$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa File: 95037d37-41f0-3224-b20d-ed8abd26d1c5.roa (raw, json) Hash identifier: LPowPMQYXkaMTMtkXxTIBqqm+wTEguucUtzKS2w2yAI= Subject key identifier: 5A:EA:97:7E:12:37:08:0C:6E:AB:E0:84:20:96:FD:83:80:47:51:AE Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AE977E96F81F7D788C463EF40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa Signing time: Tue 19 Aug 2025 20:45:43 +0000 ROA not before: Tue 19 Aug 2025 20:45:43 +0000 ROA not after: Mon 17 Nov 2025 21:45:43 +0000 asID: 31898 IP address blocks: 144.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:e9:6f:81:f7:d7:88:c4:63:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 19 20:45:43 2025 GMT Not After : Nov 17 21:45:43 2025 GMT Subject: CN=a73de4aa-afa9-45d3-9b44-4e8d5949e097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:47:dd:8e:b5:d4:5a:34:6b:5a:40:0a:cf: 60:e7:3b:6c:aa:82:b5:8f:92:39:b7:95:8d:56:21: ec:87:6c:e0:73:46:5b:b8:70:7a:cf:9b:f1:b2:2c: 27:93:dc:b1:fe:6a:28:b3:c2:7a:2a:e4:1d:e6:d8: 49:7b:63:ff:e2:45:61:41:42:76:0a:01:25:bd:84: 72:40:ba:19:f6:ac:7e:42:d3:99:2a:14:38:ed:15: dc:74:d9:5f:af:14:16:70:a6:80:d0:65:b0:8c:a1: 25:c3:00:56:e7:e1:8d:d7:df:a7:b8:a6:6a:d8:14: 8f:f3:39:ed:e9:d1:aa:b9:b0:a9:0a:5c:90:29:89: a9:fd:1b:b6:ac:8e:dd:58:aa:27:07:04:82:4a:f6: e8:3c:38:77:80:c5:9c:b7:a9:3a:73:c5:f5:bf:6d: 15:04:24:10:84:9b:61:d2:41:83:ab:b0:d7:41:0e: 11:69:61:a3:1d:79:12:6c:8c:49:7c:b9:40:fe:29: e0:08:c2:2a:ec:4c:40:d2:03:9c:5e:a7:4d:bd:0b: 62:79:59:ea:c3:10:9f:c1:f0:77:ec:2f:b8:4b:3d: 8a:3c:a3:dd:d6:3d:db:fb:5e:39:bf:7f:d4:bd:87: e9:05:f4:8f:02:01:63:ba:77:ad:db:e2:d7:8b:0d: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:97:7E:12:37:08:0C:6E:AB:E0:84:20:96:FD:83:80:47:51:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ba:0f:28:80:b4:53:fb:cc:a5:f2:95:44:e7:6a:6c:db:3c: d8:b9:f0:af:46:0a:ed:00:17:68:68:b3:e0:f0:03:f6:ba:45: 8f:c9:88:35:d7:58:8b:23:82:57:79:8f:88:8d:19:ed:49:4d: 9e:de:4d:aa:1e:2c:5f:9f:5d:07:52:e5:4c:30:ea:09:ed:8a: 1a:e3:95:ef:cb:81:f5:01:f9:98:f5:52:31:6a:e1:24:ab:c4: 21:46:64:eb:f6:a0:32:ba:72:f4:dc:ba:74:31:15:eb:e0:04: 4b:e7:59:8f:6a:8e:9a:39:ce:fa:8e:b2:5b:52:f5:80:70:37: 52:ea:77:1f:58:75:29:22:1b:a2:7c:8b:8d:64:d9:46:39:57: 71:66:61:fb:d9:95:79:81:cd:c1:97:e0:82:d3:d6:fb:76:8e: 01:77:53:75:cc:fd:c8:73:2c:1c:03:9d:22:e5:2f:54:09:72: 62:e4:06:65:91:10:c1:c2:59:4b:6c:18:29:81:a2:27:99:1d: 6d:09:2f:d8:30:21:ff:8e:6a:28:6e:d4:b4:e3:e7:2d:b7:ab: 82:b7:31:64:39:2e:c4:83:5b:bf:67:c2:e6:ec:41:9e:50:55: 5e:34:ff:e9:90:dd:a0:2a:a2:7e:eb:b9:37:8d:45:60:9f:91: fb:37:2f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpd+lvgffXiMRj70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgxOTIwNDU0M1oXDTI1MTExNzIxNDU0M1owLzEtMCsGA1UEAxMk YTczZGU0YWEtYWZhOS00NWQzLTliNDQtNGU4ZDU5NDllMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5RH3Y611Fo0a1pACs9g5ztsqoK1j5I5t5WN ViHsh2zgc0ZbuHB6z5vxsiwnk9yx/moos8J6KuQd5thJe2P/4kVhQUJ2CgElvYRy QLoZ9qx+QtOZKhQ47RXcdNlfrxQWcKaA0GWwjKElwwBW5+GN19+nuKZq2BSP8znt 6dGqubCpClyQKYmp/Ru2rI7dWKonBwSCSvboPDh3gMWct6k6c8X1v20VBCQQhJth 0kGDq7DXQQ4RaWGjHXkSbIxJfLlA/ingCMIq7ExA0gOcXqdNvQtieVnqwxCfwfB3 7C+4Sz2KPKPd1j3b+145v3/UvYfpBfSPAgFjunet2+LXiw3cgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrql34SNwgMbqvghCCW/YOAR1GuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTUwMzdkMzctNDFmMC0z MjI0LWIyMGQtZWQ4YWJkMjZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG6DyiAtFP7zKXylUTnamzbPNi58K9GCu0AF2hos+DwA/a6RY/JiDXX WIsjgld5j4iNGe1JTZ7eTaoeLF+fXQdS5Uww6gntihrjle/LgfUB+Zj1UjFq4SSr xCFGZOv2oDK6cvTcunQxFevgBEvnWY9qjpo5zvqOsltS9YBwN1Lqdx9YdSkiG6J8 i41k2UY5V3FmYfvZlXmBzcGX4ILT1vt2jgF3U3XM/chzLBwDnSLlL1QJcmLkBmWR EMHCWUtsGCmBoieZHW0JL9gwIf+Oaihu1LTj5y23q4K3MWQ5LsSDW79nwubsQZ5Q VV40/+mQ3aAqon7ruTeNRWCfkfs3L0s= -----END CERTIFICATE-----Generated at Wed Aug 20 08:04:43 2025 by rpki-client