$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/78a27c8d-3dec-3340-9b6f-8013ced92edd.roa File: 78a27c8d-3dec-3340-9b6f-8013ced92edd.roa (raw, json) Hash identifier: bOVklVR8dQX3GdqsghKE6D4bzvN1UECvgwaEdp/T+9o= Subject key identifier: 4A:C5:B2:13:1F:D0:E2:0F:18:CF:B8:F1:A5:DD:57:AD:87:3F:50:EA Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C414919DE305CA9EC9A000 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/78a27c8d-3dec-3340-9b6f-8013ced92edd.roa Signing time: Mon 25 Aug 2025 08:16:19 +0000 ROA not before: Mon 25 Aug 2025 08:16:19 +0000 ROA not after: Sun 23 Nov 2025 09:16:19 +0000 asID: 31898 IP address blocks: 144.25.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:14:91:9d:e3:05:ca:9e:c9:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:16:19 2025 GMT Not After : Nov 23 09:16:19 2025 GMT Subject: CN=a5d6125c-c148-4b0a-b3f3-56c67f4f8cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:ee:26:63:98:0b:e1:77:28:ea:69:aa:b9: fe:c1:de:70:7b:34:2d:43:56:49:31:85:99:84:2b: 2f:68:3c:22:c1:22:33:3b:74:e0:5b:3f:b5:14:e9: 06:06:e9:6b:34:3e:8c:d1:0a:f8:32:d8:4b:69:e5: db:68:bf:85:86:67:eb:fc:03:30:15:2b:8f:5f:6a: d4:c2:b9:4a:6a:4a:3d:31:c2:75:a9:a5:4e:8f:12: 2c:f4:40:65:96:58:76:fd:ce:32:e5:60:d5:ff:39: 1a:d4:d5:54:17:79:53:81:b3:ea:9a:32:87:04:5d: d3:d9:38:55:a0:27:06:87:99:cc:97:e9:35:ee:c7: 67:10:29:39:4e:ea:d4:ef:49:ea:c2:a1:70:6e:b8: e3:30:1d:eb:f3:8a:d5:fc:ef:eb:26:1e:ff:2b:15: 88:09:87:cc:de:6f:90:a3:d5:60:88:4d:82:e8:56: 9f:f4:1a:b8:17:8f:f0:66:59:ea:a1:40:73:6e:7f: 10:ed:88:c3:16:22:ce:fe:ca:60:f6:73:84:80:dc: 57:bf:d4:80:80:5c:8f:cf:04:4f:c3:bb:3f:cd:a2: 9d:0d:74:62:3b:f7:df:82:48:85:16:97:8d:ff:61: 3b:20:04:e0:12:29:ab:1f:c9:00:d6:0f:13:db:53: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:B2:13:1F:D0:E2:0F:18:CF:B8:F1:A5:DD:57:AD:87:3F:50:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/78a27c8d-3dec-3340-9b6f-8013ced92edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:86:1e:4e:b1:f6:7c:d2:51:b2:83:81:b1:60:b7:3c:29:88: 53:e4:e0:72:36:81:2d:35:cd:59:41:e3:c4:81:d7:98:28:1b: 1d:ae:67:92:68:ed:7f:dc:a2:1b:0c:f1:f7:f8:9f:0f:eb:a5: d8:83:db:f3:e8:de:96:af:0a:8e:c4:a0:af:5d:f7:6a:99:2c: 77:bb:18:e6:b7:a7:63:a3:d6:7b:47:58:b8:f5:4f:ff:39:76: f6:d2:52:35:7e:c3:67:1c:f1:54:19:77:31:6a:b1:9d:e7:b1: 76:71:fc:d0:81:f9:87:64:96:60:54:bf:66:79:e9:bc:ca:2c: be:36:1e:41:02:6b:6a:0a:9c:49:1d:ec:04:b8:f3:cf:ed:b7: 3c:70:a7:58:0b:e8:c4:46:75:38:b6:92:c2:9b:29:fa:e0:10: 2d:00:60:c6:ab:e3:90:71:3b:64:4b:80:39:b5:1f:47:c2:de: da:fc:66:13:72:17:23:c4:1a:23:5a:aa:8d:df:ce:c2:23:4c: 61:1f:f6:75:82:56:44:11:68:bb:70:56:d2:1c:12:b5:d7:dd: 74:5f:0c:06:dd:75:d7:3a:34:52:d3:d2:a0:09:ea:73:8d:6b: 7c:63:6c:a4:a4:b0:a4:54:1a:21:2c:d9:cc:85:0e:cb:d8:f0: a3:7b:5f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xBSRneMFyp7JoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTYxOVoXDTI1MTEyMzA5MTYxOVowLzEtMCsGA1UEAxMk YTVkNjEyNWMtYzE0OC00YjBhLWIzZjMtNTZjNjdmNGY4Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YbuJmOYC+F3KOppqrn+wd5wezQtQ1ZJMYWZ hCsvaDwiwSIzO3TgWz+1FOkGBulrND6M0Qr4MthLaeXbaL+Fhmfr/AMwFSuPX2rU wrlKako9McJ1qaVOjxIs9EBlllh2/c4y5WDV/zka1NVUF3lTgbPqmjKHBF3T2ThV oCcGh5nMl+k17sdnECk5TurU70nqwqFwbrjjMB3r84rV/O/rJh7/KxWICYfM3m+Q o9VgiE2C6Faf9Bq4F4/wZlnqoUBzbn8Q7YjDFiLO/spg9nOEgNxXv9SAgFyPzwRP w7s/zaKdDXRiO/ffgkiFFpeN/2E7IATgEimrH8kA1g8T21Oh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErFshMf0OIPGM+48aXdV62HP1DqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNzhhMjdjOGQtM2RlYy0z MzQwLTliNmYtODAxM2NlZDkyZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuGHk6x9nzSUbKDgbFgtzwpiFPk4HI2gS01zVlB48SB15goGx2uZ5Jo 7X/cohsM8ff4nw/rpdiD2/Po3pavCo7EoK9d92qZLHe7GOa3p2Oj1ntHWLj1T/85 dvbSUjV+w2cc8VQZdzFqsZ3nsXZx/NCB+YdklmBUv2Z56bzKLL42HkECa2oKnEkd 7AS488/ttzxwp1gL6MRGdTi2ksKbKfrgEC0AYMar45BxO2RLgDm1H0fC3tr8ZhNy FyPEGiNaqo3fzsIjTGEf9nWCVkQRaLtwVtIcErXX3XRfDAbdddc6NFLT0qAJ6nON a3xjbKSksKRUGiEs2cyFDsvY8KN7X8s= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:37 2025 by rpki-client