$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa File: c3cea639-bd97-3f2e-8762-4883aede8a1f.roa (raw, json) Hash identifier: v77H3ksuqulmRiJAk5+EFAZesbHZaXhCtAAYrlM45po= Subject key identifier: DB:4C:91:D7:BA:8A:C6:73:62:16:DE:78:13:08:65:6C:79:E9:7B:D8 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584B4FDC733A5CDC463E861E8AE0 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 8075 IP address blocks: 142.229.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:73:3a:5c:dc:46:3e:86:1e:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=b8e4facf-b95b-431a-8c8c-0064810da264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:9e:51:49:2a:5c:7f:06:30:7b:12:a2:da: f2:c1:d8:6f:2b:49:b1:6f:d0:09:8a:a3:2f:16:4d: d9:3c:00:c2:78:6f:fe:6f:10:21:14:1e:1d:00:28: cf:63:a4:96:4d:d0:2d:8c:37:6e:7e:13:01:ae:f0: 02:f8:9e:33:ae:a6:5a:e0:75:50:5d:53:89:0f:17: 5c:9c:98:96:fb:bf:95:cb:71:ca:1d:a3:87:23:18: 59:84:89:9e:77:d4:e3:ce:13:0d:b6:ed:ae:6d:fc: 52:48:96:40:a8:75:fe:6d:a3:29:7e:24:d6:18:0a: ca:af:fd:c4:48:77:4f:c4:88:c3:cd:d7:df:2b:61: 74:98:89:9e:7b:64:87:0d:46:1a:25:c0:7d:97:c3: 7b:1f:c6:32:2e:6d:1e:e5:16:50:6d:1e:6f:4c:d1: 33:18:3a:58:85:e5:da:c4:79:b4:a7:63:22:01:d2: 98:08:a0:cf:7a:4c:be:4b:05:92:ee:05:50:e9:9f: ea:15:50:49:f2:ad:41:35:5e:7d:a9:02:1b:b1:ec: 2a:fe:c9:e7:e6:36:ec:68:02:80:04:a6:44:21:4f: 04:97:08:f7:3a:3d:f4:07:4e:6c:a4:61:9e:a4:54: ab:01:07:0b:de:5d:5e:c0:46:2f:d7:3c:ae:4f:94: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4C:91:D7:BA:8A:C6:73:62:16:DE:78:13:08:65:6C:79:E9:7B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/c3cea639-bd97-3f2e-8762-4883aede8a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 142.229.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:21:a8:cd:1e:d4:bb:2e:8a:4a:1f:5b:5b:8e:05:51:7c:bb: 35:ca:30:de:3f:3b:34:d2:85:f3:01:44:a0:82:d4:bf:33:5e: 26:d7:f7:92:1a:88:5d:e8:81:f3:97:e9:4d:dd:0b:8f:26:7c: 67:02:a8:5f:a4:0e:24:1f:3c:37:cf:58:91:6d:14:1a:a2:0c: 67:5d:e9:4b:07:b1:de:1f:70:ff:39:23:4b:93:fe:1e:66:5e: 6d:e6:00:47:fa:de:c6:54:50:96:02:96:b1:ce:67:90:6f:94: ed:f3:bf:e6:fd:06:b3:cb:d6:32:6e:1c:f5:14:de:c9:60:a4: 02:c3:b6:7b:bc:e6:f6:e9:ed:90:f8:9d:77:4b:ed:d2:1f:f8: f4:04:7e:33:f9:f9:cd:ed:59:f8:3f:e8:ad:38:1a:95:40:31: 40:41:87:77:a0:96:27:dc:39:a2:d4:5b:ab:7b:d4:1d:70:e2: ae:ce:c4:dc:bd:e1:95:fc:0c:6f:65:cc:f3:2b:d5:0c:e8:0c: dd:31:c3:98:a5:d1:24:39:c2:d4:80:48:37:85:48:74:d5:2d: c3:6e:f0:66:13:53:b3:e5:57:d9:13:4d:ec:7a:20:fd:86:4b: 3f:53:d7:91:e7:24:e4:41:70:0b:f0:79:97:17:62:ad:51:d8: 29:98:f7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HM6XNxGPoYeiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YjhlNGZhY2YtYjk1Yi00MzFhLThjOGMtMDA2NDgxMGRhMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YOeUUkqXH8GMHsSotrywdhvK0mxb9AJiqMv Fk3ZPADCeG/+bxAhFB4dACjPY6SWTdAtjDdufhMBrvAC+J4zrqZa4HVQXVOJDxdc nJiW+7+Vy3HKHaOHIxhZhImed9TjzhMNtu2ubfxSSJZAqHX+baMpfiTWGArKr/3E SHdPxIjDzdffK2F0mImee2SHDUYaJcB9l8N7H8YyLm0e5RZQbR5vTNEzGDpYheXa xHm0p2MiAdKYCKDPeky+SwWS7gVQ6Z/qFVBJ8q1BNV59qQIbsewq/snn5jbsaAKA BKZEIU8Elwj3Oj30B05spGGepFSrAQcL3l1ewEYv1zyuT5RvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtMkde6isZzYhbeeBMIZWx56XvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvYzNjZWE2MzktYmQ5Ny0z ZjJlLTg3NjItNDg4M2FlZGU4YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJchqM0e1LsuikofW1uOBVF8uzXKMN4/OzTShfMBRKCC1L8zXibX95Ia iF3ogfOX6U3dC48mfGcCqF+kDiQfPDfPWJFtFBqiDGdd6UsHsd4fcP85I0uT/h5m Xm3mAEf63sZUUJYClrHOZ5BvlO3zv+b9BrPL1jJuHPUU3slgpALDtnu85vbp7ZD4 nXdL7dIf+PQEfjP5+c3tWfg/6K04GpVAMUBBh3eglifcOaLUW6t71B1w4q7OxNy9 4ZX8DG9lzPMr1QzoDN0xw5il0SQ5wtSASDeFSHTVLcNu8GYTU7PlV9kTTex6IP2G Sz9T15HnJORBcAvweZcXYq1R2CmY9/4= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:48 2025 by rpki-client