$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa File: 3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa (raw, json) Hash identifier: Y4vpULn/wwW+ir7PWDmwaA27xKXX/cbDkiEuGiIO9CY= Subject key identifier: 1E:48:3A:9B:36:BF:60:8B:3F:01:F9:78:EC:C0:49:C7:2D:B1:8E:A1 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FB45BECF6597817A0F340 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa Signing time: Mon 13 Oct 2025 14:11:09 +0000 ROA not before: Mon 13 Oct 2025 14:11:09 +0000 ROA not after: Sun 11 Jan 2026 15:11:09 +0000 asID: 21433 IP address blocks: 144.36.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:b4:5b:ec:f6:59:78:17:a0:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:09 2025 GMT Not After : Jan 11 15:11:09 2026 GMT Subject: CN=05e46f51-0c98-4f82-9f30-af7373ec238c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:e9:a9:60:6a:30:fc:75:e0:73:96:16:96: 02:3e:64:d4:4a:d4:78:75:d7:fa:2d:85:af:07:e0: e3:42:e5:1b:b5:fd:b0:72:cd:e7:57:8e:dd:ad:ba: ea:c7:4a:f1:59:72:7b:74:6f:99:66:bf:80:82:b3: ae:4f:3b:cf:55:1c:6b:de:30:bc:0f:ac:47:1a:47: 57:11:dd:d0:c5:d3:0e:c4:32:33:f1:47:eb:2c:31: 96:b5:52:5e:a6:80:d9:63:34:93:c1:0f:78:29:8f: 11:3e:f9:ca:fb:1f:7b:94:67:ee:95:fa:fb:eb:18: ed:00:44:af:78:10:74:8b:de:20:83:78:91:46:10: b1:0e:63:ad:4c:31:61:b6:59:46:6f:c7:f7:f9:32: f1:10:72:07:0c:ac:20:13:93:ad:90:0e:6f:8e:f4: a4:c2:16:be:8b:64:9d:b4:69:bd:93:69:06:34:53: 36:56:9e:0d:58:cd:55:4d:1f:a7:59:0c:9f:38:d6: 0e:0f:14:70:fd:ec:ff:54:c2:a9:7b:1b:ed:5a:01: 34:9f:7c:34:97:b2:57:23:44:fb:15:cf:e1:81:d4: 17:f8:96:79:30:2b:5a:04:67:f0:50:9c:fd:da:f6: 62:47:f1:05:ad:d4:73:43:3c:4a:23:b2:50:a3:e4: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:3A:9B:36:BF:60:8B:3F:01:F9:78:EC:C0:49:C7:2D:B1:8E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:52:71:6d:16:aa:78:89:28:23:2c:28:fc:a3:dc:22:a0:9b: 2d:ed:ce:9a:0f:29:45:45:db:14:3f:04:de:38:06:a6:07:f6: 6e:a7:b6:dc:be:78:01:d0:8d:d9:39:53:64:d8:06:d4:e7:7e: 75:08:79:cf:10:2c:e0:81:db:2b:cc:aa:98:d4:96:a3:16:0b: f7:c7:8f:07:00:1f:b9:ea:94:47:c0:1c:52:56:29:8b:16:f6: 94:0f:f1:69:60:79:a1:ea:b4:7d:1a:e6:35:12:c2:e6:d0:b1: a2:95:0b:98:a8:9a:77:ca:78:68:d3:64:da:f8:2c:b6:52:18: a2:58:f3:6d:90:76:31:23:dc:00:8b:1c:cd:f2:16:7f:71:0a: 21:39:b3:5b:b5:75:31:69:8c:16:8d:53:24:1f:70:66:1b:c2: 30:4e:63:57:f6:1a:f4:5d:16:3b:5e:0d:79:28:fe:4a:98:ab: a6:6f:73:ce:b3:ca:a3:41:0d:d2:f9:db:b1:08:42:0d:84:69: e6:a9:fb:65:6e:dc:f9:e3:ac:97:88:b6:90:9b:bb:66:9a:e4: 5d:37:1c:40:eb:b7:63:70:ac:14:f8:7d:7f:28:a7:7a:4e:23: de:19:44:08:6b:ea:0b:3e:cc:67:c0:7a:56:fb:37:51:e7:24: 2e:ec:7a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7Rb7PZZeBeg80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTEwOVoXDTI2MDExMTE1MTEwOVowLzEtMCsGA1UEAxMk MDVlNDZmNTEtMGM5OC00ZjgyLTlmMzAtYWY3MzczZWMyMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5npqWBqMPx14HOWFpYCPmTUStR4ddf6LYWv B+DjQuUbtf2wcs3nV47drbrqx0rxWXJ7dG+ZZr+AgrOuTzvPVRxr3jC8D6xHGkdX Ed3QxdMOxDIz8UfrLDGWtVJepoDZYzSTwQ94KY8RPvnK+x97lGfulfr76xjtAESv eBB0i94gg3iRRhCxDmOtTDFhtllGb8f3+TLxEHIHDKwgE5OtkA5vjvSkwha+i2Sd tGm9k2kGNFM2Vp4NWM1VTR+nWQyfONYODxRw/ez/VMKpexvtWgE0n3w0l7JXI0T7 Fc/hgdQX+JZ5MCtaBGfwUJz92vZiR/EFrdRzQzxKI7JQo+S6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5IOps2v2CLPwH5eOzAScctsY6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvM2U2ZTRkZjItMDA3MS0z MDYwLWE3YTUtYTQ3MWU0ODljMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdScW0WqniJKCMsKPyj3CKgmy3tzpoPKUVF2xQ/BN44BqYH9m6ntty+ eAHQjdk5U2TYBtTnfnUIec8QLOCB2yvMqpjUlqMWC/fHjwcAH7nqlEfAHFJWKYsW 9pQP8WlgeaHqtH0a5jUSwubQsaKVC5iomnfKeGjTZNr4LLZSGKJY822QdjEj3ACL HM3yFn9xCiE5s1u1dTFpjBaNUyQfcGYbwjBOY1f2GvRdFjteDXko/kqYq6Zvc86z yqNBDdL527EIQg2Eaeap+2Vu3PnjrJeItpCbu2aa5F03HEDrt2NwrBT4fX8op3pO I94ZRAhr6gs+zGfAelb7N1HnJC7sejA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:49:49 2025 by rpki-client