$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa File: 09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa (raw, json) Hash identifier: YHDu8GeHkmccz1tn3K6omXKnVkIwfI+m2/IDzdSlVxI= Subject key identifier: 01:5E:85:8A:A0:40:A4:F3:0F:C8:C6:7E:9A:61:17:A8:90:A8:98:E5 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F4328584B0A11579E69CDF98714824880 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 803 IP address blocks: 142.165.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:57:9e:69:cd:f9:87:14:82:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=36b786dc-584c-48c1-b80b-bd2a7c3398ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:f7:30:07:29:2f:42:9f:62:63:85:85:6d: 45:d0:03:f3:60:8d:f5:16:6d:23:c0:b7:2e:94:c0: cb:88:b9:0e:89:b3:69:e5:65:ea:7f:cb:90:c4:f9: 0c:2a:8f:3d:01:5d:c4:d9:fe:07:32:97:ea:80:37: b9:a8:05:49:79:18:ae:38:08:f4:d7:f3:8b:f4:c1: 1d:37:bf:81:3e:e6:c9:b0:1e:0e:34:a4:86:bf:f1: 54:79:62:69:1f:37:5d:d9:71:0b:f4:aa:6d:e0:51: 28:d0:4e:a8:6d:e7:20:5f:69:e6:a1:67:57:91:6f: 54:3e:38:dd:19:97:5c:2d:2f:5a:63:66:d7:c4:e0: 96:2d:aa:ab:79:37:7d:d0:3c:bc:a5:db:06:0c:da: a0:94:83:0f:c3:45:01:bd:f4:5e:94:d9:9c:1a:1a: 76:31:5d:d6:b0:2b:31:4e:40:32:a7:d2:7d:36:ff: 4d:27:14:98:75:2d:ea:52:9c:08:ea:27:16:ea:03: 55:f3:31:27:24:2c:81:47:9c:04:18:36:13:01:d6: 59:97:ff:2b:7a:b7:32:c3:55:42:15:03:5a:49:62: 5f:5c:ff:7f:22:4f:68:ed:35:18:81:fb:c6:fb:18: f9:7c:fb:3f:d9:73:02:d2:83:e2:5e:39:c6:28:e5: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5E:85:8A:A0:40:A4:F3:0F:C8:C6:7E:9A:61:17:A8:90:A8:98:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 142.165.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6e:93:8e:3b:4e:9f:e0:2e:90:b8:bc:35:4e:cf:7f:0e:05: c1:6c:bb:7f:df:78:04:f3:eb:86:02:61:fc:3d:c3:3e:cc:e5: 65:e5:5f:af:c5:0c:85:b3:28:0a:fd:8f:cf:cb:6a:e5:39:0b: a4:58:17:7a:ec:90:d9:1d:db:ea:4f:cf:82:6b:ff:1d:9a:ac: 59:72:33:6a:0a:3f:8d:86:42:1c:ca:33:25:9f:ff:4c:91:e3: 9d:36:60:7e:7f:63:05:cb:0f:fb:49:af:ab:ce:24:7f:9b:5b: ff:e4:ac:58:5c:62:9f:9e:94:ec:28:78:fa:bb:1e:55:7d:a7: ea:a4:71:19:4f:b2:d1:15:da:09:a6:fa:5b:ab:4a:d8:d7:10: c4:4b:06:84:6c:ca:35:cb:e5:6c:8a:be:2a:04:5a:cb:69:31: ce:37:63:36:98:b7:09:8e:75:35:a5:63:f8:ce:92:9c:45:11: cb:d9:b0:60:d3:21:d7:81:87:de:3c:86:df:59:aa:7b:6c:13: 5b:b5:4e:58:48:48:df:af:24:a5:b9:a5:e2:21:ba:a0:d2:c5: d7:a7:eb:42:b4:38:db:d9:46:65:a9:e8:66:f3:f0:51:57:87: 14:52:da:cf:7b:4a:fd:f9:55:71:28:15:5a:fb:23:1d:d2:3a: 4f:50:ab:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVeeac35hxSCSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MzZiNzg2ZGMtNTg0Yy00OGMxLWI4MGItYmQyYTdjMzM5OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllz3MAcpL0KfYmOFhW1F0APzYI31Fm0jwLcu lMDLiLkOibNp5WXqf8uQxPkMKo89AV3E2f4HMpfqgDe5qAVJeRiuOAj01/OL9MEd N7+BPubJsB4ONKSGv/FUeWJpHzdd2XEL9Kpt4FEo0E6obecgX2nmoWdXkW9UPjjd GZdcLS9aY2bXxOCWLaqreTd90Dy8pdsGDNqglIMPw0UBvfRelNmcGhp2MV3WsCsx TkAyp9J9Nv9NJxSYdS3qUpwI6icW6gNV8zEnJCyBR5wEGDYTAdZZl/8rercyw1VC FQNaSWJfXP9/Ik9o7TUYgfvG+xj5fPs/2XMC0oPiXjnGKOVAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFehYqgQKTzD8jGfpphF6iQqJjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvMDlmNGIwODQtZmQzNC0z YzkyLTlkZmMtZWNiYzg2NDExNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjqXbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINuk447Tp/gLpC4vDVOz38OBcFsu3/feATz64YCYfw9wz7M5WXlX6/F DIWzKAr9j8/LauU5C6RYF3rskNkd2+pPz4Jr/x2arFlyM2oKP42GQhzKMyWf/0yR 4502YH5/YwXLD/tJr6vOJH+bW//krFhcYp+elOwoePq7HlV9p+qkcRlPstEV2gmm +lurStjXEMRLBoRsyjXL5WyKvioEWstpMc43YzaYtwmOdTWlY/jOkpxFEcvZsGDT IdeBh948ht9ZqntsE1u1TlhISN+vJKW5peIhuqDSxden60K0ONvZRmWp6Gbz8FFX hxRS2s97Sv35VXEoFVr7Ix3SOk9Qq5Q= -----END CERTIFICATE-----Generated at Thu Oct 9 03:50:02 2025 by rpki-client