$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa File: 41c17ad6-2850-37e8-8887-ce7da61674a2.roa (raw, json) Hash identifier: v+yPenaHQoHYYwMgB2M66t3CyDjNvCme4owvMaa+w50= Subject key identifier: 8B:D2:52:72:20:F1:F5:30:C3:05:50:2C:EB:40:5A:0C:44:C0:31:BC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C42E5F178E71393E1487C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa Signing time: Mon 25 Aug 2025 08:16:31 +0000 ROA not before: Mon 25 Aug 2025 08:16:31 +0000 ROA not after: Sun 23 Nov 2025 09:16:31 +0000 asID: 31898 IP address blocks: 144.25.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:2e:5f:17:8e:71:39:3e:14:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:16:31 2025 GMT Not After : Nov 23 09:16:31 2025 GMT Subject: CN=82bdd300-4d5d-49b2-88b4-2ceb5deea803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:11:b5:71:b5:9a:36:59:97:52:a3:f6:05: 4f:9c:8c:6b:00:61:5f:8b:b8:75:3f:a4:50:b6:ad: bf:e3:22:1c:e0:4d:35:81:0a:d1:b5:17:54:89:f3: 89:56:e0:fb:24:5e:ed:13:57:df:d4:f6:b3:5a:e4: a7:8d:a8:21:d3:5e:b2:25:d0:82:88:57:c8:e0:60: b6:84:6a:d2:43:d5:9d:2e:48:71:99:38:77:c6:e2: 0a:e0:b3:9f:e7:22:5f:e0:1b:68:2b:14:71:33:89: 5b:03:7d:1c:5b:4b:3c:27:4d:f4:9b:58:86:70:a7: e0:c3:18:5a:c9:b9:1b:1c:ea:33:c3:31:33:31:a1: b9:a4:0f:42:ba:73:46:82:cb:32:73:3c:48:80:cd: c1:8b:8b:d4:03:3f:a8:dc:30:d6:ce:43:06:a3:1f: ce:ee:44:03:35:33:1a:20:30:c3:28:ba:32:53:27: c5:02:52:90:82:8e:df:b3:04:95:bd:0d:50:c6:e8: 1b:f6:11:c3:40:e7:99:d2:22:15:b4:40:02:9e:99: 79:58:aa:88:f0:c8:7f:43:23:55:5b:61:b5:9b:bc: d7:75:0c:bd:89:25:ba:5c:b8:b6:ed:40:46:5e:45: aa:2b:9f:aa:06:33:6e:c5:b7:18:3c:f0:cb:65:dd: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:52:72:20:F1:F5:30:C3:05:50:2C:EB:40:5A:0C:44:C0:31:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/41c17ad6-2850-37e8-8887-ce7da61674a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:f9:a7:46:35:f5:e8:33:38:87:69:d9:f0:cb:79:43:7c: af:ff:05:d8:05:8f:38:d2:96:23:bc:b0:a5:2c:18:44:d9:42: 53:73:3b:33:72:78:77:5f:f7:34:4d:88:a4:7d:52:d2:1b:39: 49:d3:9d:4c:d0:b5:f3:2a:69:38:12:57:6c:8f:8f:19:9b:f8: e8:ca:f7:04:1f:eb:ae:95:2d:53:0e:c8:44:39:82:be:01:aa: 96:3a:bc:89:42:a1:e7:f6:75:21:be:52:d6:c9:48:0d:a7:0d: 25:2d:da:a8:ea:a0:18:59:7e:a7:35:a4:ea:5f:13:2d:77:6d: 9e:05:f4:c6:36:c2:70:49:43:92:a1:c3:e3:e2:83:cf:72:cc: 47:62:17:86:eb:a3:e3:37:1a:60:0f:42:cb:23:e2:fb:26:7c: 96:35:84:e4:db:e7:b7:07:8d:48:e0:71:4c:c8:bf:0e:e5:b2: 62:38:b0:6f:d6:54:23:52:fe:5e:64:4a:f0:70:43:1d:0e:4f: 6b:24:71:40:91:69:69:03:cd:1e:cd:16:4b:ed:25:64:dc:23: f5:04:10:6f:f3:8d:47:a0:80:45:b1:ee:8f:6a:7a:fa:2e:59: 67:8e:86:5c:dd:77:a5:bb:8d:c7:73:1e:0c:a3:76:3c:71:82: 80:ac:0f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xC5fF45xOT4Uh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTYzMVoXDTI1MTEyMzA5MTYzMVowLzEtMCsGA1UEAxMk ODJiZGQzMDAtNGQ1ZC00OWIyLTg4YjQtMmNlYjVkZWVhODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn8RtXG1mjZZl1Kj9gVPnIxrAGFfi7h1P6RQ tq2/4yIc4E01gQrRtRdUifOJVuD7JF7tE1ff1PazWuSnjagh016yJdCCiFfI4GC2 hGrSQ9WdLkhxmTh3xuIK4LOf5yJf4BtoKxRxM4lbA30cW0s8J030m1iGcKfgwxha ybkbHOozwzEzMaG5pA9CunNGgssyczxIgM3Bi4vUAz+o3DDWzkMGox/O7kQDNTMa IDDDKLoyUyfFAlKQgo7fswSVvQ1Qxugb9hHDQOeZ0iIVtEACnpl5WKqI8Mh/QyNV W2G1m7zXdQy9iSW6XLi27UBGXkWqK5+qBjNuxbcYPPDLZd1/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvSUnIg8fUwwwVQLOtAWgxEwDG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDFjMTdhZDYtMjg1MC0z N2U4LTg4ODctY2U3ZGE2MTY3NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkBlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm0+adGNfXoMziHadnwy3lDfK//BdgFjzjSliO8sKUsGETZQlNzOzNy eHdf9zRNiKR9UtIbOUnTnUzQtfMqaTgSV2yPjxmb+OjK9wQf666VLVMOyEQ5gr4B qpY6vIlCoef2dSG+UtbJSA2nDSUt2qjqoBhZfqc1pOpfEy13bZ4F9MY2wnBJQ5Kh w+Pig89yzEdiF4bro+M3GmAPQssj4vsmfJY1hOTb57cHjUjgcUzIvw7lsmI4sG/W VCNS/l5kSvBwQx0OT2skcUCRaWkDzR7NFkvtJWTcI/UEEG/zjUeggEWx7o9qevou WWeOhlzdd6W7jcdzHgyjdjxxgoCsDzQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:54 2025 by rpki-client