$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323034393231.roa File: 3134322e3234392e3131342e302f32342d3234203d3e20323034393231.roa (raw, json) Hash identifier: E0OpRdiBxgrVtwdjVb9flmwHsitn/1adTgj2MgPaOk0= Subject key identifier: A5:3C:3A:F2:0A:16:ED:21:F4:C5:70:4E:30:9F:4A:E6:0F:C4:4A:DF Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 2487FB1EB5565A6F4D0E9D1899A4D0FE3DE25313 Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323034393231.roa Signing time: Mon 20 Oct 2025 14:10:24 +0000 ROA not before: Mon 20 Oct 2025 14:05:24 +0000 ROA not after: Mon 19 Oct 2026 14:10:24 +0000 asID: 204921 IP address blocks: 142.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 10:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:87:fb:1e:b5:56:5a:6f:4d:0e:9d:18:99:a4:d0:fe:3d:e2:53:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Oct 20 14:05:24 2025 GMT Not After : Oct 19 14:10:24 2026 GMT Subject: CN=A53C3AF20A16ED21F4C5704E309F4AE60FC44ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:c8:a7:86:da:37:6a:66:f6:4d:b3:19:57: c5:7f:3b:09:04:de:c1:11:ae:69:69:48:30:b6:81: b9:1e:8e:92:08:60:c3:32:31:ce:86:82:bd:98:e6: 6f:54:7d:97:17:56:3d:c3:81:74:a4:d1:6e:2b:1e: ba:a6:ba:2a:18:56:e0:e0:ec:97:ae:b6:a0:3a:75: bf:21:68:b4:7d:f3:ba:b4:d7:6f:5d:a3:1e:21:0f: 40:d4:48:4a:59:5a:32:3a:6f:d9:b3:fd:2b:b0:ee: 4d:37:34:91:97:c0:9b:fd:d5:9a:58:01:13:ab:f5: 40:54:14:6a:74:8a:49:a8:d4:6e:c6:13:14:bc:e4: ce:7d:5c:26:8e:6f:c5:7d:8e:5f:06:4b:4d:a7:28: 18:36:f0:f6:43:e7:25:d4:64:89:7f:79:9c:0e:ee: 19:74:f8:d7:39:2f:15:b9:02:ce:4e:39:84:75:aa: 4e:a1:e9:93:80:65:2e:8d:5b:a3:d3:9c:8b:9c:ba: 99:39:eb:c0:c6:f0:d1:a0:24:d7:b1:3d:61:de:2b: ed:7c:72:7a:b5:b7:5f:88:91:e7:31:63:65:a2:28: 74:4a:76:3c:2c:a1:0a:de:24:01:1c:ea:de:ec:b4: 70:69:01:e5:e3:7a:7e:0b:a1:c4:ea:bb:68:69:c7: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:3A:F2:0A:16:ED:21:F4:C5:70:4E:30:9F:4A:E6:0F:C4:4A:DF X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323034393231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.114.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:18:7f:7f:7b:33:40:fb:88:6e:42:b5:f0:bc:7f:f6:6f:5f: 1c:c7:a4:a7:71:cd:f5:f2:a8:e4:f0:04:90:29:8a:9e:c2:ab: 57:b6:a5:2c:b4:0f:fb:76:23:59:70:d1:66:9e:f6:17:e1:b9: ee:2d:2c:af:71:b9:da:b8:96:99:0e:91:ba:18:ab:d5:48:99: 74:f4:78:52:cc:b1:54:a3:f7:5c:81:69:d8:76:40:9d:9d:bf: 35:5c:b5:66:05:84:9b:ee:02:8f:bc:45:6e:04:57:cc:75:52: 39:64:98:e3:7b:8e:85:6d:ee:85:c3:e6:12:f2:9e:28:9c:ac: ba:44:a3:a7:06:5c:d0:eb:73:34:43:29:3c:e6:f3:54:1d:5b: d7:05:86:54:d1:51:d0:65:e2:f6:91:a8:c8:d5:19:dd:97:ba: 37:44:b6:a7:a0:66:29:21:8b:29:6c:96:44:c3:11:d4:83:a5: 5c:6b:f7:5b:dc:cb:54:99:8a:c3:44:dd:de:2f:fc:52:e6:54: 08:63:7c:c3:ea:c7:4b:7e:03:7c:fc:3e:e8:d8:cc:85:ac:fd: 26:ab:3d:b0:87:ea:b9:15:33:fb:08:40:62:e1:b0:09:04:50: 69:1c:0e:f3:4b:81:47:69:54:04:56:42:5f:71:3d:2b:70:e0: e6:80:81:99 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUJIf7HrVWWm9NDp0YmaTQ/j3iUxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjUxMDIwMTQwNTI0WhcNMjYxMDE5MTQxMDI0 WjAzMTEwLwYDVQQDEyhBNTNDM0FGMjBBMTZFRDIxRjRDNTcwNEUzMDlGNEFFNjBG QzQ0QURGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLIp4baN2pm 9k2zGVfFfzsJBN7BEa5paUgwtoG5Ho6SCGDDMjHOhoK9mOZvVH2XF1Y9w4F0pNFu Kx66proqGFbg4OyXrragOnW/IWi0ffO6tNdvXaMeIQ9A1EhKWVoyOm/Zs/0rsO5N NzSRl8Cb/dWaWAETq/VAVBRqdIpJqNRuxhMUvOTOfVwmjm/FfY5fBktNpygYNvD2 Q+cl1GSJf3mcDu4ZdPjXOS8VuQLOTjmEdapOoemTgGUujVuj05yLnLqZOevAxvDR oCTXsT1h3ivtfHJ6tbdfiJHnMWNloih0SnY8LKEK3iQBHOre7LRwaQHl43p+C6HE 6rtoacffLwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKU8OvIKFu0h9MVwTjCfSuYP xErfMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzQyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMwMzQzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACO+XIwDQYJKoZIhvcN AQELBQADggEBACwYf397M0D7iG5CtfC8f/ZvXxzHpKdxzfXyqOTwBJApip7Cq1e2 pSy0D/t2I1lw0Wae9hfhue4tLK9xudq4lpkOkboYq9VImXT0eFLMsVSj91yBadh2 QJ2dvzVctWYFhJvuAo+8RW4EV8x1UjlkmON7joVt7oXD5hLyniicrLpEo6cGXNDr czRDKTzm81QdW9cFhlTRUdBl4vaRqMjVGd2XujdEtqegZikhiylslkTDEdSDpVxr 91vcy1SZisNE3d4v/FLmVAhjfMPqx0t+A3z8PujYzIWs/SarPbCH6rkVM/sIQGLh sAkEUGkcDvNLgUdpVARWQl9xPStw4OaAgZk= -----END CERTIFICATE-----Generated at Tue Oct 21 22:02:52 2025 by rpki-client