$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa File: 89db818c-8476-3eec-9f80-42c7af3cfb5b.roa (raw, json) Hash identifier: ja8hgjPp1bPuIexHTTnYHadc86VzCuynSzJy28MyP7Y= Subject key identifier: BE:55:B9:FE:FC:9F:6B:FC:16:82:48:3B:AF:92:AE:16:07:63:46:57 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FA5879520974FA430CDA0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa Signing time: Mon 13 Oct 2025 14:11:02 +0000 ROA not before: Mon 13 Oct 2025 14:11:02 +0000 ROA not after: Sun 11 Jan 2026 15:11:02 +0000 asID: 21433 IP address blocks: 144.36.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:a5:87:95:20:97:4f:a4:30:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:02 2025 GMT Not After : Jan 11 15:11:02 2026 GMT Subject: CN=f0fc5c86-e1cc-4493-bfd4-8df6e30c0b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:92:16:ce:b2:37:18:41:6c:2a:74:da:ae: ba:07:ee:29:2e:2d:48:fd:58:b0:92:c4:d6:67:4b: 4e:08:9f:6b:23:1d:9b:ae:b9:ca:eb:5c:48:21:9b: 71:97:f5:4f:37:58:73:30:24:78:33:d1:82:c1:90: aa:58:16:7b:44:11:c5:11:6a:4e:be:6e:2a:14:6b: 85:f2:a1:b9:2f:41:07:14:5b:58:52:1b:c4:d6:b7: c2:53:2f:e6:26:8b:65:59:95:c5:3c:07:97:cb:ad: ea:d5:17:57:ef:e2:60:2f:66:b9:56:e2:c1:2e:dd: 68:75:a9:a3:52:96:a2:4e:28:67:3b:d8:a5:be:d7: e0:6a:f3:4a:8e:2d:25:b8:af:2e:8f:8d:0b:6a:bf: 43:9f:d1:67:9f:2a:e8:23:28:27:6f:75:79:66:11: f5:20:7e:4f:ef:41:70:7c:a0:e1:8b:33:f3:cc:0e: 1e:55:12:c4:37:a6:78:cc:fd:0b:e2:92:53:a1:c5: de:73:b4:79:54:d9:f8:7a:f1:36:d4:52:e8:f7:33: be:49:32:e7:27:ef:54:ea:01:94:f8:69:86:7c:0d: a4:df:cb:ec:a8:44:ae:a2:a9:d3:36:73:4f:78:08: f3:16:b2:39:ff:69:0a:1b:95:63:f7:bd:aa:e6:aa: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:55:B9:FE:FC:9F:6B:FC:16:82:48:3B:AF:92:AE:16:07:63:46:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:fd:01:b3:4c:11:4a:39:f9:f5:c3:f4:ae:22:9d:8c:4b: b5:3f:bd:98:6c:2f:3e:b9:31:8d:df:f0:b9:f2:a1:bd:5b:84: 74:23:d3:6c:eb:30:e9:c7:e6:71:37:ea:6a:bd:82:ad:20:96: eb:3b:4f:3b:7c:58:1c:8f:92:8c:f4:1f:38:a1:23:77:84:ce: 81:4e:76:97:80:44:ba:dd:cc:4c:6a:23:1d:fe:59:d8:40:ed: d0:28:58:0c:1e:b9:72:fb:36:dd:5f:49:dd:23:21:52:2e:4b: 55:a7:be:5a:d2:73:d6:10:1c:68:e0:64:20:b7:d2:cc:6b:4d: cd:5f:01:56:69:de:9f:04:0e:44:46:98:f7:ce:93:4d:b1:b5: ff:95:f6:b5:e5:37:51:d6:95:13:3d:77:e0:9b:cf:81:d4:1e: 21:cf:5a:1c:09:54:5f:9f:c6:28:d4:f9:b5:44:6e:83:2e:01: 38:22:41:97:6a:63:04:40:f7:9c:a0:d7:b5:5a:24:3b:a8:bb: 2d:0c:a1:4f:b2:d2:37:94:4e:e7:24:ab:6e:e5:21:3b:23:d2: c0:aa:b7:6c:a6:83:54:18:15:70:be:85:ab:bb:32:9f:97:77: 90:87:f1:b3:94:bb:88:10:f7:8d:c9:9d:c4:4d:28:9d:4a:45: c2:29:c5:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP6WHlSCXT6QwzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTEwMloXDTI2MDExMTE1MTEwMlowLzEtMCsGA1UEAxMk ZjBmYzVjODYtZTFjYy00NDkzLWJmZDQtOGRmNmUzMGMwYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIySFs6yNxhBbCp02q66B+4pLi1I/ViwksTW Z0tOCJ9rIx2brrnK61xIIZtxl/VPN1hzMCR4M9GCwZCqWBZ7RBHFEWpOvm4qFGuF 8qG5L0EHFFtYUhvE1rfCUy/mJotlWZXFPAeXy63q1RdX7+JgL2a5VuLBLt1odamj UpaiTihnO9ilvtfgavNKji0luK8uj40Lar9Dn9FnnyroIygnb3V5ZhH1IH5P70Fw fKDhizPzzA4eVRLEN6Z4zP0L4pJTocXec7R5VNn4evE21FLo9zO+STLnJ+9U6gGU +GmGfA2k38vsqESuoqnTNnNPeAjzFrI5/2kKG5Vj972q5qoSwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5Vuf78n2v8FoJIO6+SrhYHY0ZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODlkYjgxOGMtODQ3Ni0z ZWVjLTlmODAtNDJjN2FmM2NmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3M/QGzTBFKOfn1w/SuIp2MS7U/vZhsLz65MY3f8Lnyob1bhHQj02zr MOnH5nE36mq9gq0glus7Tzt8WByPkoz0HzihI3eEzoFOdpeARLrdzExqIx3+WdhA 7dAoWAweuXL7Nt1fSd0jIVIuS1WnvlrSc9YQHGjgZCC30sxrTc1fAVZp3p8EDkRG mPfOk02xtf+V9rXlN1HWlRM9d+Cbz4HUHiHPWhwJVF+fxijU+bVEboMuATgiQZdq YwRA95yg17VaJDuouy0MoU+y0jeUTuckq27lITsj0sCqt2ymg1QYFXC+hau7Mp+X d5CH8bOUu4gQ943JncRNKJ1KRcIpxSE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:35 2025 by rpki-client