$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa File: cc509968-63d9-33f6-b60c-2664e0511e7f.roa (raw, json) Hash identifier: q3mAntdM4i6DFTghnOwN3+xh3dWGFTp8QAM4YaLCT9c= Subject key identifier: BA:86:07:32:54:0E:30:4F:43:71:C4:AD:35:0C:D5:2B:75:65:F3:EA Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B84E7831560B1D363E0165540 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 144.81.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:83:15:60:b1:d3:63:e0:16:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a29f635a-5c14-46d3-ab9d-bc84e38b6ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:fb:67:31:d5:0a:08:a5:c6:dd:4a:85:2b: 62:16:26:27:c3:22:42:20:17:48:0c:1b:d0:1d:bc: 23:91:66:9d:89:5f:75:3c:a2:6e:d8:2c:f1:22:57: 41:a4:5a:7e:0c:99:a7:84:16:c9:19:e6:5f:1b:bd: 9f:0e:87:a3:cc:f7:fa:d3:6b:09:d3:8a:4a:ea:6b: 0d:be:5d:6c:45:d4:87:de:40:b5:50:69:26:12:ba: 89:52:bd:e2:ea:62:f8:35:7f:f4:1e:52:52:72:59: 69:21:77:5f:70:81:c6:11:ad:0a:59:1b:fa:fd:0e: ef:81:99:c8:9e:c4:a1:58:65:b6:b6:78:57:0f:90: cc:9d:73:ac:96:56:86:b0:cf:d8:95:ed:76:2f:f9: 57:15:43:c1:1e:e6:87:01:9a:79:28:27:e5:97:11: 0b:1f:6a:08:95:34:b0:5d:b7:fd:87:71:cf:84:c1: 75:7b:74:c1:d7:a6:4e:3d:16:ba:13:c9:82:e6:5e: 13:97:71:cb:1f:95:49:9a:b1:e0:36:05:a0:e7:29: 0c:72:d7:0c:63:64:d5:b6:d5:ed:90:24:7b:f7:f9: 71:8f:9c:cc:3f:ac:84:a9:78:ca:0f:e3:1a:db:6b: cd:64:9d:ae:51:4f:c2:94:03:a6:54:c9:0a:3b:77: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:07:32:54:0E:30:4F:43:71:C4:AD:35:0C:D5:2B:75:65:F3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/cc509968-63d9-33f6-b60c-2664e0511e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e3:87:5e:da:92:ad:46:8f:00:e7:e6:af:85:15:63:02:16: e6:dd:a3:e6:81:65:30:a4:5e:3a:77:39:b5:40:86:e9:27:b4: 03:73:b2:1f:02:db:79:8e:15:78:48:60:e8:29:6d:e6:43:b3: 58:5f:22:fc:37:55:4c:4c:4f:1d:15:f1:fe:fb:d8:f1:d3:2c: e7:12:70:4b:17:c3:95:a5:4e:c7:3c:24:bf:6a:91:ee:7b:22: fe:be:2b:5f:aa:c3:d0:ca:f5:82:be:9a:5a:45:00:d9:48:bb: 56:56:e8:53:2b:b9:b7:4d:0f:b7:1d:c6:71:0e:4e:ee:ff:7e: d3:8e:cc:9f:9f:21:2f:41:cb:de:52:74:e2:8a:eb:5d:19:df: 0e:54:3a:d3:21:a3:e1:3e:83:93:b7:b5:db:2c:cf:59:a2:c0: df:ff:3c:30:3f:1e:c7:6b:a3:de:02:c0:36:a1:46:78:c9:81: 26:55:55:cc:d7:b1:37:93:db:b1:94:43:02:15:62:ed:cb:49: f9:82:e8:b0:5f:52:17:76:99:66:19:2c:89:0c:a9:df:97:53: 6d:0e:35:e7:74:0b:51:4d:06:c8:db:68:db:18:ca:62:ad:d9: 8a:52:e7:42:13:b8:42:d7:b3:2c:41:f9:cb:d9:d0:53:f0:93: 05:5d:7b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54MVYLHTY+AWVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTI5ZjYzNWEtNWMxNC00NmQzLWFiOWQtYmM4NGUzOGI2Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk937ZzHVCgilxt1KhStiFiYnwyJCIBdIDBvQ HbwjkWadiV91PKJu2CzxIldBpFp+DJmnhBbJGeZfG72fDoejzPf602sJ04pK6msN vl1sRdSH3kC1UGkmErqJUr3i6mL4NX/0HlJScllpIXdfcIHGEa0KWRv6/Q7vgZnI nsShWGW2tnhXD5DMnXOsllaGsM/Yle12L/lXFUPBHuaHAZp5KCfllxELH2oIlTSw Xbf9h3HPhMF1e3TB16ZOPRa6E8mC5l4Tl3HLH5VJmrHgNgWg5ykMctcMY2TVttXt kCR79/lxj5zMP6yEqXjKD+Ma22vNZJ2uUU/ClAOmVMkKO3dWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqGBzJUDjBPQ3HErTUM1St1ZfPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvY2M1MDk5NjgtNjNkOS0z M2Y2LWI2MGMtMjY2NGUwNTExZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHjh17akq1GjwDn5q+FFWMCFubdo+aBZTCkXjp3ObVAhukntANzsh8C 23mOFXhIYOgpbeZDs1hfIvw3VUxMTx0V8f772PHTLOcScEsXw5WlTsc8JL9qke57 Iv6+K1+qw9DK9YK+mlpFANlIu1ZW6FMrubdND7cdxnEOTu7/ftOOzJ+fIS9By95S dOKK610Z3w5UOtMho+E+g5O3tdssz1miwN//PDA/Hsdro94CwDahRnjJgSZVVczX sTeT27GUQwIVYu3LSfmC6LBfUhd2mWYZLIkMqd+XU20ONed0C1FNBsjbaNsYymKt 2YpS50ITuELXsyxB+cvZ0FPwkwVde9Q= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:00 2025 by rpki-client