$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa File: 445da2cb-06f2-3bac-8136-632fbe9dd773.roa (raw, json) Hash identifier: R6eG78yWrn9fdZBAu2lS5DenpYenXDcu8SJm2k4H0uo= Subject key identifier: AC:21:54:2F:BF:72:5A:32:5F:A1:F1:90:1B:F7:E9:70:CC:6A:E7:4B Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584B98145068FE2F36751A5B3FC0 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa Signing time: Tue 21 Oct 2025 09:51:30 +0000 ROA not before: Tue 21 Oct 2025 09:51:30 +0000 ROA not after: Mon 19 Jan 2026 10:51:30 +0000 asID: 395886 IP address blocks: 142.248.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:14:50:68:fe:2f:36:75:1a:5b:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Oct 21 09:51:30 2025 GMT Not After : Jan 19 10:51:30 2026 GMT Subject: CN=ac664edf-994c-4d7c-9373-672d4752e13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b8:37:3b:fb:3a:90:6d:2d:6c:80:62:bd:73: 72:a8:9c:91:de:1d:03:bf:0c:a2:1c:8a:28:b5:39: e1:01:ce:16:e3:47:5a:7d:5e:59:b9:85:50:e3:28: b6:e5:6b:d7:2b:9e:0b:1c:e3:ad:0d:22:bc:a4:1e: 6a:25:87:5b:0d:d5:61:4f:7c:8c:c4:a1:16:30:6d: 3b:e6:8e:69:aa:b1:53:a6:95:c6:8d:d4:ef:41:af: 57:8d:03:2c:1b:26:88:26:00:f9:cc:7e:88:90:57: 49:07:f3:3e:37:52:7b:4d:42:a9:e9:16:b2:19:a5: 84:c3:c1:29:e1:0c:ec:59:53:17:be:df:2f:83:54: 67:a9:d1:26:51:b0:cd:6d:bc:52:6e:01:4f:f3:30: a0:1f:1c:c1:27:c2:41:11:a9:42:b1:fd:8c:2d:54: 0b:63:cd:9b:ac:5e:79:dd:3e:e9:71:fc:37:8a:e1: 6b:c2:e1:bd:15:e1:9d:6a:a6:98:d0:0d:81:fe:0e: c0:35:39:b5:8f:f3:33:a6:71:39:2d:e2:28:e3:d9: 9a:59:16:83:30:e3:6d:7d:33:f4:53:fd:5a:c3:2c: f7:1d:15:f0:e6:37:bb:cc:7e:47:8c:96:be:6d:51: 91:d1:2a:2e:f5:4a:7f:89:72:33:e5:ee:7d:e6:47: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:54:2F:BF:72:5A:32:5F:A1:F1:90:1B:F7:E9:70:CC:6A:E7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/445da2cb-06f2-3bac-8136-632fbe9dd773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:85:fb:98:0d:cd:0e:b0:91:7c:a0:6a:65:0d:39:bb:89:9d: c3:54:c2:a1:01:ac:5f:60:ca:df:3c:5d:0e:c4:98:31:e2:f1: 88:97:2b:d1:3f:0a:de:1f:b3:8a:04:c3:7b:3e:d4:67:38:77: 50:32:f8:e6:b8:50:9a:85:41:24:8b:a3:55:94:d3:3f:ec:de: e2:85:d7:f8:1a:65:b2:a4:13:6d:47:07:8d:a7:ec:65:46:6c: 4b:66:ba:ce:3a:9c:64:d2:c1:c7:a4:f9:05:f9:c3:b9:8d:a1: 95:4e:48:a0:0c:68:23:00:a3:4d:5a:87:ec:93:a6:b3:1b:cc: 5d:38:1c:ed:97:89:64:4a:c7:17:e2:11:87:5d:cb:a0:b0:7e: 27:31:33:d7:1e:5d:f3:1c:f4:63:3b:11:0b:90:d3:fe:24:26: 6f:6c:92:ec:44:a0:4b:67:86:50:ec:4c:b3:7a:29:f9:78:54: 48:b4:88:b0:d5:0b:85:cc:e4:05:9c:75:12:9d:dd:74:0f:b2: 72:46:e3:81:d5:e7:62:1e:39:c9:99:f8:c5:86:ac:95:a9:08: 7e:90:0d:08:e6:17:d7:84:05:60:3c:a1:c2:e9:e3:85:86:7f: 6f:34:a5:67:65:18:6c:7d:52:56:84:b7:0d:34:da:57:ea:4c: b0:8f:fe:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYFFBo/i82dRpbP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI1MTAyMTA5NTEzMFoXDTI2MDExOTEwNTEzMFowLzEtMCsGA1UEAxMk YWM2NjRlZGYtOTk0Yy00ZDdjLTkzNzMtNjcyZDQ3NTJlMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbg3O/s6kG0tbIBivXNyqJyR3h0DvwyiHIoo tTnhAc4W40dafV5ZuYVQ4yi25WvXK54LHOOtDSK8pB5qJYdbDdVhT3yMxKEWMG07 5o5pqrFTppXGjdTvQa9XjQMsGyaIJgD5zH6IkFdJB/M+N1J7TUKp6RayGaWEw8Ep 4QzsWVMXvt8vg1RnqdEmUbDNbbxSbgFP8zCgHxzBJ8JBEalCsf2MLVQLY82brF55 3T7pcfw3iuFrwuG9FeGdaqaY0A2B/g7ANTm1j/MzpnE5LeIo49maWRaDMONtfTP0 U/1awyz3HRXw5je7zH5HjJa+bVGR0Sou9Up/iXIz5e595keUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwhVC+/cloyX6HxkBv36XDMaudLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvNDQ1ZGEyY2ItMDZmMi0z YmFjLTgxMzYtNjMyZmJlOWRkNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGF+5gNzQ6wkXygamUNObuJncNUwqEBrF9gyt88XQ7EmDHi8YiXK9E/ Ct4fs4oEw3s+1Gc4d1Ay+Oa4UJqFQSSLo1WU0z/s3uKF1/gaZbKkE21HB42n7GVG bEtmus46nGTSwcek+QX5w7mNoZVOSKAMaCMAo01ah+yTprMbzF04HO2XiWRKxxfi EYddy6CwficxM9ceXfMc9GM7EQuQ0/4kJm9skuxEoEtnhlDsTLN6Kfl4VEi0iLDV C4XM5AWcdRKd3XQPsnJG44HV52IeOcmZ+MWGrJWpCH6QDQjmF9eEBWA8ocLp44WG f280pWdlGGx9UlaEtw002lfqTLCP/po= -----END CERTIFICATE-----Generated at Fri Oct 24 15:55:18 2025 by rpki-client