$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa File: ed892fc0-259a-350e-883a-4579f8f9fddc.roa (raw, json) Hash identifier: 4FqwpWo6YcsZKtkqSJLBUqFfcvPyuDR2gS+wm/3iVDk= Subject key identifier: CE:63:BE:0B:01:14:60:5B:3C:0D:14:02:4F:E1:3C:38:2D:47:4F:B3 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF8C40C0D434E77AF16ACD980 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa Signing time: Mon 25 Aug 2025 08:16:15 +0000 ROA not before: Mon 25 Aug 2025 08:16:15 +0000 ROA not after: Sun 23 Nov 2025 09:16:15 +0000 asID: 31898 IP address blocks: 144.25.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c4:0c:0d:43:4e:77:af:16:ac:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 25 08:16:15 2025 GMT Not After : Nov 23 09:16:15 2025 GMT Subject: CN=f5c47267-30d6-4644-9761-b1a02e44517c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:e1:e1:d7:3a:2a:e0:be:ae:06:e1:5e:bc: b7:21:79:fc:78:fb:4b:a3:55:b7:23:c9:ec:a4:07: 9f:5f:e6:2b:f6:20:66:0c:6a:80:64:8f:fd:19:25: c2:5e:a5:e9:e8:ea:d5:48:9f:c1:6f:8a:ff:fd:dc: 60:24:aa:26:03:ad:f4:dc:a4:49:65:43:08:08:fa: 32:6c:fa:b7:6d:12:76:23:10:ff:dc:0d:0d:30:c6: 1b:08:85:08:84:51:13:26:09:b2:ca:49:2b:52:c6: 2f:67:c0:af:a5:d7:1b:3e:de:9b:90:14:66:9d:31: 77:f1:45:8e:c9:e8:ba:30:e7:e6:6f:df:01:4d:41: af:b1:c4:2f:44:ce:e5:4b:a6:b8:c3:59:0d:21:cf: 4e:cb:cf:6e:ce:a0:6e:15:ad:30:1a:64:65:a8:c8: a8:5b:20:f0:89:e1:34:16:11:07:4a:1a:c7:c9:df: a7:d0:d2:23:81:0f:db:7d:fe:07:bb:46:bb:66:0f: ae:20:02:e2:07:6d:f5:ed:c0:de:55:f3:ea:eb:e0: 68:57:c8:16:f0:72:e1:13:d9:3b:d1:31:31:21:06: 79:3f:b5:7a:4a:a4:1f:71:22:10:67:fe:aa:9f:a3: 34:3a:ba:bd:3f:33:b2:46:e9:80:97:bb:b3:b4:3f: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:63:BE:0B:01:14:60:5B:3C:0D:14:02:4F:E1:3C:38:2D:47:4F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e9:71:32:8b:0c:83:4f:0d:bf:b7:39:14:33:db:f8:ad:3f: 40:4b:eb:26:3d:b8:9f:e4:ff:e5:1a:c3:05:fa:59:82:cb:1d: 0e:39:f3:61:13:f9:c9:91:d1:68:7f:fd:fe:c6:0a:df:c0:c2: 21:cc:1a:50:49:62:6b:d6:c3:f7:fa:4e:48:2d:ae:13:1c:70: 3f:0b:2f:bb:0f:25:c0:f8:13:7f:ee:9b:32:b3:e2:bf:6c:d4: 14:92:20:c4:6b:4f:87:ee:2e:18:71:f5:62:48:cc:ce:f2:4f: 59:8b:20:d4:be:2f:3d:3b:a6:25:e5:9d:28:ef:cb:54:da:5d: 92:a2:21:46:be:65:d3:a3:ce:79:9d:bb:01:1b:e4:0a:88:ee: 58:53:1d:ad:3f:99:de:c8:2c:0b:f7:23:87:4e:8d:bc:07:83: f8:18:8e:8f:80:76:23:ad:7a:2d:51:09:45:a6:b0:b2:51:cb: 57:8e:e5:65:33:b6:02:de:48:ac:45:1d:41:c6:f4:e3:56:e0: 83:63:3d:44:7f:e8:2b:ff:1a:f4:c8:16:f4:45:7c:0c:f9:87: 64:b5:3d:c9:47:8e:54:6f:71:e4:6b:20:cc:5c:71:e2:b6:a5: dc:8f:56:5b:bd:88:df:80:7f:e2:b4:07:7d:86:0b:0d:b7:8a: aa:79:47:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xAwNQ053rxas2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyNTA4MTYxNVoXDTI1MTEyMzA5MTYxNVowLzEtMCsGA1UEAxMk ZjVjNDcyNjctMzBkNi00NjQ0LTk3NjEtYjFhMDJlNDQ1MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13Hh4dc6KuC+rgbhXry3IXn8ePtLo1W3I8ns pAefX+Yr9iBmDGqAZI/9GSXCXqXp6OrVSJ/Bb4r//dxgJKomA6303KRJZUMICPoy bPq3bRJ2IxD/3A0NMMYbCIUIhFETJgmyykkrUsYvZ8CvpdcbPt6bkBRmnTF38UWO yei6MOfmb98BTUGvscQvRM7lS6a4w1kNIc9Oy89uzqBuFa0wGmRlqMioWyDwieE0 FhEHShrHyd+n0NIjgQ/bff4Hu0a7Zg+uIALiB2317cDeVfPq6+BoV8gW8HLhE9k7 0TExIQZ5P7V6SqQfcSIQZ/6qn6M0Orq9PzOyRumAl7uztD9hPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5jvgsBFGBbPA0UAk/hPDgtR0+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZWQ4OTJmYzAtMjU5YS0z NTBlLTg4M2EtNDU3OWY4ZjlmZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILpcTKLDINPDb+3ORQz2/itP0BL6yY9uJ/k/+UawwX6WYLLHQ4582ET +cmR0Wh//f7GCt/AwiHMGlBJYmvWw/f6TkgtrhMccD8LL7sPJcD4E3/umzKz4r9s 1BSSIMRrT4fuLhhx9WJIzM7yT1mLINS+Lz07piXlnSjvy1TaXZKiIUa+ZdOjznmd uwEb5AqI7lhTHa0/md7ILAv3I4dOjbwHg/gYjo+AdiOtei1RCUWmsLJRy1eO5WUz tgLeSKxFHUHG9ONW4INjPUR/6Cv/GvTIFvRFfAz5h2S1PclHjlRvceRrIMxcceK2 pdyPVlu9iN+Af+K0B32GCw23iqp5R2M= -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:07 2025 by rpki-client