$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d47623-4ab5-3e7a-8ca6-8e50f32bc72c.roa File: 95d47623-4ab5-3e7a-8ca6-8e50f32bc72c.roa (raw, json) Hash identifier: z+4CgrOJuOuWxkDG3taVcMtwSLo2XNmgg+zrwQ3lEBY= Subject key identifier: 00:D6:E5:42:E1:87:E3:0F:E8:8A:CB:E6:9D:96:F6:C0:0C:34:FD:E8 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584BC34A1D8FB8583120A187C400 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d47623-4ab5-3e7a-8ca6-8e50f32bc72c.roa Signing time: Wed 05 Nov 2025 21:19:40 +0000 ROA not before: Wed 05 Nov 2025 21:19:40 +0000 ROA not after: Tue 03 Feb 2026 21:19:40 +0000 asID: 396982 IP address blocks: 144.125.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:4a:1d:8f:b8:58:31:20:a1:87:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Nov 5 21:19:40 2025 GMT Not After : Feb 3 21:19:40 2026 GMT Subject: CN=afe0e50b-5855-4bfe-ade7-7d6fe12e0aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:12:84:07:69:01:f4:a9:6e:b8:f9:4c:48: 0b:d6:50:6d:02:4f:3f:eb:a3:88:2f:67:68:12:23: 51:63:86:b1:bf:8e:62:20:3c:4f:f1:2a:91:ed:0f: ee:24:c7:3b:42:74:44:aa:20:e0:7c:82:67:ec:d6: 34:86:d2:7a:9e:32:92:33:f7:42:33:20:6c:a8:27: cc:d5:98:93:28:c2:d3:a2:bb:e8:df:ed:88:32:9c: 03:b0:57:1f:91:18:f0:1f:b1:6c:88:b3:0a:a2:12: a3:eb:33:5a:1d:ec:e9:e4:b4:1f:cd:27:bd:65:84: b2:62:f4:e5:84:d0:19:02:05:b8:1a:00:85:8c:9e: 67:a3:f9:0b:6e:a7:32:57:64:59:2f:3c:2e:4f:60: a7:01:3c:56:48:e2:7f:62:9f:d2:8b:61:7c:d7:39: 51:e4:fd:e2:f5:39:97:b0:d8:5e:65:cc:86:d1:0c: 8c:13:bb:e8:e8:fb:aa:c1:c7:57:22:f9:70:12:9f: 83:9b:cb:80:10:33:55:e1:0b:4b:9c:0d:35:68:ea: 58:b4:64:6b:38:dc:8e:ed:bf:fb:94:cb:b2:5b:24: 5d:03:58:02:49:c5:c8:ac:09:fc:cf:33:f6:d2:aa: 1f:34:0b:eb:23:bf:75:7b:22:9e:28:55:7e:d3:fc: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D6:E5:42:E1:87:E3:0F:E8:8A:CB:E6:9D:96:F6:C0:0C:34:FD:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/95d47623-4ab5-3e7a-8ca6-8e50f32bc72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 144.125.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:5e:dc:15:41:12:61:0d:59:0e:94:36:e8:20:0c:bf:26:a6: 46:62:60:1d:98:1e:a5:1b:41:ff:aa:ef:57:db:8e:17:79:e4: 99:ff:d2:5f:d0:e4:db:41:bd:7d:b3:a3:01:d7:a6:2d:79:eb: 8f:dc:1b:92:3c:05:28:bd:52:f8:16:94:23:08:63:20:3f:c9: 66:cb:70:96:5b:c5:c6:13:d2:db:79:e7:8c:f8:95:d2:94:9f: e9:4b:56:64:c5:7e:89:5b:91:38:46:2f:41:19:94:1b:15:39: 5c:95:1e:8e:21:0b:bf:07:59:97:25:83:a9:1d:7b:d6:13:46: 3b:b0:52:98:4a:3d:66:59:a9:b8:41:96:b1:6e:ca:65:87:3e: d0:f3:8e:64:8a:8b:ba:b3:44:27:34:b6:d3:a7:61:9b:2d:e8: bd:68:fa:5c:fe:5f:de:4e:17:6d:bd:7c:6f:38:79:1c:27:30: f3:f4:77:6f:e7:8d:45:05:82:bb:ce:b3:51:ee:9b:38:6a:ed: 04:bc:55:19:83:0b:45:21:19:7b:09:47:6e:65:00:cb:c4:ec: 3d:e2:a3:32:9a:39:1e:4f:a5:51:a8:d4:4b:87:fe:a7:91:36: da:60:77:c3:48:ef:d8:84:e1:ff:7f:4d:a3:b0:1b:47:2a:24: e6:9c:7e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvDSh2PuFgxIKGHxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MTEwNTIxMTk0MFoXDTI2MDIwMzIxMTk0MFowLzEtMCsGA1UEAxMk YWZlMGU1MGItNTg1NS00YmZlLWFkZTctN2Q2ZmUxMmUwYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIoShAdpAfSpbrj5TEgL1lBtAk8/66OIL2do EiNRY4axv45iIDxP8SqR7Q/uJMc7QnREqiDgfIJn7NY0htJ6njKSM/dCMyBsqCfM 1ZiTKMLTorvo3+2IMpwDsFcfkRjwH7FsiLMKohKj6zNaHezp5LQfzSe9ZYSyYvTl hNAZAgW4GgCFjJ5no/kLbqcyV2RZLzwuT2CnATxWSOJ/Yp/Si2F81zlR5P3i9TmX sNheZcyG0QyME7vo6PuqwcdXIvlwEp+Dm8uAEDNV4QtLnA01aOpYtGRrONyO7b/7 lMuyWyRdA1gCScXIrAn8zzP20qofNAvrI791eyKeKFV+0/wHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADW5ULhh+MP6IrL5p2W9sAMNP3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOTVkNDc2MjMtNGFiNS0z ZTdhLThjYTYtOGU1MGYzMmJjNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkH3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1e3BVBEmENWQ6UNuggDL8mpkZiYB2YHqUbQf+q71fbjhd55Jn/0l/Q 5NtBvX2zowHXpi1564/cG5I8BSi9UvgWlCMIYyA/yWbLcJZbxcYT0tt554z4ldKU n+lLVmTFfolbkThGL0EZlBsVOVyVHo4hC78HWZclg6kde9YTRjuwUphKPWZZqbhB lrFuymWHPtDzjmSKi7qzRCc0ttOnYZst6L1o+lz+X95OF229fG84eRwnMPP0d2/n jUUFgrvOs1Humzhq7QS8VRmDC0UhGXsJR25lAMvE7D3iozKaOR5PpVGo1EuH/qeR Ntpgd8NI79iE4f9/TaOwG0cqJOacft0= -----END CERTIFICATE-----Generated at Sat Nov 8 07:35:58 2025 by rpki-client