$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa File: b649b1d0-5d8d-301d-a8c5-4412afe89287.roa (raw, json) Hash identifier: cmqFue2vTBPMEoECp+WFC2Z0/ECCgcT+c93pI1I2KXg= Subject key identifier: 1E:36:7C:E9:D5:2C:34:B4:4C:13:C1:1A:9D:23:AA:09:53:88:AC:E0 Certificate issuer: /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Certificate serial: 010D0C9F4328584B81A774C5FB8FD8BA7CFCC600 Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa Signing time: Mon 13 Oct 2025 09:04:23 +0000 ROA not before: Mon 13 Oct 2025 09:04:23 +0000 ROA not after: Sun 11 Jan 2026 10:04:23 +0000 asID: 174 IP address blocks: 142.248.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:81:a7:74:c5:fb:8f:d8:ba:7c:fc:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Validity Not Before: Oct 13 09:04:23 2025 GMT Not After : Jan 11 10:04:23 2026 GMT Subject: CN=bafdc9d4-bf4b-4dc9-973f-9225b72ec91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:34:d1:aa:10:f1:54:d6:55:51:57:0f:34: 1d:f9:bb:75:13:48:13:c0:78:88:f7:91:16:15:ce: 80:ce:d6:2f:f3:55:7e:ee:3e:c3:85:05:40:40:fa: f5:7b:d9:ab:d3:14:5b:56:ba:83:81:83:13:ac:57: 91:1d:35:9a:b2:32:64:9c:47:c7:5c:4a:df:45:67: cd:0d:2c:7c:eb:95:9d:00:8a:62:af:48:5c:65:b7: d7:27:5f:37:88:76:43:f2:6f:da:8c:52:23:b1:a2: e6:c5:77:4c:ab:1c:a3:9b:b0:b1:ae:d3:24:bd:f7: fb:60:f1:45:0e:60:31:b9:62:09:3d:50:da:be:13: b6:5e:35:02:18:a6:e6:5b:cd:7e:0f:d3:63:89:e3: 6a:de:0b:70:bc:07:81:0a:f8:6f:e9:12:ef:94:14: 19:ab:0d:74:47:b9:2a:01:be:20:01:8d:e1:ff:f1: ab:85:02:53:97:66:53:cf:9a:69:f8:ef:8f:b8:a5: 8e:68:f3:ad:d8:0f:dd:41:cb:2e:b7:da:57:5c:39: c3:80:11:0f:bf:0f:32:ad:f1:0f:a7:d5:ab:4e:b2: cc:97:56:2a:f7:64:92:13:27:f7:20:6d:58:76:31: 57:d8:24:9d:5e:c5:bc:c2:4a:6e:96:4d:84:3d:da: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:36:7C:E9:D5:2C:34:B4:4C:13:C1:1A:9D:23:AA:09:53:88:AC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl X509v3 Authority Key Identifier: keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:93:5e:98:df:72:60:22:dd:6e:e7:48:95:67:e1:85:fd:70: ee:37:b4:e7:2a:8f:6b:82:22:ac:c1:59:c8:c7:fd:f0:b1:31: fc:f8:42:f0:da:7d:4d:5c:06:df:77:a6:14:f8:fb:92:2b:36: 3a:be:88:5c:71:6a:a9:b4:ae:21:3b:c8:da:b3:e1:46:09:41: 7c:3b:7c:45:86:fa:a8:bb:24:c8:4d:58:3f:4e:e2:55:0d:e3: ff:dd:18:52:c0:ce:1f:e8:43:08:da:53:26:f4:b6:98:9b:bc: 1b:ae:ce:b5:5f:b5:a0:bc:0b:c4:51:c8:d3:b2:e6:54:5e:f1: 34:b7:01:76:47:90:d6:7a:69:79:5b:c9:c6:b7:5f:13:27:db: 86:68:5c:5f:3f:99:73:16:69:ad:52:1b:40:73:8c:dc:e9:52: dd:5a:df:b9:39:cd:aa:28:f3:ca:29:bf:7b:61:be:ea:5a:15: 07:9c:9e:1f:79:ba:11:88:d4:be:87:24:7a:07:65:17:dc:92: 22:e1:93:3a:6f:bd:c2:0d:01:c4:5e:41:20:1b:41:c0:19:35: a9:e5:d4:d9:3f:ec:8d:48:cd:a9:3d:4e:3b:ca:7e:91:01:6c: f0:04:4e:61:65:19:04:da:60:04:05:4c:ba:ba:04:7e:02:36: fb:3c:40:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuBp3TF+4/Yunz8xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl OTlkMB4XDTI1MTAxMzA5MDQyM1oXDTI2MDExMTEwMDQyM1owLzEtMCsGA1UEAxMk YmFmZGM5ZDQtYmY0Yi00ZGM5LTk3M2YtOTIyNWI3MmVjOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVs00aoQ8VTWVVFXDzQd+bt1E0gTwHiI95EW Fc6AztYv81V+7j7DhQVAQPr1e9mr0xRbVrqDgYMTrFeRHTWasjJknEfHXErfRWfN DSx865WdAIpir0hcZbfXJ183iHZD8m/ajFIjsaLmxXdMqxyjm7CxrtMkvff7YPFF DmAxuWIJPVDavhO2XjUCGKbmW81+D9NjieNq3gtwvAeBCvhv6RLvlBQZqw10R7kq Ab4gAY3h//GrhQJTl2ZTz5pp+O+PuKWOaPOt2A/dQcsut9pXXDnDgBEPvw8yrfEP p9WrTrLMl1Yq92SSEyf3IG1YdjFX2CSdXsW8wkpulk2EPdrs0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB42fOnVLDS0TBPBGp0jqglTiKzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1 MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvYjY0OWIxZDAtNWQ4ZC0z MDFkLWE4YzUtNDQxMmFmZTg5Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk M2IxY2U5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2TXpjfcmAi3W7nSJVn4YX9cO43tOcqj2uCIqzBWcjH/fCxMfz4QvDa fU1cBt93phT4+5IrNjq+iFxxaqm0riE7yNqz4UYJQXw7fEWG+qi7JMhNWD9O4lUN 4//dGFLAzh/oQwjaUyb0tpibvBuuzrVftaC8C8RRyNOy5lRe8TS3AXZHkNZ6aXlb yca3XxMn24ZoXF8/mXMWaa1SG0BzjNzpUt1a37k5zaoo88opv3thvupaFQecnh95 uhGI1L6HJHoHZRfckiLhkzpvvcINAcReQSAbQcAZNanl1Nk/7I1Izak9TjvKfpEB bPAETmFlGQTaYAQFTLq6BH4CNvs8QAk= -----END CERTIFICATE-----Generated at Mon Oct 13 22:06:18 2025 by rpki-client