$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa File: 6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa (raw, json) Hash identifier: qNJW4ozUD2Fw0HQkRJPZd5Y3H6vnWLPddI6qX+JKeMs= Subject key identifier: C3:F8:31:7D:B8:21:7D:87:69:1C:F8:58:35:F3:6D:A7:B8:F2:28:9F Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584B1C372BEF802D493F9E5EA208 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 144.125.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2b:ef:80:2d:49:3f:9e:5e:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=282187cb-4cf6-4cd4-8a99-4e2a311f8f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:2a:91:3c:f7:98:70:ed:42:ad:ef:73:e4: 6a:e2:ba:7b:9d:25:2c:73:42:a9:55:2b:08:e8:72: 02:24:2f:29:28:60:b2:96:10:02:d2:10:e0:31:f5: ff:f0:ea:34:aa:4d:e7:f6:8d:75:74:4d:46:c6:b7: 65:8c:0d:09:ab:da:0c:51:39:94:55:54:e4:0b:f5: a5:af:a6:53:bd:e1:fe:cb:a5:d5:ce:b9:74:08:4d: 6d:50:5a:93:78:6a:be:fc:f1:5b:5b:7f:c1:42:fc: fb:12:5d:c6:3f:17:90:eb:6d:d1:ec:c3:fb:be:08: ed:43:d9:33:e8:7f:9a:8b:8b:27:7c:d1:7d:7f:24: 15:35:42:ce:10:99:39:11:b8:88:13:0f:2b:57:97: 3f:c7:a9:bb:3f:54:e7:d1:78:10:9f:36:99:c5:3d: 44:33:0f:67:cf:93:3b:86:00:23:0a:91:b2:f5:ca: a4:a4:e4:cf:9b:f4:85:b8:6f:34:09:e8:85:bb:6a: 6d:87:3f:6a:61:d6:19:b2:05:3c:b1:6a:0c:96:d7: 9e:1d:3c:61:5d:77:d9:b0:de:39:0f:9c:89:1a:3b: 4d:37:8d:ff:b6:7b:82:5c:a6:1d:de:57:b9:bd:72: 58:80:03:c7:db:14:68:66:d2:1b:c8:d9:9d:05:95: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F8:31:7D:B8:21:7D:87:69:1C:F8:58:35:F3:6D:A7:B8:F2:28:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 144.125.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:98:ba:af:a5:38:a7:49:77:c9:3f:76:a9:dc:50:d1:e2:27: d4:87:5e:b4:e3:c7:1f:65:bf:e6:75:0d:99:cc:da:52:5f:bc: 14:da:c4:15:94:1a:65:13:7d:19:80:e4:9b:b4:28:a9:72:1a: ba:fb:56:24:f8:2b:cf:6f:ba:7f:0e:36:db:b1:76:12:fd:26: 89:e2:ba:43:e1:34:99:c5:14:8b:8b:68:c5:48:81:ee:95:a7: e5:33:fb:00:b5:14:0e:76:66:83:5a:ab:6e:5d:6b:56:59:97: 82:11:ec:25:40:43:3f:81:7b:f8:1c:13:27:4c:6c:9e:b6:33: 7f:67:e4:da:1a:71:0b:a8:b4:f8:12:1f:57:65:24:84:e0:90: 75:e2:c3:d3:e5:e7:ec:bd:d8:da:88:b9:ed:85:7d:73:1c:ed: 03:f2:13:c6:12:e8:f4:af:f4:82:ef:c5:fe:cc:7d:19:97:70: e5:0e:9d:2b:c8:9b:c0:af:c3:d0:35:65:b8:69:7e:cc:27:bc: af:81:ea:20:67:92:2a:ae:8f:65:4e:07:d7:e4:22:02:93:54: bb:fe:89:73:f9:a3:fb:ba:df:87:fa:8f:57:e7:21:39:96:a0: c7:a1:9a:ca:ca:dd:30:45:15:97:ba:ef:aa:ad:d5:4f:1c:b9: bf:5c:f6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNyvvgC1JP55eoggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjgyMTg3Y2ItNGNmNi00Y2Q0LThhOTktNGUyYTMxMWY4Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdAqkTz3mHDtQq3vc+Rq4rp7nSUsc0KpVSsI 6HICJC8pKGCylhAC0hDgMfX/8Oo0qk3n9o11dE1GxrdljA0Jq9oMUTmUVVTkC/Wl r6ZTveH+y6XVzrl0CE1tUFqTeGq+/PFbW3/BQvz7El3GPxeQ623R7MP7vgjtQ9kz 6H+ai4snfNF9fyQVNULOEJk5EbiIEw8rV5c/x6m7P1Tn0XgQnzaZxT1EMw9nz5M7 hgAjCpGy9cqkpOTPm/SFuG80CeiFu2pthz9qYdYZsgU8sWoMlteeHTxhXXfZsN45 D5yJGjtNN43/tnuCXKYd3le5vXJYgAPH2xRoZtIbyNmdBZXBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP4MX24IX2HaRz4WDXzbae48iifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNmY4YjlhMjMtMjc0Yy0z M2JkLWEyNWYtYWFhNWMzMGQwNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkH1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOYuq+lOKdJd8k/dqncUNHiJ9SHXrTjxx9lv+Z1DZnM2lJfvBTaxBWU GmUTfRmA5Ju0KKlyGrr7ViT4K89vun8ONtuxdhL9JoniukPhNJnFFIuLaMVIge6V p+Uz+wC1FA52ZoNaq25da1ZZl4IR7CVAQz+Be/gcEydMbJ62M39n5NoacQuotPgS H1dlJITgkHXiw9Pl5+y92NqIue2FfXMc7QPyE8YS6PSv9ILvxf7MfRmXcOUOnSvI m8Cvw9A1ZbhpfswnvK+B6iBnkiquj2VOB9fkIgKTVLv+iXP5o/u634f6j1fnITmW oMehmsrK3TBFFZe676qt1U8cub9c9rw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:50 2025 by rpki-client