$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa File: ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa (raw, json) Hash identifier: OFHqACMZCGdJCVJAA7G4mTLZaFv0CyUuMCGObFqB934= Subject key identifier: E8:6C:D5:88:3C:56:34:29:33:7A:B7:44:48:26:E4:9E:8B:0C:6C:59 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584BC7DFC9031B037115FC5A27C0 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa Signing time: Fri 07 Nov 2025 12:44:28 +0000 ROA not before: Fri 07 Nov 2025 12:44:28 +0000 ROA not after: Thu 05 Feb 2026 12:44:28 +0000 asID: 53388 IP address blocks: 142.248.230.0/24 maxlen: 24 142.248.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c7:df:c9:03:1b:03:71:15:fc:5a:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Nov 7 12:44:28 2025 GMT Not After : Feb 5 12:44:28 2026 GMT Subject: CN=54511932-128e-4b92-a657-88c0a1808240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:ac:9a:f8:d1:a4:a3:d2:e5:a6:a0:f7:97: d9:04:b8:f1:15:65:a2:9e:11:30:dd:0d:e6:80:f6: f7:89:03:fa:fd:79:60:5e:59:a3:ef:17:e1:c2:44: d7:d1:11:88:b0:d8:84:be:39:19:70:52:a4:93:25: da:ef:3c:60:e2:cc:ad:5c:8e:24:5d:f4:b7:bb:9c: de:38:5a:4d:f4:9d:4a:6c:11:68:12:10:d7:db:66: e0:ba:87:0f:1f:0b:f5:54:6a:9f:25:03:f2:45:72: 12:7f:66:82:4f:64:d7:bf:76:ea:e3:dd:fe:c5:54: 6b:72:65:01:7c:5e:34:fe:7d:cf:dd:89:57:44:22: 48:4c:15:2b:66:97:ca:85:48:84:93:b6:a9:a3:63: 1b:7c:ff:ae:71:c0:59:6b:fa:a7:c7:b0:12:f3:83: 94:c7:f4:05:78:2c:6d:b5:37:78:81:59:ef:98:25: 93:2b:00:6d:dd:b0:bc:3b:8b:32:fb:4b:d3:84:ed: ab:0f:9e:bc:a1:72:06:16:49:04:5a:8c:fe:71:d6: 8e:a9:08:75:b4:9d:1f:0b:ea:de:e9:5a:e3:90:43: 90:46:ef:30:f3:27:c8:32:1a:a0:71:81:e6:83:a5: b1:7f:bc:85:d1:d5:ef:17:41:4d:b6:32:a0:70:b4: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:D5:88:3C:56:34:29:33:7A:B7:44:48:26:E4:9E:8B:0C:6C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ac1d374a-d82c-3ab5-9600-12b1d5cc139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b5:d2:c1:af:7c:ab:9d:18:72:b5:16:16:0b:d3:e6:ff:13: 1f:79:cd:23:da:0e:e2:b4:e0:55:57:67:c9:9f:3e:04:7a:b1: eb:c5:5c:ce:77:58:c9:55:89:4e:60:fc:7b:d2:f8:ad:5f:9c: b6:f9:da:f3:95:67:46:ac:e2:21:30:5d:b9:f3:f3:c5:36:52: d7:75:c7:a6:c6:dd:13:f6:e5:4c:e3:a0:ad:34:e6:5e:a4:58: 83:c5:f6:b6:73:83:41:3d:2d:97:ab:8d:5a:f6:37:13:bf:76: 69:e9:5a:7f:ec:41:f0:70:56:f8:47:ba:c3:88:cc:be:1a:49: 01:e4:7e:8a:33:dd:4f:b6:68:5e:6f:e8:d3:8b:20:02:d5:2a: 68:c6:dc:65:b9:c7:b9:da:ab:a1:ef:94:9b:f5:1e:98:72:fd: 2f:c6:c3:4e:b0:38:eb:48:24:cd:a0:b2:82:c1:cf:8b:4c:86: 1d:5b:44:28:e7:d5:94:4e:cd:dd:d6:9c:7c:53:d4:f6:6f:b8: cd:6d:25:73:3e:8f:ea:81:3c:f4:f6:61:b4:c7:24:65:36:97: 42:31:8d:97:39:bf:6f:4e:30:a0:e3:54:97:89:0f:a3:d0:dd: 33:ab:eb:07:4e:b5:c7:82:81:48:4b:e0:0c:18:f1:10:8d:71: 0f:b4:7e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvH38kDGwNxFfxaJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI1MTEwNzEyNDQyOFoXDTI2MDIwNTEyNDQyOFowLzEtMCsGA1UEAxMk NTQ1MTE5MzItMTI4ZS00YjkyLWE2NTctODhjMGExODA4MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo92smvjRpKPS5aag95fZBLjxFWWinhEw3Q3m gPb3iQP6/XlgXlmj7xfhwkTX0RGIsNiEvjkZcFKkkyXa7zxg4sytXI4kXfS3u5ze OFpN9J1KbBFoEhDX22bguocPHwv1VGqfJQPyRXISf2aCT2TXv3bq493+xVRrcmUB fF40/n3P3YlXRCJITBUrZpfKhUiEk7apo2MbfP+uccBZa/qnx7AS84OUx/QFeCxt tTd4gVnvmCWTKwBt3bC8O4sy+0vThO2rD568oXIGFkkEWoz+cdaOqQh1tJ0fC+re 6VrjkEOQRu8w8yfIMhqgcYHmg6Wxf7yF0dXvF0FNtjKgcLSQfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhs1Yg8VjQpM3q3REgm5J6LDGxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvYWMxZDM3NGEtZDgyYy0z YWI1LTk2MDAtMTJiMWQ1Y2MxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvjmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq10sGvfKudGHK1FhYL0+b/Ex95zSPaDuK04FVXZ8mfPgR6sevFXM53 WMlViU5g/HvS+K1fnLb52vOVZ0as4iEwXbnz88U2Utd1x6bG3RP25UzjoK005l6k WIPF9rZzg0E9LZerjVr2NxO/dmnpWn/sQfBwVvhHusOIzL4aSQHkfooz3U+2aF5v 6NOLIALVKmjG3GW5x7naq6HvlJv1Hphy/S/Gw06wOOtIJM2gsoLBz4tMhh1bRCjn 1ZROzd3WnHxT1PZvuM1tJXM+j+qBPPT2YbTHJGU2l0IxjZc5v29OMKDjVJeJD6PQ 3TOr6wdOtceCgUhL4AwY8RCNcQ+0fkg= -----END CERTIFICATE-----Generated at Sat Nov 8 23:03:25 2025 by rpki-client