$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa File: d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa (raw, json) Hash identifier: mDupXsRQR4QwlErBvpflTVZs2+tIt3QiP6kVHI33hPQ= Subject key identifier: 73:20:7F:04:6E:E6:26:93:6A:42:DF:93:58:AE:04:B0:45:89:C3:9A Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B047C0A9FFB1CF0D2C5AD3300 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 135391 IP address blocks: 144.208.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:9f:fb:1c:f0:d2:c5:ad:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=578f6fe5-a518-4603-b4e5-fed2f6a7efaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:e6:9a:86:a6:a7:91:52:a9:be:dc:59:8e: 4e:35:38:1a:c8:20:53:63:e4:79:9e:46:38:0a:c5: ef:b7:e8:6a:5f:04:bd:26:23:97:ab:6f:b4:22:23: 78:b1:e5:70:53:1c:f5:5e:18:95:05:41:0b:e0:19: 69:ff:bf:06:02:3a:19:24:27:09:b1:2c:5b:0d:96: 2d:e5:46:c5:ac:96:46:b0:87:bf:16:9c:a7:ec:51: 03:83:61:9c:4c:88:68:ef:7b:85:96:f9:ec:c1:62: 46:c5:61:2c:b7:ca:b5:3b:08:b0:0f:dd:2e:0b:21: 81:93:db:7d:42:4f:88:7b:e2:f7:66:27:13:11:42: 07:e5:ad:7d:4d:8c:bb:27:32:71:1d:64:f8:b4:5a: 2e:ba:5a:64:eb:55:7f:23:85:41:eb:c4:c7:cc:81: bf:c3:26:4b:e2:f2:1a:ad:a0:54:8f:20:97:e7:ac: 50:ec:ad:a3:eb:97:16:7c:2a:fc:d8:18:78:b0:6d: e2:12:2c:5c:81:27:e9:72:53:7f:e0:3e:ae:38:5a: 3f:f4:36:c1:b7:eb:22:81:ef:33:cf:76:7f:69:2c: ec:43:63:56:e4:f6:9a:1e:8d:9b:ee:88:d0:0e:53: fc:8d:d0:cb:be:17:e0:e4:fb:4e:7f:13:3b:27:83: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:20:7F:04:6E:E6:26:93:6A:42:DF:93:58:AE:04:B0:45:89:C3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:60:4c:23:c5:5f:4a:fa:18:e3:e1:16:56:ed:2d:d6:63:a9: 25:78:5e:a9:9c:50:8d:83:d5:6e:9f:6f:d9:c4:d1:6f:3b:7d: 2c:c7:d2:be:1a:89:3d:c6:4f:d7:08:1d:e9:bd:44:89:9b:12: 13:7b:6c:f0:76:8f:b1:4a:ff:8c:a7:e2:9c:94:92:90:32:b1: c9:fe:d1:9e:59:08:2e:30:02:df:63:92:44:31:e3:c4:d0:34: 69:09:42:4d:b3:04:db:5f:d6:53:d1:e9:b6:bd:32:42:06:45: e2:03:9a:88:2b:b1:c1:75:0b:db:a1:be:94:fd:f5:22:44:4d: 5a:02:3f:21:92:ca:c7:75:35:c4:7b:0a:b6:0e:0f:8b:9e:cf: 33:88:69:b4:3a:3c:5a:8d:4e:ca:a8:ee:37:d8:fa:26:39:13: ab:72:96:73:28:c7:ba:e6:24:0d:ef:9b:97:16:fc:e7:9c:75: 93:f1:13:e0:ab:88:6b:64:79:ab:9d:34:f3:22:a9:34:82:8e: 33:0d:a4:90:23:c9:c1:dc:2a:7b:2f:98:17:92:2d:72:23:6d: 59:b6:37:b1:d6:20:7f:3c:9e:d1:a9:e1:aa:61:cd:97:dc:20: 3e:81:02:bc:0f:7a:00:71:0c:98:94:4b:73:d0:51:1e:d3:be: e6:11:b4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAqf+xzw0sWtMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTc4ZjZmZTUtYTUxOC00NjAzLWI0ZTUtZmVkMmY2YTdlZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc/mmoamp5FSqb7cWY5ONTgayCBTY+R5nkY4 CsXvt+hqXwS9JiOXq2+0IiN4seVwUxz1XhiVBUEL4Blp/78GAjoZJCcJsSxbDZYt 5UbFrJZGsIe/Fpyn7FEDg2GcTIho73uFlvnswWJGxWEst8q1OwiwD90uCyGBk9t9 Qk+Ie+L3ZicTEUIH5a19TYy7JzJxHWT4tFouulpk61V/I4VB68THzIG/wyZL4vIa raBUjyCX56xQ7K2j65cWfCr82Bh4sG3iEixcgSfpclN/4D6uOFo/9DbBt+sige8z z3Z/aSzsQ2NW5PaaHo2b7ojQDlP8jdDLvhfg5PtOfxM7J4O+JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMgfwRu5iaTakLfk1iuBLBFicOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZDRmMWMxNTktNjFhNy0z YmQ5LTk0ZDctMDVkNTgwYTY5NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExgTCPFX0r6GOPhFlbtLdZjqSV4XqmcUI2D1W6fb9nE0W87fSzH0r4a iT3GT9cIHem9RImbEhN7bPB2j7FK/4yn4pyUkpAyscn+0Z5ZCC4wAt9jkkQx48TQ NGkJQk2zBNtf1lPR6ba9MkIGReIDmogrscF1C9uhvpT99SJETVoCPyGSysd1NcR7 CrYOD4uezzOIabQ6PFqNTsqo7jfY+iY5E6tylnMox7rmJA3vm5cW/OecdZPxE+Cr iGtkeaudNPMiqTSCjjMNpJAjycHcKnsvmBeSLXIjbVm2N7HWIH88ntGp4aphzZfc ID6BArwPegBxDJiUS3PQUR7TvuYRtHU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:48 2025 by rpki-client