$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa File: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (raw, json) Hash identifier: v9++3xdNs57HL24qveWpqoBqEGZr6WeV+gqMI6kO1uc= Subject key identifier: CA:8D:5B:ED:08:D3:4C:45:7C:10:F4:3F:ED:3E:16:39:84:A5:87:22 Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584B0CDC04E6D398951816FB9400 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 19905 IP address blocks: 144.29.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:04:e6:d3:98:95:18:16:fb:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=1e5d6236-bdd8-48b7-93fb-8a9715cdd659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:8a:89:a4:ef:18:93:66:b1:ea:c1:a9:f1: 19:80:37:52:2a:01:d3:ce:bf:5a:6d:4a:ea:13:da: 00:67:ae:96:f8:e1:b0:23:38:67:de:dd:d3:68:56: cc:9f:92:3c:9e:a9:e5:ed:0c:f4:07:f4:0e:d6:38: fc:46:e5:62:4a:02:21:29:ec:38:a9:68:28:5e:68: 57:ad:1e:f7:a5:0b:6a:0b:d5:86:ee:8c:ee:e1:06: bb:d3:e9:e6:6f:94:7a:76:ff:80:a7:77:5a:f3:74: 07:9d:34:9a:36:b6:0b:5c:69:bc:d4:33:bc:87:86: 67:b0:cf:94:b7:4c:2c:40:3f:50:a1:09:cf:7f:f0: f6:1e:d6:00:4f:74:8e:c5:c8:e2:17:b0:12:96:bd: 91:4f:3c:8d:a0:23:04:7f:db:01:37:d3:93:8c:c5: e3:99:9d:b1:99:14:ea:da:a3:2d:c2:ce:6a:bb:99: 97:91:b9:a0:d8:e0:3d:ec:f6:5f:bc:58:4e:66:2a: 1d:b0:8c:4d:90:e2:42:69:6d:45:bb:05:d1:3a:69: e1:ce:ef:89:f3:11:d3:41:d0:6c:aa:0d:7b:00:b2: 82:ab:ec:c2:51:21:c5:f4:55:aa:39:b2:05:19:0a: d5:9c:e6:e2:28:85:1e:11:f3:17:80:a6:2f:0f:03: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:5B:ED:08:D3:4C:45:7C:10:F4:3F:ED:3E:16:39:84:A5:87:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:47:57:09:f6:03:2a:d7:d6:ca:fe:d5:f2:b7:63:85:e4:50: 50:e8:e1:70:d0:61:1d:a6:e5:b8:fe:8a:f0:7b:8c:8f:27:2b: 50:bf:26:4a:0b:ee:76:6b:17:93:cc:74:cd:0b:87:8a:9c:05: cb:97:f9:45:fe:57:fc:cc:81:33:80:ff:86:70:e5:b1:57:b1: 35:03:a8:92:91:80:6e:c3:68:3c:6c:e7:5c:44:56:32:ed:dc: 18:10:44:1d:37:ce:9d:66:64:37:41:a2:a9:e1:14:81:ab:af: f7:e7:ab:5b:42:b2:09:b8:b4:0a:f8:4e:ec:1d:b1:6b:2b:11: 38:de:47:89:64:c4:11:db:fe:e8:fb:e5:63:11:8e:aa:f5:48: 85:25:9d:0a:cc:67:64:8e:b0:ae:4e:0a:74:b1:6f:93:5c:0a: ca:a5:36:ea:70:70:25:84:d5:3e:71:7b:97:f3:c6:4e:c9:80: 24:10:2c:48:5d:7a:5e:d5:50:e9:f6:73:39:b1:44:79:98:82: 1b:cd:07:c3:bc:c1:ff:71:ad:25:fb:58:0c:fe:74:d1:a1:8d: c8:52:5c:1f:b9:e0:1c:b2:26:7e:ae:57:0e:78:31:f6:d7:dd: ee:45:31:1f:d6:fc:45:1c:db:7a:fe:a6:39:93:af:6f:8b:3c: a2:7b:e1:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsM3ATm05iVGBb7lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MWU1ZDYyMzYtYmRkOC00OGI3LTkzZmItOGE5NzE1Y2RkNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtyKiaTvGJNmserBqfEZgDdSKgHTzr9abUrq E9oAZ66W+OGwIzhn3t3TaFbMn5I8nqnl7Qz0B/QO1jj8RuViSgIhKew4qWgoXmhX rR73pQtqC9WG7ozu4Qa70+nmb5R6dv+Ap3da83QHnTSaNrYLXGm81DO8h4ZnsM+U t0wsQD9QoQnPf/D2HtYAT3SOxcjiF7ASlr2RTzyNoCMEf9sBN9OTjMXjmZ2xmRTq 2qMtws5qu5mXkbmg2OA97PZfvFhOZiodsIxNkOJCaW1FuwXROmnhzu+J8xHTQdBs qg17ALKCq+zCUSHF9FWqObIFGQrVnObiKIUeEfMXgKYvDwN8xQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMqNW+0I00xFfBD0P+0+FjmEpYciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvMTE0NDVhNDctNWZmZi0z N2I1LThhOWItOGQ3MDNhZWEzZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATUdXCfYDKtfWyv7V8rdjheRQUOjhcNBhHabluP6K8HuMjycrUL8mSgvu dmsXk8x0zQuHipwFy5f5Rf5X/MyBM4D/hnDlsVexNQOokpGAbsNoPGznXERWMu3c GBBEHTfOnWZkN0GiqeEUgauv9+erW0KyCbi0CvhO7B2xaysRON5HiWTEEdv+6Pvl YxGOqvVIhSWdCsxnZI6wrk4KdLFvk1wKyqU26nBwJYTVPnF7l/PGTsmAJBAsSF16 XtVQ6fZzObFEeZiCG80Hw7zB/3GtJftYDP500aGNyFJcH7ngHLImfq5XDngx9tfd 7kUxH9b8RRzbev6mOZOvb4s8onvheA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:13 2025 by rpki-client