$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa File: 6ebeb817-6095-3446-9a11-b67c1f10a982.roa (raw, json) Hash identifier: P+LDDFQnVztxIEnJCYFuz5Z6ExRxcvRdKvMLONVZeIQ= Subject key identifier: 44:49:DD:46:54:B1:21:E6:CC:9B:3E:EC:D1:EA:B8:5A:C0:75:E4:87 Certificate issuer: /CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Certificate serial: 010D0C9F4328584B825A68D24487F42E70465A80 Authority key identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa Signing time: Mon 13 Oct 2025 15:04:57 +0000 ROA not before: Mon 13 Oct 2025 15:04:57 +0000 ROA not after: Sun 11 Jan 2026 16:04:57 +0000 asID: 401656 IP address blocks: 142.248.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:5a:68:d2:44:87:f4:2e:70:46:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Validity Not Before: Oct 13 15:04:57 2025 GMT Not After : Jan 11 16:04:57 2026 GMT Subject: CN=ff01ea99-ed72-412d-a5a8-e327f722525d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:fa:1f:bf:0b:db:19:a4:dc:a4:f0:7e:82: 04:57:d5:fd:e9:68:8a:9e:38:49:1a:e7:1c:52:77: 7d:7d:e3:e9:ea:5a:d8:0e:c6:3c:88:7b:17:10:14: b3:99:49:09:12:ae:1d:e3:08:74:b0:ef:9e:21:de: 13:fd:4d:0a:f5:ed:0e:b7:58:b2:db:ce:33:f8:d0: 9d:44:2b:1f:5b:6a:7e:a7:8f:6e:31:ab:4c:ba:7c: 10:40:cc:f1:e2:89:71:b8:c6:75:cd:ce:8a:32:67: 43:0f:7a:0a:cb:4c:43:60:c1:39:ca:15:8b:3b:fc: f7:59:78:3c:24:3e:8f:81:a1:a0:39:7c:da:8a:09: d8:af:6a:c4:d7:c2:61:02:ff:6e:dc:d8:7a:60:df: 9c:51:c2:85:65:23:46:62:56:79:e2:35:9e:9e:6e: ae:8a:07:ed:66:b1:53:0a:92:4c:a0:f8:d1:fc:56: ed:c1:6c:17:7f:9b:c6:73:68:1b:cb:e4:23:44:59: 93:66:00:9b:54:0d:a9:c5:3f:14:0b:13:bc:31:da: 6d:c0:49:c8:ac:59:df:27:11:0b:fd:3a:e3:8f:fc: b6:6a:74:08:20:91:06:00:44:74:e0:48:21:44:d5: 12:a6:3c:cb:00:bd:17:45:b0:34:da:76:e2:fa:e1: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:49:DD:46:54:B1:21:E6:CC:9B:3E:EC:D1:EA:B8:5A:C0:75:E4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl X509v3 Authority Key Identifier: keyid:63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer sbgp-ipAddrBlock: critical IPv4: 142.248.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6c:48:cf:e6:1c:1f:7c:d2:46:8b:39:a0:ae:22:2d:df:b8: 07:98:40:40:cf:bc:5d:c9:b0:96:1e:80:31:fa:92:d9:43:05: 6e:0c:28:d6:17:0c:fd:44:81:7f:5e:5a:a0:46:8b:bb:2f:ca: af:58:32:fe:3e:ab:71:d1:a2:c7:46:3f:63:07:75:c8:5d:3e: af:68:fc:3a:90:84:2c:b2:2f:20:c0:16:4a:cd:b8:0a:7a:4a: 2e:0b:03:35:d7:bb:53:31:48:f1:c3:39:12:fd:75:fa:29:1a: 62:5b:9b:c2:3e:26:14:fc:64:f6:ba:6f:6c:4c:da:d1:ab:93: 5e:02:10:03:6f:b0:b0:a0:70:f6:b5:e3:50:c6:85:5b:94:93: 15:2f:dd:d1:c2:3f:e0:2c:44:4d:cd:8b:fb:1f:4a:2e:74:86: 1d:fc:37:41:cc:9c:7e:d3:16:df:d6:7e:db:09:b5:22:ad:e5: 3d:c3:81:f7:3d:76:30:07:62:5a:72:17:40:e7:27:b9:51:8a: 47:30:c2:ca:f5:f3:0e:f9:7f:59:4f:ad:98:b2:d6:c4:5b:db: d5:db:cc:c9:7a:a8:cb:9a:13:65:11:21:4c:6b:30:54:14:8c: 35:c8:03:c8:c2:48:92:3f:77:02:40:7e:a9:de:b0:73:cb:8a: 85:d5:98:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCWmjSRIf0LnBGWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5NTY0MGYtZmU2Mi00YWE4LWE1OWMtMGNkYTRjNDli ZGE0MB4XDTI1MTAxMzE1MDQ1N1oXDTI2MDExMTE2MDQ1N1owLzEtMCsGA1UEAxMk ZmYwMWVhOTktZWQ3Mi00MTJkLWE1YTgtZTMyN2Y3MjI1MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDv6H78L2xmk3KTwfoIEV9X96WiKnjhJGucc Und9fePp6lrYDsY8iHsXEBSzmUkJEq4d4wh0sO+eId4T/U0K9e0Ot1iy284z+NCd RCsfW2p+p49uMatMunwQQMzx4olxuMZ1zc6KMmdDD3oKy0xDYME5yhWLO/z3WXg8 JD6PgaGgOXzaignYr2rE18JhAv9u3Nh6YN+cUcKFZSNGYlZ54jWenm6uigftZrFT CpJMoPjR/FbtwWwXf5vGc2gby+QjRFmTZgCbVA2pxT8UCxO8MdptwEnIrFnfJxEL /Trjj/y2anQIIJEGAER04EghRNUSpjzLAL0XRbA02nbi+uECqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERJ3UZUsSHmzJs+7NHquFrAdeSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1 NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0OWJkYTQvNmViZWI4MTctNjA5NS0z NDQ2LTlhMTEtYjY3YzFmMTBhOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5NTY0MGYtZmU2Mi00YWE4LWE1 OWMtMGNkYTRjNDliZGE0LzU4OTU2NDBmLWZlNjItNGFhOC1hNTljLTBjZGE0YzQ5 YmRhNC5jcmwwHwYDVR0jBBgwFoAUY79ieCn59gN4cLt1otolooed4vwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2Rh NGM0OWJkYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFsSM/mHB980kaLOaCuIi3fuAeYQEDPvF3JsJYegDH6ktlDBW4MKNYX DP1EgX9eWqBGi7svyq9YMv4+q3HRosdGP2MHdchdPq9o/DqQhCyyLyDAFkrNuAp6 Si4LAzXXu1MxSPHDORL9dfopGmJbm8I+JhT8ZPa6b2xM2tGrk14CEANvsLCgcPa1 41DGhVuUkxUv3dHCP+AsRE3Ni/sfSi50hh38N0HMnH7TFt/WftsJtSKt5T3Dgfc9 djAHYlpyF0DnJ7lRikcwwsr18w75f1lPrZiy1sRb29XbzMl6qMuaE2URIUxrMFQU jDXIA8jCSJI/dwJAfqnesHPLioXVmDo= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:35 2025 by rpki-client