$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa File: b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa (raw, json) Hash identifier: k1qMcL05calEeIWExIDm1T7ohmXz5S3ebJXSie4fZ/4= Subject key identifier: 47:23:AA:72:7B:E6:9F:E0:D4:E5:FB:5F:32:10:EA:BD:1D:EE:5E:86 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FB9391E508A2ED4B4AE90 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa Signing time: Mon 13 Oct 2025 14:11:11 +0000 ROA not before: Mon 13 Oct 2025 14:11:11 +0000 ROA not after: Sun 11 Jan 2026 15:11:11 +0000 asID: 21433 IP address blocks: 144.36.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:b9:39:1e:50:8a:2e:d4:b4:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:11 2025 GMT Not After : Jan 11 15:11:11 2026 GMT Subject: CN=0c6997b2-7a9c-49ff-8713-5a8218d1b35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:47:d0:c9:a8:f9:28:7b:c0:e8:1f:ae:9a: d5:5e:0b:b1:8f:a6:8e:0d:f1:4e:2c:7a:4a:45:a3: 3b:5f:4b:0a:eb:0e:72:08:cd:21:a1:b4:a9:28:1a: 5e:66:2a:11:ff:6c:fe:6b:0d:e5:7e:06:f4:a7:f7: 62:a2:d7:43:67:bb:e8:88:26:e2:88:b0:99:55:6f: d9:ce:ae:28:22:76:39:2d:19:03:93:b0:d3:8c:ca: 7c:c1:83:84:b1:b6:ea:e1:82:07:89:a4:13:b2:f5: 96:7c:b2:06:89:24:cb:0e:91:3d:c1:93:61:6e:73: b2:d4:4c:0d:f8:40:65:eb:0b:cd:18:7e:38:dd:9f: a3:e3:8c:b3:64:b1:d9:4c:8c:56:56:ab:4f:2a:05: c8:c6:ec:a6:a5:09:d0:bc:66:72:2c:57:0a:e7:39: 24:77:08:5b:cf:a7:56:18:e4:ec:1e:b6:4c:66:f4: 70:0e:5e:4a:78:ac:89:a1:c2:d4:b7:98:a3:08:7d: 5c:14:5c:f0:f5:e0:6f:fb:89:c9:c2:52:13:f4:cc: 0b:85:1a:12:1d:dd:0c:38:b1:57:65:1d:36:b6:ee: e3:bc:77:48:05:9c:46:9d:c3:3b:f0:0a:f4:18:3c: 2b:fc:52:7e:3e:21:c9:19:cf:a3:3b:20:33:73:d2: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:AA:72:7B:E6:9F:E0:D4:E5:FB:5F:32:10:EA:BD:1D:EE:5E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:84:e2:2d:98:6d:92:47:a6:fd:76:e1:03:fc:29:c6:8d:d2: 8c:4e:5c:22:72:27:a2:fd:f7:36:ce:96:ef:10:35:21:f5:b1: 91:c3:1b:b2:95:b5:6b:94:c5:f7:da:be:60:1a:92:9c:f9:cb: 14:fb:90:ce:bb:0f:7a:30:b3:3e:2d:d7:78:fa:5e:4d:0b:32: 8b:cd:f6:6c:c2:d2:c2:7b:ef:2d:e8:4f:c8:b5:b0:fd:e8:67: 3c:9c:6a:5b:a4:7e:6f:20:7e:26:df:63:d8:1e:46:7d:34:e1: dc:1c:f6:7a:7e:35:d5:7d:09:e9:84:88:ea:32:8f:de:d7:a6: f0:70:13:71:58:27:24:a4:38:be:5c:5e:af:55:6a:57:f0:8a: eb:ca:84:6f:12:f3:b9:2a:4e:ef:d9:3e:3d:06:13:76:43:1b: 03:8c:ae:90:f8:df:67:ec:91:17:68:02:f6:5c:58:64:1f:fc: da:f0:d9:89:4b:46:46:ff:90:ef:41:53:2c:b1:9f:fc:be:4d: 31:c2:3e:e1:ba:11:da:0c:4b:ce:a0:ce:fa:8f:c3:d3:b8:c4: 2e:2d:fa:b1:69:d5:68:c0:18:d2:fe:43:47:a8:68:c3:c4:8c: f7:73:b8:10:77:04:07:03:5d:29:95:0d:16:e2:a3:d1:a0:85: 90:ce:67:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7k5HlCKLtS0rpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTExMVoXDTI2MDExMTE1MTExMVowLzEtMCsGA1UEAxMk MGM2OTk3YjItN2E5Yy00OWZmLTg3MTMtNWE4MjE4ZDFiMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+tH0Mmo+Sh7wOgfrprVXguxj6aODfFOLHpK RaM7X0sK6w5yCM0hobSpKBpeZioR/2z+aw3lfgb0p/diotdDZ7voiCbiiLCZVW/Z zq4oInY5LRkDk7DTjMp8wYOEsbbq4YIHiaQTsvWWfLIGiSTLDpE9wZNhbnOy1EwN +EBl6wvNGH443Z+j44yzZLHZTIxWVqtPKgXIxuympQnQvGZyLFcK5zkkdwhbz6dW GOTsHrZMZvRwDl5KeKyJocLUt5ijCH1cFFzw9eBv+4nJwlIT9MwLhRoSHd0MOLFX ZR02tu7jvHdIBZxGncM78Ar0GDwr/FJ+PiHJGc+jOyAzc9I6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcjqnJ75p/g1OX7XzIQ6r0d7l6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjVkNTgyN2ItYTI3OC0z ZDMwLThlZjMtZGRkYmM5NDI5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCE4i2YbZJHpv124QP8KcaN0oxOXCJyJ6L99zbOlu8QNSH1sZHDG7KV tWuUxffavmAakpz5yxT7kM67D3owsz4t13j6Xk0LMovN9mzC0sJ77y3oT8i1sP3o Zzycalukfm8gfibfY9geRn004dwc9np+NdV9CemEiOoyj97XpvBwE3FYJySkOL5c Xq9ValfwiuvKhG8S87kqTu/ZPj0GE3ZDGwOMrpD432fskRdoAvZcWGQf/Nrw2YlL Rkb/kO9BUyyxn/y+TTHCPuG6EdoMS86gzvqPw9O4xC4t+rFp1WjAGNL+Q0eoaMPE jPdzuBB3BAcDXSmVDRbio9GghZDOZxE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:49:54 2025 by rpki-client