$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa File: ba2cd3da-986b-378d-a0be-391b87dfb736.roa (raw, json) Hash identifier: N96zIeGUVGPoGDJ8P2QAat4uSev/dWFOJOA9f7BZylk= Subject key identifier: 22:90:2C:65:91:5D:32:01:14:9C:F2:C5:A1:AA:89:8A:37:58:03:60 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FBFE99FE81A088AB5BD60 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa Signing time: Mon 13 Oct 2025 14:11:14 +0000 ROA not before: Mon 13 Oct 2025 14:11:14 +0000 ROA not after: Sun 11 Jan 2026 15:11:14 +0000 asID: 21433 IP address blocks: 144.36.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:bf:e9:9f:e8:1a:08:8a:b5:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:14 2025 GMT Not After : Jan 11 15:11:14 2026 GMT Subject: CN=c8bb2b1d-0328-45db-8066-3787b59abc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:aa:bf:55:75:8b:16:19:45:db:7b:21:f5: 32:97:4e:9b:f5:fb:63:16:b1:63:16:cb:82:f0:90: 49:24:f9:24:ed:a9:b6:f5:2f:66:b1:eb:74:d0:29: c3:47:9d:8f:a8:a9:2c:e5:22:5a:af:e7:c3:85:63: 3b:1f:72:4a:bd:13:aa:a3:43:f3:37:f4:26:46:39: a8:10:fb:c5:4e:4b:10:a1:75:af:f2:fe:29:34:68: 6f:71:72:ac:b7:5f:d7:3b:06:d5:50:71:f9:33:56: 91:e8:cf:14:83:9c:57:cc:fa:46:e1:35:33:15:02: 9f:04:84:b9:d8:68:7e:16:1b:80:50:66:10:2d:8d: 16:a8:74:71:d2:52:92:6b:41:64:8e:46:82:4d:be: ff:ea:a8:3a:56:22:e4:f9:92:0f:5e:c2:8b:41:47: 0c:32:09:6d:11:4a:11:18:b3:e6:1e:9d:15:78:be: e1:8f:a3:01:7a:c6:dd:79:b7:4f:43:3d:b1:85:5a: e0:80:fd:b2:70:cc:fb:e5:0b:6f:55:10:d6:24:95: ae:d3:6e:46:b6:05:df:e6:14:58:ad:50:13:a8:6f: 88:15:d2:46:13:78:4d:52:d4:73:fc:2a:28:e0:af: 6d:8e:3c:f3:ec:f4:9d:f0:ed:cd:35:1c:e8:b6:07: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:90:2C:65:91:5D:32:01:14:9C:F2:C5:A1:AA:89:8A:37:58:03:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9c:fa:95:13:ee:79:4e:09:e5:8d:2d:7a:ae:b8:21:68:1a: 56:f0:c6:d4:78:8d:0a:83:44:80:a7:72:46:78:7f:0f:db:70: d9:cf:d2:a9:42:bd:f3:6b:f0:fb:49:bf:23:61:ee:15:1d:22: c1:c9:c4:98:d4:45:e3:1e:e2:74:83:b3:2f:1a:d5:4c:12:7b: f3:3a:a5:c1:11:72:0e:97:89:ec:71:ae:29:b1:6c:ac:d0:98: 9c:7f:ca:3b:37:39:69:fe:3b:82:c0:37:56:86:b3:7b:86:76: 65:04:13:3b:32:52:df:d6:0d:0f:4b:6d:78:c9:50:23:e5:3c: 80:6c:a2:f5:3d:71:f6:55:75:cc:fd:93:6a:22:72:12:e3:ca: b2:2d:1e:b3:1a:82:8d:7e:99:20:ef:46:9c:de:a7:2b:54:5e: 7f:4e:0e:cb:f3:57:b0:52:ec:23:57:e3:da:86:01:47:3a:8a: b0:2e:d5:42:fc:58:67:97:50:54:29:fb:11:1e:82:e2:8c:a9: 19:34:75:cf:4f:f0:23:e0:b8:39:ee:0d:30:7e:db:7d:1c:3b: f6:2a:47:9f:71:4c:a8:05:5d:a1:c8:2d:cb:7b:de:20:0f:5b: 6f:22:29:49:c2:c5:5c:44:ba:13:c4:76:62:1e:28:5b:6e:ca: 78:0f:9f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7/pn+gaCIq1vWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTExNFoXDTI2MDExMTE1MTExNFowLzEtMCsGA1UEAxMk YzhiYjJiMWQtMDMyOC00NWRiLTgwNjYtMzc4N2I1OWFiYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGqv1V1ixYZRdt7IfUyl06b9ftjFrFjFsuC 8JBJJPkk7am29S9mset00CnDR52PqKks5SJar+fDhWM7H3JKvROqo0PzN/QmRjmo EPvFTksQoXWv8v4pNGhvcXKst1/XOwbVUHH5M1aR6M8Ug5xXzPpG4TUzFQKfBIS5 2Gh+FhuAUGYQLY0WqHRx0lKSa0FkjkaCTb7/6qg6ViLk+ZIPXsKLQUcMMgltEUoR GLPmHp0VeL7hj6MBesbdebdPQz2xhVrggP2ycMz75QtvVRDWJJWu025GtgXf5hRY rVATqG+IFdJGE3hNUtRz/Coo4K9tjjzz7PSd8O3NNRzotgcIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKQLGWRXTIBFJzyxaGqiYo3WANgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYmEyY2QzZGEtOTg2Yi0z NzhkLWEwYmUtMzkxYjg3ZGZiNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWc+pUT7nlOCeWNLXquuCFoGlbwxtR4jQqDRICnckZ4fw/bcNnP0qlC vfNr8PtJvyNh7hUdIsHJxJjUReMe4nSDsy8a1UwSe/M6pcERcg6XiexxrimxbKzQ mJx/yjs3OWn+O4LAN1aGs3uGdmUEEzsyUt/WDQ9LbXjJUCPlPIBsovU9cfZVdcz9 k2oichLjyrItHrMago1+mSDvRpzepytUXn9ODsvzV7BS7CNX49qGAUc6irAu1UL8 WGeXUFQp+xEeguKMqRk0dc9P8CPguDnuDTB+230cO/YqR59xTKgFXaHILct73iAP W28iKUnCxVxEuhPEdmIeKFtuyngPnzE= -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:33 2025 by rpki-client