$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/db235090-d707-328b-a920-6b8dbd590f4b.roa File: db235090-d707-328b-a920-6b8dbd590f4b.roa (raw, json) Hash identifier: qruY1PvNPUgcMvRN/tnMAjWgYQzBLHHxDLYeZzmu2aw= Subject key identifier: F8:BC:F8:A0:54:86:72:01:A7:3B:B3:C8:CB:F7:7E:CC:09:07:6C:BA Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584B2496D11E0A7F676091BE2080 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/db235090-d707-328b-a920-6b8dbd590f4b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 11260 IP address blocks: 142.67.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d1:1e:0a:7f:67:60:91:be:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=571d4952-4424-45dc-916d-2d5cd7e1213b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:2e:34:2f:0c:da:71:40:27:58:94:d7:12: bf:28:bb:a9:46:78:64:6d:0a:7c:0b:35:38:b6:d8: 78:47:5e:89:c3:34:52:6b:17:bc:1b:4d:ae:bd:f2: 73:e1:f8:fd:9b:fd:14:30:b3:62:12:2c:ea:06:f3: 33:87:ea:0a:71:b7:dc:10:26:c8:a4:d8:9b:0b:a8: 46:ec:c5:d7:f2:0a:e9:04:35:b5:1d:8c:4d:d2:da: b6:4f:22:df:2d:c0:79:e0:d2:88:41:bf:ff:ef:6d: 77:8b:80:fd:a2:a5:81:02:43:4e:2d:a3:e0:3c:29: 95:94:b9:75:7d:1b:c8:f7:dc:b0:47:52:90:48:b7: 04:2e:97:dc:c5:0d:ef:65:4c:80:84:2e:01:23:a4: ad:13:9a:3b:0d:53:be:b3:a9:44:8c:2e:43:33:8a: 1e:b9:72:ab:56:73:45:95:53:0f:5d:5b:01:b7:2f: 5d:5c:4a:cc:43:68:87:74:92:ff:4e:02:71:99:d1: d4:f1:a3:72:6b:33:e4:09:c3:e9:bb:5f:24:77:53: b9:4f:3f:64:ad:75:8f:d8:9e:f5:06:dd:f9:6f:45: f5:d6:90:68:1a:e4:c4:48:60:24:d2:cc:ce:de:49: ae:66:3a:21:d9:ac:84:45:b9:bf:ad:e5:76:cc:aa: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BC:F8:A0:54:86:72:01:A7:3B:B3:C8:CB:F7:7E:CC:09:07:6C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/db235090-d707-328b-a920-6b8dbd590f4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 142.67.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f4:38:49:b7:c2:6a:ba:cf:8d:3a:36:5d:4c:b3:65:3c:ba: 5f:08:ad:57:c7:d8:0f:cd:7e:09:61:97:ba:55:4f:4c:3e:5d: a6:06:25:e2:6b:ab:41:d0:35:1b:a9:58:f8:15:0a:28:5e:4e: 83:ff:9f:c4:34:ff:cc:59:b9:29:c1:30:2e:33:59:f1:3f:02: 0a:ff:bf:f9:d9:c3:49:40:8b:1a:d6:72:fc:b2:45:e8:53:73: b1:66:34:ef:6d:27:c5:bd:7e:bc:65:62:1d:e6:a2:d6:e1:3f: 7b:d4:7c:9d:7e:ea:82:98:ed:e4:ca:67:a5:fc:58:0c:c3:1c: 8e:ab:98:c6:93:1f:70:1d:e3:e5:09:bc:5f:40:ca:2d:27:8c: 27:a9:10:42:95:48:66:7a:dd:bf:4b:b5:36:b2:06:73:6f:4a: e2:19:28:6b:e0:24:94:2d:c7:38:e4:ce:ac:ff:f4:c4:51:86: 45:ab:a4:a3:cd:31:81:e2:fc:8d:e5:d0:34:71:61:c5:fa:d2: 56:4d:1f:fd:fd:96:34:d5:37:fd:8f:e9:50:db:4e:c1:b1:7e: fc:39:de:85:3c:15:94:a5:19:4f:6a:f5:0e:12:d9:a9:fc:0a: 68:a4:50:2a:59:3e:8e:e1:23:a7:fb:cd:94:4f:26:73:c1:39: 1b:c8:97:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltEeCn9nYJG+IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NTcxZDQ5NTItNDQyNC00NWRjLTkxNmQtMmQ1Y2Q3ZTEyMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwwuNC8M2nFAJ1iU1xK/KLupRnhkbQp8CzU4 tth4R16JwzRSaxe8G02uvfJz4fj9m/0UMLNiEizqBvMzh+oKcbfcECbIpNibC6hG 7MXX8grpBDW1HYxN0tq2TyLfLcB54NKIQb//7213i4D9oqWBAkNOLaPgPCmVlLl1 fRvI99ywR1KQSLcELpfcxQ3vZUyAhC4BI6StE5o7DVO+s6lEjC5DM4oeuXKrVnNF lVMPXVsBty9dXErMQ2iHdJL/TgJxmdHU8aNyazPkCcPpu18kd1O5Tz9krXWP2J71 Bt35b0X11pBoGuTESGAk0szO3kmuZjoh2ayERbm/reV2zKr/6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi8+KBUhnIBpzuzyMv3fswJB2y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvZGIyMzUwOTAtZDcwNy0z MjhiLWE5MjAtNmI4ZGJkNTkwZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjkOyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC70OEm3wmq6z406Nl1Ms2U8ul8IrVfH2A/Nfglhl7pVT0w+XaYGJeJr q0HQNRupWPgVCiheToP/n8Q0/8xZuSnBMC4zWfE/Agr/v/nZw0lAixrWcvyyRehT c7FmNO9tJ8W9frxlYh3motbhP3vUfJ1+6oKY7eTKZ6X8WAzDHI6rmMaTH3Ad4+UJ vF9Ayi0njCepEEKVSGZ63b9LtTayBnNvSuIZKGvgJJQtxzjkzqz/9MRRhkWrpKPN MYHi/I3l0DRxYcX60lZNH/39ljTVN/2P6VDbTsGxfvw53oU8FZSlGU9q9Q4S2an8 CmikUCpZPo7hI6f7zZRPJnPBORvIl0o= -----END CERTIFICATE-----Generated at Fri Oct 10 21:35:43 2025 by rpki-client