$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa File: 9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa (raw, json) Hash identifier: Rf6Sbq4LAzJzZIT9GAbnyy4L7VgjI0jF1o0Wu861rmU= Subject key identifier: F9:B4:41:7E:61:E9:E5:2B:7E:4D:84:79:81:48:7A:41:27:2D:FE:75 Certificate issuer: /CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Certificate serial: 010D0C9F4328584B77FA9265B49F0142A4C21400 Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa Signing time: Thu 09 Oct 2025 21:53:46 +0000 ROA not before: Thu 09 Oct 2025 21:53:46 +0000 ROA not after: Wed 07 Jan 2026 22:53:46 +0000 asID: 401461 IP address blocks: 142.249.4.0/22 maxlen: 22 2602:f7b4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:fa:92:65:b4:9f:01:42:a4:c2:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Validity Not Before: Oct 9 21:53:46 2025 GMT Not After : Jan 7 22:53:46 2026 GMT Subject: CN=a0f2ab16-bc31-4050-904a-c2c16332fa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:58:d5:a2:af:c6:ca:7e:68:74:67:53:15: 38:92:d8:0f:40:f5:76:e2:12:84:0d:a6:40:1f:5d: 1c:ef:20:34:0d:49:7f:fb:70:29:24:53:01:67:b6: 04:2f:98:ea:07:06:74:c9:d5:57:45:95:ce:b7:d0: 03:1e:da:53:16:35:de:96:4f:f4:bc:ad:b6:17:92: 03:fd:ac:88:2b:6a:6a:fd:bd:cf:49:49:dd:81:65: 11:86:f7:8b:ab:2d:50:0d:06:99:76:8e:cf:15:5d: 83:76:ee:f6:30:18:f5:8a:5b:d0:fd:5f:13:f6:86: 8b:ab:03:3a:c5:e2:72:f5:d7:90:63:60:02:e9:57: 69:5e:26:37:8f:31:3d:4c:a0:f0:9b:ae:9b:ee:ed: 2c:40:40:29:57:92:4c:00:20:77:ad:90:2d:37:56: 61:9a:b6:07:0e:b2:ae:ac:5d:9f:7f:54:a2:98:eb: a2:e0:ff:a6:ed:e5:4f:f1:02:86:8a:31:4d:71:d5: e3:95:96:9f:8d:11:45:a7:8d:f0:a7:ec:d7:8e:f9: 9e:ea:e3:0c:ab:c7:dc:9b:ff:d4:9d:66:90:45:ac: bf:7e:54:1f:67:44:39:83:76:c2:13:f4:f0:97:d4: b1:74:83:11:19:c5:2e:2a:dd:a1:52:17:05:1a:4f: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B4:41:7E:61:E9:E5:2B:7E:4D:84:79:81:48:7A:41:27:2D:FE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl X509v3 Authority Key Identifier: keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer sbgp-ipAddrBlock: critical IPv4: 142.249.4.0/22 IPv6: 2602:f7b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a0:0e:dd:2f:22:26:21:e0:b7:bf:93:71:40:76:db:1a:c9: 40:99:eb:bd:35:56:d2:3b:1b:70:74:06:24:2f:f3:fc:59:0d: 3a:8b:f8:d9:fa:8a:a0:14:7e:9a:70:72:34:32:fa:22:5e:62: 74:0a:83:f1:23:d6:68:a0:a2:5a:2f:de:9f:3e:e1:2f:0a:d8: 2d:18:f4:53:3f:ae:52:2b:36:b8:4e:e9:9b:48:c3:ee:e4:8e: 3b:cb:b1:fa:05:e0:c5:14:12:6b:f5:52:dd:82:57:36:7c:47: 25:e8:1a:26:cb:5d:36:a3:e8:20:4e:73:56:51:d7:35:aa:f1: 0b:53:ed:7e:dd:e4:a3:7f:aa:89:b0:b6:95:0b:52:19:56:af: 09:5a:e7:6c:f5:f8:12:17:e5:20:79:26:42:b1:02:57:9d:80: a2:17:98:94:65:df:c0:9f:0e:3c:11:e3:70:17:9d:0a:6c:0b: a2:f8:13:23:95:30:a5:e5:55:fc:ec:b5:c8:07:e6:c6:5b:30: 7d:7e:fd:18:ac:f9:bc:f6:7b:82:2d:c9:a4:bf:f7:b8:d6:e9: c0:f5:9a:48:51:2f:4f:aa:cb:a1:58:e8:7a:d7:9e:37:3a:6d: e2:24:eb:b4:6e:ae:a9:fc:b8:86:0c:68:f9:81:b1:a0:27:31: 8a:0d:28:c9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt3+pJltJ8BQqTCFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3 OGI1MB4XDTI1MTAwOTIxNTM0NloXDTI2MDEwNzIyNTM0NlowLzEtMCsGA1UEAxMk YTBmMmFiMTYtYmMzMS00MDUwLTkwNGEtYzJjMTYzMzJmYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ1Y1aKvxsp+aHRnUxU4ktgPQPV24hKEDaZA H10c7yA0DUl/+3ApJFMBZ7YEL5jqBwZ0ydVXRZXOt9ADHtpTFjXelk/0vK22F5ID /ayIK2pq/b3PSUndgWURhveLqy1QDQaZdo7PFV2Ddu72MBj1ilvQ/V8T9oaLqwM6 xeJy9deQY2AC6VdpXiY3jzE9TKDwm66b7u0sQEApV5JMACB3rZAtN1ZhmrYHDrKu rF2ff1SimOui4P+m7eVP8QKGijFNcdXjlZafjRFFp43wp+zXjvme6uMMq8fcm//U nWaQRay/flQfZ0Q5g3bCE/Twl9SxdIMRGcUuKt2hUhcFGk8UkwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPm0QX5h6eUrfk2EeYFIekEnLf51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1 ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvOWIyMTcxYmItM2Y2Yy0z Nzc3LWJlODMtMjk3ZTVmNjVjNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3NWQzZmEtMDE3ZC00OTkxLTll ZGYtMzkxMDFlNWQ3OGI1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05ZWRmLTM5MTAxZTVk NzhiNS5jcmwwHwYDVR0jBBgwFoAUwkGOiLkb3QGcAwS1SgSyzPlOLfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEw MWU1ZDc4YjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjvkEMA4E AgACMAgDBgAmAve0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBooA7dLyImIeC3v5NxQHbbGslAmeu9NVbS OxtwdAYkL/P8WQ06i/jZ+oqgFH6acHI0MvoiXmJ0CoPxI9ZooKJaL96fPuEvCtgt GPRTP65SKza4TumbSMPu5I47y7H6BeDFFBJr9VLdglc2fEcl6Bomy102o+ggTnNW Udc1qvELU+1+3eSjf6qJsLaVC1IZVq8JWuds9fgSF+UgeSZCsQJXnYCiF5iUZd/A nw48EeNwF50KbAui+BMjlTCl5VX87LXIB+bGWzB9fv0YrPm89nuCLcmkv/e41unA 9ZpIUS9PqsuhWOh61543Om3iJOu0bq6p/LiGDGj5gbGgJzGKDSjJ -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:17 2025 by rpki-client