$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa File: 60164611-a97d-3573-9338-fe964e7f3a2a.roa (raw, json) Hash identifier: CeK0I5HB/pPZe84Bcl0+JqRXEloekMXqKoMxfz4i2hE= Subject key identifier: 6D:CB:FD:64:48:7E:47:A8:DA:87:3B:14:BA:0F:0B:7C:E0:21:64:1F Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584B74274967E1763CB43AB18900 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 1299 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:49:67:e1:76:3c:b4:3a:b1:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=0b87ea67-93b0-4fdf-ae80-013d4aa17d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:61:b8:20:49:9c:8a:e9:e7:72:6c:0a:99: cb:e8:82:9e:7b:5c:2a:36:b1:fb:53:29:71:06:71: 7f:73:2b:33:95:cc:8e:8d:d4:cf:90:41:37:80:33: 8b:36:78:c6:99:b5:c2:e8:01:28:cc:0e:46:d8:5e: 72:66:00:f5:d5:48:96:e8:af:e7:e5:46:ec:0a:8a: e6:54:ee:b1:48:39:0c:f6:73:68:ae:25:94:ac:2f: eb:3f:79:40:13:7a:d4:f0:c7:96:a9:2a:80:85:09: b1:e4:af:47:d9:a9:aa:48:a7:30:f1:58:37:8a:c1: 59:cf:96:46:6a:ff:67:c1:98:c3:73:f7:6d:bb:d2: c3:d4:8b:7a:40:92:78:c9:0f:fb:f3:42:08:d1:1a: db:cb:ef:bb:e7:6b:3d:dc:42:74:22:9c:48:2f:c8: 48:69:88:14:b3:17:b2:2f:39:67:5e:6a:c2:39:58: 10:9c:a1:98:e2:39:fe:0f:29:a9:33:92:36:2e:39: 02:97:70:35:4d:02:0d:f0:fc:16:e4:4f:62:94:f3: 62:b2:99:dd:1b:97:8b:61:e1:fa:e1:f9:d2:7b:7e: 7a:3e:f3:15:ce:90:2b:60:06:ae:b8:a8:cf:8e:51: d5:a6:db:b0:3d:8a:46:e2:38:ac:e2:a6:06:b6:5a: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:FD:64:48:7E:47:A8:DA:87:3B:14:BA:0F:0B:7C:E0:21:64:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ea:79:26:18:e1:60:7d:3e:9c:f9:38:ea:e2:a0:3a:83:c2: 66:7e:eb:a6:85:25:8f:94:26:ed:d7:05:fd:39:11:c8:ac:79: 1c:72:ea:eb:9c:ec:3b:b1:7f:5e:c9:ee:ef:e0:35:bc:3f:ab: 22:30:ed:e4:2c:8a:f1:3c:20:44:ab:76:5d:43:c0:cf:f1:1c: 49:8c:f8:c7:c2:05:ab:2e:b6:88:df:11:67:30:8a:77:2e:27: d8:24:9e:78:6f:27:c9:89:72:6c:16:e3:d8:55:c4:b7:e5:d2: 8a:5a:a9:9a:06:c6:20:b8:ab:e7:67:c7:92:3a:5d:f0:c0:cf: b6:d7:ef:c2:97:45:a1:ff:a8:f9:e7:b7:b8:64:78:89:33:2c: 7f:8e:ff:45:90:ad:40:c8:4e:e0:09:e2:d0:c2:4e:bd:df:16: 7e:35:a1:a0:cb:0c:85:06:af:b9:c0:eb:a7:54:4a:04:fc:95: 64:d2:60:c8:cd:6d:f6:33:f5:d4:c8:6f:b5:7c:92:ab:9d:98: a1:61:dd:31:55:42:ff:1e:82:f0:f0:bb:95:fc:60:e2:e0:5e: 56:30:32:a8:f9:2a:eb:93:ff:86:32:17:89:6a:5f:a3:55:3c: 41:43:af:17:1f:cf:5d:b4:5a:99:41:e6:b3:05:b4:1c:6f:f0: be:c1:25:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J0ln4XY8tDqxiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk MGI4N2VhNjctOTNiMC00ZmRmLWFlODAtMDEzZDRhYTE3ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZhuCBJnIrp53JsCpnL6IKee1wqNrH7Uylx BnF/cyszlcyOjdTPkEE3gDOLNnjGmbXC6AEozA5G2F5yZgD11UiW6K/n5UbsCorm VO6xSDkM9nNoriWUrC/rP3lAE3rU8MeWqSqAhQmx5K9H2amqSKcw8Vg3isFZz5ZG av9nwZjDc/dtu9LD1It6QJJ4yQ/780II0Rrby++752s93EJ0IpxIL8hIaYgUsxey LzlnXmrCOVgQnKGY4jn+DympM5I2LjkCl3A1TQIN8PwW5E9ilPNispndG5eLYeH6 4fnSe356PvMVzpArYAauuKjPjlHVptuwPYpG4jis4qYGtlrGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3L/WRIfkeo2oc7FLoPC3zgIWQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvNjAxNjQ2MTEtYTk3ZC0z NTczLTkzMzgtZmU5NjRlN2YzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzqeSYY4WB9Ppz5OOrioDqDwmZ+66aFJY+UJu3XBf05EciseRxy6uuc 7Duxf17J7u/gNbw/qyIw7eQsivE8IESrdl1DwM/xHEmM+MfCBasutojfEWcwincu J9gknnhvJ8mJcmwW49hVxLfl0opaqZoGxiC4q+dnx5I6XfDAz7bX78KXRaH/qPnn t7hkeIkzLH+O/0WQrUDITuAJ4tDCTr3fFn41oaDLDIUGr7nA66dUSgT8lWTSYMjN bfYz9dTIb7V8kqudmKFh3TFVQv8egvDwu5X8YOLgXlYwMqj5KuuT/4YyF4lqX6NV PEFDrxcfz120WplB5rMFtBxv8L7BJWg= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:08 2025 by rpki-client