$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa File: 3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa (raw, json) Hash identifier: gZG2CqMDW9RIs41+SiiQbt+VXSTb5sXuOZsDL+racWQ= Subject key identifier: E4:22:CB:65:B7:99:04:42:35:E2:E3:54:E8:D9:50:66:19:B4:CE:F6 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584B5B1AAC22E1FC021B8CE22B00 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa Signing time: Mon 29 Sep 2025 13:40:00 +0000 ROA not before: Mon 29 Sep 2025 13:40:00 +0000 ROA not after: Sun 28 Dec 2025 14:40:00 +0000 asID: 203020 IP address blocks: 142.147.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:1a:ac:22:e1:fc:02:1b:8c:e2:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Sep 29 13:40:00 2025 GMT Not After : Dec 28 14:40:00 2025 GMT Subject: CN=8072cd4b-f4e4-427f-aaa2-986b3f3044e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:54:f9:6c:73:63:42:72:04:93:60:15:c4: 36:e1:b3:1c:a3:06:c4:4a:c0:57:9a:55:aa:34:c2: 67:6b:22:77:55:5d:8e:a8:ec:83:52:50:1f:6b:56: e1:67:93:1f:a4:26:f2:c7:56:b6:c2:79:fc:4b:09: 5b:5f:86:b8:7b:6d:9a:0f:d8:9e:6b:8a:b5:0c:f1: 7a:b2:27:f4:a3:28:15:c8:a2:3e:53:f7:0d:d0:40: 8b:01:d5:6e:b3:53:15:39:e7:2a:b0:72:e5:0a:65: 5b:7c:6e:4d:f1:6c:11:79:56:9b:f2:00:a0:53:fc: 7a:77:f5:e9:2d:6c:4d:78:d6:4c:73:77:0b:42:dc: 83:9b:b4:8b:24:00:34:69:59:11:49:09:1b:8e:d7: 6d:9a:f4:58:3a:a3:ea:b6:b5:68:2c:df:31:8d:cc: a9:ee:7b:e3:61:55:3b:30:ba:77:85:c6:18:1f:4c: a7:38:b3:17:2a:e1:2a:64:4f:0e:64:07:7d:9e:eb: 89:37:be:45:09:97:44:e9:a8:21:1c:81:cb:fb:5d: 93:cb:6f:21:86:54:13:ab:fe:9a:4d:30:e1:f7:5f: 90:ec:27:3b:3d:19:1c:b4:fc:71:01:df:ff:30:9e: 32:c5:d9:98:fd:9a:39:c2:f7:75:be:ec:31:fb:de: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:CB:65:B7:99:04:42:35:E2:E3:54:E8:D9:50:66:19:B4:CE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ca:7b:d1:50:60:61:35:1f:1a:fc:ca:9c:cb:b3:ee:d9:c4: 26:6a:73:6f:40:38:0b:d3:e7:07:f1:12:3f:23:d2:7e:35:f8: 54:d1:86:d2:53:83:09:df:6e:21:7e:5e:ed:ba:ac:4e:af:79: b8:56:75:29:b3:29:c9:53:07:57:6a:ab:ae:7a:8d:8d:d7:09: 4c:a1:f7:93:45:2a:9e:99:29:1e:cc:5f:85:02:29:d0:6d:b4: e3:32:ec:34:87:ae:84:d3:40:06:f8:54:71:51:5f:35:48:81: 8d:a4:16:98:f0:ae:66:33:ca:62:2e:ce:5e:64:84:13:dd:49: 9a:ba:5f:5c:66:e6:b6:95:0f:57:2f:56:a8:e0:90:be:bb:04: 3f:87:d7:32:cd:3d:f1:90:9e:33:ea:f8:8e:4c:37:b4:39:cf: 9a:5f:d9:af:72:23:75:25:1d:e0:63:1d:e2:8b:87:1c:79:33: 56:a1:17:33:75:d2:09:03:3d:94:40:96:51:ef:49:2b:c0:3a: b2:9b:3e:42:1e:84:e6:4b:6a:1c:cb:fd:79:0c:50:92:65:54: 07:4a:2a:5c:0f:d1:0d:93:da:10:76:43:6a:19:b0:6d:a6:99: 62:56:1d:fc:e0:fb:e9:17:42:69:99:22:5f:9d:89:e8:78:f3: 33:8e:ba:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbGqwi4fwCG4ziKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MDkyOTEzNDAwMFoXDTI1MTIyODE0NDAwMFowLzEtMCsGA1UEAxMk ODA3MmNkNGItZjRlNC00MjdmLWFhYTItOTg2YjNmMzA0NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRlU+WxzY0JyBJNgFcQ24bMcowbESsBXmlWq NMJnayJ3VV2OqOyDUlAfa1bhZ5MfpCbyx1a2wnn8SwlbX4a4e22aD9iea4q1DPF6 sif0oygVyKI+U/cN0ECLAdVus1MVOecqsHLlCmVbfG5N8WwReVab8gCgU/x6d/Xp LWxNeNZMc3cLQtyDm7SLJAA0aVkRSQkbjtdtmvRYOqPqtrVoLN8xjcyp7nvjYVU7 MLp3hcYYH0ynOLMXKuEqZE8OZAd9nuuJN75FCZdE6aghHIHL+12Ty28hhlQTq/6a TTDh91+Q7Cc7PRkctPxxAd//MJ4yxdmY/Zo5wvd1vuwx+95plwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQiy2W3mQRCNeLjVOjZUGYZtM72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvM2ZiMDM5OGQtOTZhMC0z ZTVhLWJiMjEtNmM4N2U1ZDI4NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjpOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTKe9FQYGE1Hxr8ypzLs+7ZxCZqc29AOAvT5wfxEj8j0n41+FTRhtJT gwnfbiF+Xu26rE6vebhWdSmzKclTB1dqq656jY3XCUyh95NFKp6ZKR7MX4UCKdBt tOMy7DSHroTTQAb4VHFRXzVIgY2kFpjwrmYzymIuzl5khBPdSZq6X1xm5raVD1cv VqjgkL67BD+H1zLNPfGQnjPq+I5MN7Q5z5pf2a9yI3UlHeBjHeKLhxx5M1ahFzN1 0gkDPZRAllHvSSvAOrKbPkIehOZLahzL/XkMUJJlVAdKKlwP0Q2T2hB2Q2oZsG2m mWJWHfzg++kXQmmZIl+dieh48zOOun8= -----END CERTIFICATE-----Generated at Wed Oct 8 15:30:32 2025 by rpki-client