$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa File: a900bf7d-2593-31bf-a486-55b49afbdece.roa (raw, json) Hash identifier: 3bp9OUrUDl10pAEryVR+pgDy3ovQbY5vCNj8GIPdWQo= Subject key identifier: 8E:85:3D:BD:D0:D1:96:7E:48:00:57:9C:81:CC:FE:9E:C1:87:60:6A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2A2C54CE6ED33E387201FF80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 6830 IP address blocks: 144.225.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:54:ce:6e:d3:3e:38:72:01:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=2943d552-0489-4e13-8b2b-b2012a6544a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:8c:83:12:a6:25:94:12:c3:95:73:62:6a: 8e:67:e5:5f:df:c2:d7:f9:95:53:f2:e3:02:fc:bd: eb:94:76:d7:d5:6c:9a:ca:13:5d:a9:a4:6c:c1:b8: 1f:4f:a9:1d:26:7e:44:54:9c:44:bb:44:17:b7:5c: 84:72:05:2a:a8:ee:2d:56:24:22:8e:0e:96:b9:f1: 2b:5b:b7:7e:e5:44:a4:12:20:e6:1a:4d:19:76:b6: 02:4c:df:fa:a2:47:27:0f:22:e9:34:24:69:d7:e3: b9:99:61:5a:7b:10:18:ef:c7:7a:06:53:e9:1e:58: ec:a3:4c:06:1a:ce:15:5b:64:75:b3:a9:03:26:25: fc:7e:08:55:b0:5d:d7:b4:c3:53:dd:dd:48:50:d8: 5e:58:3b:85:08:a1:3f:c3:1d:e5:2f:6b:6a:be:a3: d2:8c:56:8d:47:d9:12:21:6a:18:a8:d2:7e:c3:ba: 8e:5d:54:b7:59:75:f1:89:f9:97:5a:ae:03:54:60: f1:23:60:80:1c:a9:c7:98:ff:0d:44:e6:ef:48:cb: c3:2e:ae:a3:3a:fe:8f:3e:46:d1:b3:a5:93:e5:39: 51:ae:e6:0f:51:75:75:3d:d3:32:54:3d:4b:44:85: b9:8f:75:81:70:30:0b:ed:ee:b5:d4:22:6d:fa:7e: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:85:3D:BD:D0:D1:96:7E:48:00:57:9C:81:CC:FE:9E:C1:87:60:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a900bf7d-2593-31bf-a486-55b49afbdece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cc:32:9e:5d:9f:2e:77:4f:6d:fd:1e:c4:13:85:19:5b:fb: db:99:65:d9:4e:37:c2:1e:0f:58:35:dc:b1:17:4c:e6:d8:87: 84:a1:61:04:db:d0:f4:d3:bc:88:fa:99:54:37:0d:4b:20:48: 7e:9b:21:61:0d:67:c3:4d:48:42:4f:d6:6c:a9:90:33:00:94: 94:bd:ab:fa:a5:d1:08:9f:e8:4c:4c:62:e8:bc:90:85:cf:9a: 13:27:54:2b:5b:38:74:f2:f1:e1:0b:13:ef:f8:f9:eb:a1:1c: 8d:80:5f:5c:f7:25:57:18:cd:1a:b3:29:d4:23:52:ba:af:ac: 6e:96:75:fe:0d:7f:a0:9d:3d:16:56:4e:7a:68:a0:29:08:a2: 15:07:a9:c7:e4:ed:47:ba:22:d8:8f:e3:76:1c:43:6f:75:5b: c7:6c:a6:88:fc:21:fc:a2:27:41:22:da:7f:9d:e6:e1:2d:94: 25:c9:80:34:b7:3a:d1:64:95:4e:36:1e:9d:36:2d:4d:a0:ef: 89:67:8d:dd:90:4c:34:4f:93:ce:e4:9d:e9:d2:2b:18:87:83: 5b:58:93:be:a0:3b:0f:46:73:bc:48:99:be:98:a3:a8:72:84: 41:22:af:4e:60:17:22:47:5a:b4:ac:a4:aa:83:da:47:b1:d1: f2:b4:b6:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLFTObtM+OHIB/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Mjk0M2Q1NTItMDQ4OS00ZTEzLThiMmItYjIwMTJhNjU0NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu+MgxKmJZQSw5VzYmqOZ+Vf38LX+ZVT8uMC /L3rlHbX1WyayhNdqaRswbgfT6kdJn5EVJxEu0QXt1yEcgUqqO4tViQijg6WufEr W7d+5USkEiDmGk0ZdrYCTN/6okcnDyLpNCRp1+O5mWFaexAY78d6BlPpHljso0wG Gs4VW2R1s6kDJiX8fghVsF3XtMNT3d1IUNheWDuFCKE/wx3lL2tqvqPSjFaNR9kS IWoYqNJ+w7qOXVS3WXXxifmXWq4DVGDxI2CAHKnHmP8NRObvSMvDLq6jOv6PPkbR s6WT5TlRruYPUXV1PdMyVD1LRIW5j3WBcDAL7e611CJt+n7ktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6FPb3Q0ZZ+SABXnIHM/p7Bh2BqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTkwMGJmN2QtMjU5My0z MWJmLWE0ODYtNTViNDlhZmJkZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3MMp5dny53T239HsQThRlb+9uZZdlON8IeD1g13LEXTObYh4ShYQTb 0PTTvIj6mVQ3DUsgSH6bIWENZ8NNSEJP1mypkDMAlJS9q/ql0Qif6ExMYui8kIXP mhMnVCtbOHTy8eELE+/4+euhHI2AX1z3JVcYzRqzKdQjUrqvrG6Wdf4Nf6CdPRZW TnpooCkIohUHqcfk7Ue6ItiP43YcQ291W8dspoj8IfyiJ0Ei2n+d5uEtlCXJgDS3 OtFklU42Hp02LU2g74lnjd2QTDRPk87knenSKxiHg1tYk76gOw9Gc7xImb6Yo6hy hEEir05gFyJHWrSspKqD2kex0fK0ttg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:17 2025 by rpki-client