$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8661ec91-8931-3585-9afb-c3e95239c6b0.roa File: 8661ec91-8931-3585-9afb-c3e95239c6b0.roa (raw, json) Hash identifier: wh2jppN5XiteYdPxEh2QKyyIzvybyEo71fm7XgbK7uk= Subject key identifier: 41:1C:F2:6B:72:35:7E:E3:44:E7:D9:B2:65:77:0B:35:B8:D3:A3:42 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6A620428E884554F0C169680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8661ec91-8931-3585-9afb-c3e95239c6b0.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 401152 IP address blocks: 144.225.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:04:28:e8:84:55:4f:0c:16:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=3c5c6aa8-edd4-4e9d-a491-e5f4b17ccbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:d2:07:42:e7:1c:aa:d5:2a:03:4c:1a:61: 5c:a2:b6:1f:97:a6:47:5d:42:52:c8:ea:68:fb:cf: cc:d9:5a:b7:cb:46:b7:aa:24:e8:97:6a:a7:dd:c4: 93:c8:42:9e:01:13:b9:21:ed:07:1b:2e:cc:4e:bf: eb:24:73:78:97:ee:fe:d4:2d:79:d6:b2:40:e5:5c: c6:98:8f:4f:ae:0c:3e:76:86:74:7c:90:3b:ec:07: 99:da:2f:ee:bb:f4:09:be:73:12:e5:e0:f8:03:34: ab:81:cf:61:76:db:e5:bd:86:53:6f:87:77:af:31: ee:01:17:ac:91:ee:3d:89:91:75:a1:e2:f0:cb:77: 55:c6:f7:33:b7:84:df:22:c9:b5:36:1f:51:7e:d7: 67:09:4a:95:8d:2f:a0:a2:d0:8c:bd:5f:01:78:a4: b0:56:52:0f:b4:0a:d3:b5:37:19:f3:1e:15:0a:98: ad:02:d6:b4:60:cf:e0:8d:4d:50:50:c0:8c:15:cb: 5d:32:15:c9:dd:68:17:fb:05:ef:e7:6e:69:dd:4b: a7:bc:15:a6:c0:73:a6:59:d6:8f:0e:89:cf:69:c2: 6b:28:42:d1:4b:07:25:92:c4:b4:00:9b:5c:4f:f6: 3a:08:75:ce:0f:89:65:9a:c3:2d:45:c4:2e:d0:8d: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1C:F2:6B:72:35:7E:E3:44:E7:D9:B2:65:77:0B:35:B8:D3:A3:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8661ec91-8931-3585-9afb-c3e95239c6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5e:9f:28:ad:a5:dc:cc:df:57:91:9d:47:09:e7:ef:b5:bc: a8:05:2f:52:7d:d4:1b:8f:fc:08:9e:5e:8f:04:ae:47:a2:3d: a4:99:3d:37:d4:4e:76:58:ed:8d:6d:86:81:62:14:55:de:87: bd:66:01:c4:c6:f1:1c:fa:42:12:6e:1e:9b:d1:2f:41:2c:50: fe:cd:54:78:dd:5e:a5:4c:8d:c9:2c:db:ac:a2:02:b6:93:ad: 44:6b:49:f7:34:31:d9:0a:5a:d1:8e:a1:f4:46:df:a9:b4:0e: 5b:69:6a:ec:b3:0e:22:cf:f6:79:28:ec:7a:0b:40:6a:78:d0: cc:24:a6:5e:ac:08:88:b9:45:1a:24:31:14:b1:ed:91:80:d1: 29:e4:c9:05:4b:10:55:f6:d2:d9:98:2b:ce:56:11:cd:dd:1f: 93:2f:e1:9a:d6:d8:cb:5d:8f:8c:32:e3:c7:0d:5b:6b:94:bf: 8e:c0:fa:f8:0b:9d:92:ca:a4:5c:46:51:13:7b:cf:e0:24:1b: 2e:0b:10:d1:5a:2d:c4:26:78:a2:65:2f:6c:6b:16:2c:ba:ae: 3e:4e:2f:23:6c:25:29:7d:7d:bc:73:09:b0:c9:64:f8:2a:60: 89:bd:dc:65:c0:f1:14:8f:cf:68:d8:0b:1e:2d:b3:5b:5c:23: 87:f3:db:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgQo6IRVTwwWloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk M2M1YzZhYTgtZWRkNC00ZTlkLWE0OTEtZTVmNGIxN2NjYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYrSB0LnHKrVKgNMGmFcorYfl6ZHXUJSyOpo +8/M2Vq3y0a3qiTol2qn3cSTyEKeARO5Ie0HGy7MTr/rJHN4l+7+1C151rJA5VzG mI9Prgw+doZ0fJA77AeZ2i/uu/QJvnMS5eD4AzSrgc9hdtvlvYZTb4d3rzHuARes ke49iZF1oeLwy3dVxvczt4TfIsm1Nh9RftdnCUqVjS+gotCMvV8BeKSwVlIPtArT tTcZ8x4VCpitAta0YM/gjU1QUMCMFctdMhXJ3WgX+wXv525p3UunvBWmwHOmWdaP DonPacJrKELRSwclksS0AJtcT/Y6CHXOD4llmsMtRcQu0I30KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEc8mtyNX7jROfZsmV3CzW406NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODY2MWVjOTEtODkzMS0z NTg1LTlhZmItYzNlOTUyMzljNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRenyitpdzM31eRnUcJ5++1vKgFL1J91BuP/AieXo8ErkeiPaSZPTfU TnZY7Y1thoFiFFXeh71mAcTG8Rz6QhJuHpvRL0EsUP7NVHjdXqVMjcks26yiAraT rURrSfc0MdkKWtGOofRG36m0DltpauyzDiLP9nko7HoLQGp40Mwkpl6sCIi5RRok MRSx7ZGA0SnkyQVLEFX20tmYK85WEc3dH5Mv4ZrW2Mtdj4wy48cNW2uUv47A+vgL nZLKpFxGURN7z+AkGy4LENFaLcQmeKJlL2xrFiy6rj5OLyNsJSl9fbxzCbDJZPgq YIm93GXA8RSPz2jYCx4ts1tcI4fz23k= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:05 2025 by rpki-client