$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa File: 1ce20416-7f37-33f9-9a62-528b71678539.roa (raw, json) Hash identifier: lN8257n/4KrywCbFy4Fv52jV8t0GACCUJ9Ts3+qUGOg= Subject key identifier: D3:9E:09:70:A1:C1:60:16:3D:0D:6B:E6:D0:E6:3A:6F:A6:4B:55:91 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584AFC1C065EBEF94F73FD3DFC80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 144.208.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:06:5e:be:f9:4f:73:fd:3d:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=94e7bb1e-bd14-4f73-b760-15141487dcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:a7:d9:86:02:3f:fd:8b:5c:49:28:f4:d1: 3b:2a:1d:7c:24:d9:65:aa:0c:3f:5a:b9:34:96:01: 54:ce:08:09:2e:0a:9d:32:c7:d1:65:6c:07:fb:c0: e5:a4:38:66:35:7e:a7:54:53:cc:ee:30:f3:ae:fa: 0a:7b:cd:6b:0e:b3:fa:0c:3d:6e:54:57:6a:fd:18: 3e:ea:4c:c2:c1:05:af:fd:13:ac:b2:5b:3d:1b:75: 96:74:b9:00:0b:97:76:87:38:a5:e7:9d:2b:a9:2e: 5f:c1:ef:8a:38:0b:4a:9e:14:f9:c1:b6:3e:1f:60: 9a:29:20:cb:05:e6:60:98:9e:52:24:90:f8:7d:f4: 80:65:80:9c:65:d1:f6:c1:ef:8f:65:70:28:2e:5a: ab:17:73:f3:be:27:24:79:b9:86:2a:10:e2:52:95: f8:a4:d7:54:18:0f:e8:4e:c3:ee:03:d6:0c:1c:13: 4a:8f:91:b6:5c:26:d6:ca:36:64:be:f3:a0:84:77: 44:02:56:cf:b6:a4:a7:6c:21:a5:50:56:db:3e:29: 4f:4a:e8:92:b9:66:11:41:d4:0d:f9:62:77:4c:42: 15:02:45:d3:e2:0d:91:7f:8d:a3:3f:53:c6:02:1b: b0:6f:d3:03:11:fb:20:83:ee:9f:a1:ab:50:7e:ed: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9E:09:70:A1:C1:60:16:3D:0D:6B:E6:D0:E6:3A:6F:A6:4B:55:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6e:24:a8:62:eb:45:52:aa:24:b5:81:8e:52:d1:30:38:2f: a0:ae:60:69:ed:8a:e2:af:01:fe:3b:64:dc:87:c0:5f:a0:dc: 7c:b3:d4:4d:a7:45:cd:b8:c9:17:42:5e:b9:37:d7:ee:83:ef: 7c:a7:c0:db:f3:e1:74:02:09:c5:98:3e:f2:04:f8:26:02:9e: fd:52:ac:98:66:ba:4d:40:46:4e:9b:d1:9f:2e:af:35:8d:df: 8f:d6:41:d3:f5:25:df:b1:d8:28:5a:d1:e5:84:e2:0d:d7:ae: 98:4e:c0:d7:39:b0:f2:2a:7c:2d:1a:2b:99:d4:0b:4d:3c:99: 1f:5e:38:82:fb:0b:62:2c:1c:25:c1:d5:be:d3:81:a1:12:29: 0a:7a:47:4d:65:df:42:36:00:f1:cd:3a:8f:75:0f:41:85:3b: 50:5b:75:d4:2e:93:86:cc:b7:1e:bd:44:b9:f4:d6:24:2c:6a: 32:29:1e:61:e0:cb:2b:1e:9f:90:a6:97:d7:28:32:13:1b:6c: db:cc:ea:1b:47:66:c3:dc:1c:e3:32:7a:83:58:21:b8:2e:6d: f3:9c:ed:49:7b:d7:ac:0b:c2:08:ad:1f:4c:f5:c4:25:7c:fb: 29:18:49:56:d0:1d:a2:81:9a:30:ed:dd:79:f7:54:bb:ce:05: 18:3b:51:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAZevvlPc/09/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTRlN2JiMWUtYmQxNC00ZjczLWI3NjAtMTUxNDE0ODdkY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAmn2YYCP/2LXEko9NE7Kh18JNllqgw/Wrk0 lgFUzggJLgqdMsfRZWwH+8DlpDhmNX6nVFPM7jDzrvoKe81rDrP6DD1uVFdq/Rg+ 6kzCwQWv/ROssls9G3WWdLkAC5d2hzil550rqS5fwe+KOAtKnhT5wbY+H2CaKSDL BeZgmJ5SJJD4ffSAZYCcZdH2we+PZXAoLlqrF3PzvickebmGKhDiUpX4pNdUGA/o TsPuA9YMHBNKj5G2XCbWyjZkvvOghHdEAlbPtqSnbCGlUFbbPilPSuiSuWYRQdQN +WJ3TEIVAkXT4g2Rf42jP1PGAhuwb9MDEfsgg+6foatQfu2g4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOeCXChwWAWPQ1r5tDmOm+mS1WRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMWNlMjA0MTYtN2YzNy0z M2Y5LTlhNjItNTI4YjcxNjc4NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBuJKhi60VSqiS1gY5S0TA4L6CuYGntiuKvAf47ZNyHwF+g3Hyz1E2n Rc24yRdCXrk31+6D73ynwNvz4XQCCcWYPvIE+CYCnv1SrJhmuk1ARk6b0Z8urzWN 34/WQdP1Jd+x2Cha0eWE4g3XrphOwNc5sPIqfC0aK5nUC008mR9eOIL7C2IsHCXB 1b7TgaESKQp6R01l30I2APHNOo91D0GFO1BbddQuk4bMtx69RLn01iQsajIpHmHg yysen5Cml9coMhMbbNvM6htHZsPcHOMyeoNYIbgubfOc7Ul716wLwgitH0z1xCV8 +ykYSVbQHaKBmjDt3Xn3VLvOBRg7Uc0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:02:03 2025 by rpki-client