$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa File: fa250e28-dae3-3d57-9324-4f178e12143d.roa (raw, json) Hash identifier: dmrPK9mKJXsovNJXWdv4sLPRpBnFkeUhyCjjf7c2cXc= Subject key identifier: 01:6C:4E:93:62:50:21:11:82:A7:2E:12:10:6E:88:E5:03:08:53:22 Certificate issuer: /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Certificate serial: 010D0C9F4328584B9F25CD9906F0846A05F63E60 Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa Signing time: Thu 23 Oct 2025 22:37:24 +0000 ROA not before: Thu 23 Oct 2025 22:37:24 +0000 ROA not after: Wed 21 Jan 2026 23:37:24 +0000 asID: 32668 IP address blocks: 142.248.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:25:cd:99:06:f0:84:6a:05:f6:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Validity Not Before: Oct 23 22:37:24 2025 GMT Not After : Jan 21 23:37:24 2026 GMT Subject: CN=ecc749a9-9ba7-4331-8989-7cbea7b01969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:27:b9:f1:93:b0:93:77:84:07:32:fa:46: 45:e5:b5:1b:d1:66:d1:31:93:be:14:07:64:9b:3d: f2:d4:cf:bd:b9:e9:54:e3:ab:29:3f:d6:7c:78:fe: 0b:4f:29:c2:21:d8:f0:25:fd:df:3e:92:b8:05:03: b8:9c:e9:f5:7f:ee:0b:10:31:79:19:69:37:47:97: 54:84:4b:ef:96:04:9b:eb:38:16:11:e0:57:9c:49: f6:81:20:00:a1:15:c8:15:33:de:11:ce:10:9d:d2: 86:49:dd:7d:94:fb:ae:3c:75:48:64:0c:08:f1:88: 20:94:70:22:b3:c7:f7:00:20:b4:fc:25:13:54:25: 62:f9:95:76:e6:98:b5:56:7e:35:3b:21:e2:e1:e5: 4f:77:a6:4b:35:82:71:d1:9f:20:83:34:9f:78:9d: 57:09:8a:51:cd:ee:97:61:a2:44:b6:08:1b:f5:a1: 4b:35:d0:66:a0:90:16:24:5d:36:df:7a:1d:1b:9d: d4:6d:02:0e:08:54:26:72:6c:d7:4a:4d:ef:6a:aa: 88:c4:d5:85:ac:03:1a:ea:69:91:90:bd:66:65:d9: ff:9c:64:2c:32:49:cf:50:98:7d:84:6f:d7:a4:33: 94:4a:02:0d:56:d8:fc:d0:8e:74:cc:e9:a5:63:e7: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:4E:93:62:50:21:11:82:A7:2E:12:10:6E:88:E5:03:08:53:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl X509v3 Authority Key Identifier: keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:39:4a:c0:de:88:e5:e9:31:f5:c3:55:50:28:28:d9:68:39: 51:51:60:c0:13:af:2e:77:b9:84:fa:1f:c6:b6:76:10:dc:bc: a7:eb:39:62:4c:2b:47:50:70:6a:7f:ae:2f:f4:e3:35:c1:53: 4b:5f:d5:9d:ca:a6:4a:7e:bf:74:76:a6:b7:60:02:85:d1:5b: b9:b0:ff:dd:8c:a5:85:c4:9c:36:cc:52:88:5c:6a:11:32:17: 28:a6:52:1a:b1:3c:ce:a3:69:7a:39:6b:1f:fe:11:1d:24:19: 44:af:ca:eb:05:02:16:96:7a:15:12:79:6d:e4:69:f7:b0:84: 6c:9b:a9:5f:53:1e:4a:7e:d1:02:3b:ed:2a:fd:9b:ef:06:69: 9f:69:ea:9d:20:56:42:1c:39:b5:19:16:e6:df:59:82:e3:93: 7a:87:d0:5b:bb:a8:02:c9:ac:28:d8:b5:9a:75:5e:22:85:28: 97:a1:11:28:36:51:95:07:a2:8f:d9:b3:ee:fc:14:8d:b8:5d: 5b:46:ab:9c:c6:91:26:ea:78:32:33:6d:6d:94:94:9e:43:23: 38:59:a0:98:34:ac:93:cd:19:0f:47:16:ae:de:12:16:c0:b7: 69:7e:a0:81:7a:f1:af:68:b7:f9:a6:b7:dc:98:dd:2d:a0:6f: 35:ff:4d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufJc2ZBvCEagX2PmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFh Y2I5MB4XDTI1MTAyMzIyMzcyNFoXDTI2MDEyMTIzMzcyNFowLzEtMCsGA1UEAxMk ZWNjNzQ5YTktOWJhNy00MzMxLTg5ODktN2NiZWE3YjAxOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDwnufGTsJN3hAcy+kZF5bUb0WbRMZO+FAdk mz3y1M+9uelU46spP9Z8eP4LTynCIdjwJf3fPpK4BQO4nOn1f+4LEDF5GWk3R5dU hEvvlgSb6zgWEeBXnEn2gSAAoRXIFTPeEc4QndKGSd19lPuuPHVIZAwI8YgglHAi s8f3ACC0/CUTVCVi+ZV25pi1Vn41OyHi4eVPd6ZLNYJx0Z8ggzSfeJ1XCYpRze6X YaJEtggb9aFLNdBmoJAWJF0233odG53UbQIOCFQmcmzXSk3vaqqIxNWFrAMa6mmR kL1mZdn/nGQsMknPUJh9hG/XpDOUSgINVtj80I50zOmlY+dZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFsTpNiUCERgqcuEhBuiOUDCFMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2 N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvZmEyNTBlMjgtZGFlMy0z ZDU3LTkzMjQtNGYxNzhlMTIxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWMzNjdiYjAtYTZlMC00NzY5LTll OTMtZThlOWI2YTFhY2I5L2VjMzY3YmIwLWE2ZTAtNDc2OS05ZTkzLWU4ZTliNmEx YWNiOS5jcmwwHwYDVR0jBBgwFoAUiftXSzh80aZzcDZ9LeflpSu1aZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5 YjZhMWFjYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA5SsDeiOXpMfXDVVAoKNloOVFRYMATry53uYT6H8a2dhDcvKfrOWJM K0dQcGp/ri/04zXBU0tf1Z3Kpkp+v3R2prdgAoXRW7mw/92MpYXEnDbMUohcahEy FyimUhqxPM6jaXo5ax/+ER0kGUSvyusFAhaWehUSeW3kafewhGybqV9THkp+0QI7 7Sr9m+8GaZ9p6p0gVkIcObUZFubfWYLjk3qH0Fu7qALJrCjYtZp1XiKFKJehESg2 UZUHoo/Zs+78FI24XVtGq5zGkSbqeDIzbW2UlJ5DIzhZoJg0rJPNGQ9HFq7eEhbA t2l+oIF68a9ot/mmt9yY3S2gbzX/TXs= -----END CERTIFICATE-----Generated at Mon Oct 27 01:27:44 2025 by rpki-client