$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa File: 57fef851-b812-3910-8438-f6cd28bc5f46.roa (raw, json) Hash identifier: CdZWeCAi8cYLRqNW57pjxvG8gjCdm2iGjAw+vixZz9Y= Subject key identifier: 4B:A0:F4:93:4A:8A:79:61:D7:4D:75:16:EE:D9:53:ED:5E:D2:01:10 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584BB61D104D0A402D3CC4BB8380 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa Signing time: Sat 01 Nov 2025 04:03:23 +0000 ROA not before: Sat 01 Nov 2025 04:03:23 +0000 ROA not after: Fri 30 Jan 2026 05:03:23 +0000 asID: 16509 IP address blocks: 142.248.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:1d:10:4d:0a:40:2d:3c:c4:bb:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Nov 1 04:03:23 2025 GMT Not After : Jan 30 05:03:23 2026 GMT Subject: CN=0c64e0da-ba0f-4020-bad5-41b63e977e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:ea:1b:1c:8d:82:ec:92:c8:5d:61:a3:59: bb:fd:0d:b2:5c:b8:28:ca:da:c0:a3:bd:fc:c8:92: fd:f9:44:eb:e0:38:ce:53:ec:3f:02:ec:ca:e5:17: ae:15:11:ca:a0:03:37:ef:27:30:7b:37:97:c2:8a: d3:14:a8:44:dc:bb:53:52:0b:df:7d:a6:72:a4:6c: bc:0f:52:70:bd:53:39:c7:db:4d:a6:5b:5c:de:7e: 97:5b:00:6e:c9:07:d8:13:1b:bd:93:c7:c3:b5:17: 2c:50:e2:32:2f:05:d8:8e:60:ee:77:9b:09:18:bc: a6:91:3d:44:41:38:02:cb:b2:fd:23:84:1f:53:26: a5:47:e8:df:ef:6a:03:78:b2:bd:0d:18:ba:22:06: cd:17:83:ce:94:6a:ba:4e:0b:00:73:76:62:99:1a: 0a:3b:18:9b:91:df:9c:39:f3:a5:65:66:26:42:ae: 46:d0:82:91:87:f9:8d:88:fa:d7:45:04:7b:dd:89: c8:61:8e:c2:ff:1a:57:b8:8b:85:ea:38:73:67:2a: 69:35:77:64:9a:31:c2:18:42:e4:f4:fa:dd:00:55: bd:4d:f8:17:0c:62:9b:f2:58:ec:9a:2a:8c:58:d1: 7f:42:91:0b:e8:34:ef:6d:56:3c:13:e5:8a:54:57: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A0:F4:93:4A:8A:79:61:D7:4D:75:16:EE:D9:53:ED:5E:D2:01:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/57fef851-b812-3910-8438-f6cd28bc5f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:dd:ef:48:f8:7f:7d:c1:ff:5f:33:51:99:34:e9:22:ca:95: cc:db:74:fb:fc:78:05:27:d9:d9:58:ae:62:50:d9:04:e9:fb: f4:50:f6:03:99:75:49:ae:44:7f:b3:f5:0a:3b:ff:7e:e1:32: 1d:c6:90:eb:74:df:d7:47:0c:3d:95:2b:74:b3:88:37:b3:e1: e5:59:fd:1d:f5:a7:9c:24:9a:1c:9b:73:73:81:5d:7c:cb:c2: 9b:5d:5c:ee:e1:d0:06:02:ea:e8:81:93:77:7b:74:20:37:97: 0c:aa:8f:70:d8:38:ec:d0:39:0a:e2:f0:e3:d3:e4:23:5f:eb: 14:4a:c5:9a:df:e2:dc:21:4e:83:02:4a:f8:d9:3b:d2:2b:b4: b3:d6:bc:97:e8:05:7d:24:29:c2:5e:a2:72:45:27:34:15:4a: 96:9e:61:ad:3b:44:18:ef:a9:8d:1d:9f:2f:ae:e6:26:e8:c9: 42:55:32:a8:09:88:eb:18:e2:25:22:b6:a6:d7:d9:97:55:35: 94:f1:14:2c:34:91:e0:fb:f7:89:4b:03:86:b8:f9:37:8b:44: e5:f0:45:b0:10:fa:85:f9:9f:c9:71:a3:10:88:09:24:94:56: ba:ec:d2:4d:07:1d:8b:7c:e8:87:7a:7f:91:bc:95:88:c1:95: 14:80:f7:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu2HRBNCkAtPMS7g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTEwMTA0MDMyM1oXDTI2MDEzMDA1MDMyM1owLzEtMCsGA1UEAxMk MGM2NGUwZGEtYmEwZi00MDIwLWJhZDUtNDFiNjNlOTc3ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBjqGxyNguySyF1ho1m7/Q2yXLgoytrAo738 yJL9+UTr4DjOU+w/AuzK5ReuFRHKoAM37ycwezeXworTFKhE3LtTUgvffaZypGy8 D1JwvVM5x9tNpltc3n6XWwBuyQfYExu9k8fDtRcsUOIyLwXYjmDud5sJGLymkT1E QTgCy7L9I4QfUyalR+jf72oDeLK9DRi6IgbNF4POlGq6TgsAc3ZimRoKOxibkd+c OfOlZWYmQq5G0IKRh/mNiPrXRQR73YnIYY7C/xpXuIuF6jhzZyppNXdkmjHCGELk 9PrdAFW9TfgXDGKb8ljsmiqMWNF/QpEL6DTvbVY8E+WKVFc2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEug9JNKinlh1011Fu7ZU+1e0gEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvNTdmZWY4NTEtYjgxMi0z OTEwLTg0MzgtZjZjZDI4YmM1ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnd70j4f33B/18zUZk06SLKlczbdPv8eAUn2dlYrmJQ2QTp+/RQ9gOZ dUmuRH+z9Qo7/37hMh3GkOt039dHDD2VK3SziDez4eVZ/R31p5wkmhybc3OBXXzL wptdXO7h0AYC6uiBk3d7dCA3lwyqj3DYOOzQOQri8OPT5CNf6xRKxZrf4twhToMC SvjZO9IrtLPWvJfoBX0kKcJeonJFJzQVSpaeYa07RBjvqY0dny+u5iboyUJVMqgJ iOsY4iUitqbX2ZdVNZTxFCw0keD794lLA4a4+TeLROXwRbAQ+oX5n8lxoxCICSSU Vrrs0k0HHYt86Id6f5G8lYjBlRSA9zE= -----END CERTIFICATE-----Generated at Tue Nov 18 08:22:51 2025 by rpki-client