0xAkv/R0mE2gzTKBGY/yIJle2JMUUZIv q7Q2v1c61Am+DlDrqOzFkiqw6nV0fXuKRXbDEr9OExq9yc/MuS4p6BJgSCsIladq 7dNoEshhTgzcK+4Hg66sdpv+oiQvQ3Svkg46ct8Dh9GALRC4CQW0y8aHCyuQKHAO SPLHfYCbaXgF1esjeo1zBYC2wfOJ0EoEq4fB73kxcli4tOC6YoXPw/bm7xHkPYM3 5NU3EL42JKxhqy4e9WZp9pnOB9HTrIWKLPGZdtkQxcZ9N5C/PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLD0fkuM2Y009gN5tLql7qEW0rLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWNhZTMyNDgtMGViOC0z NDY5LWI0YWYtYWVjYjQxZDVlZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP44gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZdejoQMFuNxU7IIAJxE8W28CZxD0EqneWRL5HtzKP8s79C4VTLDg2u lMuc6liTlwnINkSUTULk/ROU4Jz7ywTP8543jB2f1xyIkDO9I/cCiJ8naduG25Fu MB/PPokPKkwwnY6D/2OD/r2aObYeO3DZvQyoB3TIk79v5H6GOi8Rx4uedGuxMfa0 q5JWX+Qmt/KUbgGrLLNJDd+06NvkpGj4aPKCST/rM7iZrpTocc1OLq82e7iMJDg8 4a0XbbK/djFsFIYkKzlvz8jauN7+i0vekHYLsE0A4R9dD0cjGyypP4wGJMLcpUQE 3RtiptYcTvPeYVcMFJZKLuKkHz+K9yw= -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:16 2025 by rpki-client