$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa26a714-6788-3fa2-b2da-dc22e7847bc1.roa File: aa26a714-6788-3fa2-b2da-dc22e7847bc1.roa (raw, json) Hash identifier: aLC5amkWOQPYqIDvZKYjjQG3dHNlAu7v8Kw6w1hqn3g= Subject key identifier: 16:B9:C7:1E:B4:44:4A:D2:FC:19:89:6E:91:19:D8:2E:B7:20:A3:5D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B196C1A4A3D4DDD9EB89EC960 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa26a714-6788-3fa2-b2da-dc22e7847bc1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 54600 IP address blocks: 144.225.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:1a:4a:3d:4d:dd:9e:b8:9e:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=8d4996cf-617b-4df5-ad56-c1efb0eb68e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:8b:fd:4b:7c:dd:27:41:b7:9a:b8:4d:0b: b8:be:e1:c8:1c:2d:79:59:20:a9:7c:35:bc:b6:68: 8f:3e:b6:6a:b3:38:46:e0:b0:f4:dd:d4:d1:73:41: c5:6e:93:ed:5e:85:11:ec:b6:4b:78:6b:74:fa:ac: 7b:9c:d3:dd:8e:e8:23:8e:b3:f2:67:10:ee:a1:f7: 12:cd:75:b9:89:ea:17:2f:77:76:58:f6:88:99:a5: 9d:2d:aa:84:f3:c3:16:92:d6:2d:0b:59:df:5f:1d: fa:42:aa:e6:97:b8:d2:e9:2e:28:3b:cf:15:eb:e8: 93:82:23:ac:17:53:0d:96:1d:1f:36:b4:14:24:92: ce:69:64:d5:5d:7c:6e:cd:21:e6:08:8e:0c:3b:aa: 20:85:f8:60:1b:57:4f:92:fa:84:6f:d0:0a:ca:0f: 76:6d:5d:5b:58:c1:b9:f8:f6:97:9e:bc:7b:f7:3e: 72:a2:e6:06:34:82:ce:3f:9a:c2:eb:25:a7:fb:84: 51:3a:95:02:ed:8f:3e:fa:27:95:7b:09:7b:83:ab: ec:96:e6:03:ff:83:18:b9:6d:92:90:a7:09:59:6b: b7:c1:a4:c3:a3:49:8a:99:e9:de:81:bc:a2:98:61: 41:d6:f3:ce:15:d8:bd:e0:39:7c:e2:4c:ce:66:f4: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B9:C7:1E:B4:44:4A:D2:FC:19:89:6E:91:19:D8:2E:B7:20:A3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa26a714-6788-3fa2-b2da-dc22e7847bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0d:8f:f3:d6:ad:c6:ea:f6:07:e1:cf:25:fa:5e:60:96:24: 0f:d3:a2:54:07:0f:a5:a5:c8:a6:f9:30:b7:a2:7b:86:ba:d8: e3:63:d4:c3:d4:85:17:e2:94:bf:a6:00:b6:21:ca:55:f9:15: 4a:bc:1b:9f:ad:87:ef:94:1a:73:3e:0e:9e:58:a1:af:3c:3d: 10:b1:79:2e:8c:44:fa:d4:31:5b:fe:60:93:72:13:15:9c:ff: 9d:63:ad:43:f9:b3:53:25:c4:10:ee:ed:a7:aa:99:59:4b:01: f4:5d:9d:02:f6:bc:47:ad:e5:d7:c8:aa:7d:10:b4:5e:0c:5c: 0e:2c:c9:92:a0:64:e9:c8:27:7b:ca:dd:81:a8:4d:cc:90:a9: 6e:e5:20:05:3a:e6:43:b9:ec:40:9c:be:97:e9:ff:9c:e6:bb: 13:b5:52:ed:d9:ee:89:d6:cb:a4:72:26:11:19:b2:76:75:cc: 8d:9a:72:ac:55:79:ef:9d:34:43:7c:3a:79:ba:97:e1:82:b1: b8:e7:c7:b5:1a:f0:05:eb:75:4e:64:63:6a:80:1f:07:7b:58: 3a:a5:34:1d:95:08:b5:81:51:25:dc:65:03:c8:76:4a:17:6d: a0:8e:e2:a3:5f:0e:e0:5f:5c:7a:b7:7d:5f:02:1d:bc:75:2b: fa:99:4f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBpKPU3dnrieyWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk OGQ0OTk2Y2YtNjE3Yi00ZGY1LWFkNTYtYzFlZmIwZWI2OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GeL/Ut83SdBt5q4TQu4vuHIHC15WSCpfDW8 tmiPPrZqszhG4LD03dTRc0HFbpPtXoUR7LZLeGt0+qx7nNPdjugjjrPyZxDuofcS zXW5ieoXL3d2WPaImaWdLaqE88MWktYtC1nfXx36Qqrml7jS6S4oO88V6+iTgiOs F1MNlh0fNrQUJJLOaWTVXXxuzSHmCI4MO6oghfhgG1dPkvqEb9AKyg92bV1bWMG5 +PaXnrx79z5youYGNILOP5rC6yWn+4RROpUC7Y8++ieVewl7g6vsluYD/4MYuW2S kKcJWWu3waTDo0mKmenegbyimGFB1vPOFdi94Dl84kzOZvQB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa5xx60RErS/BmJbpEZ2C63IKNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWEyNmE3MTQtNjc4OC0z ZmEyLWIyZGEtZGMyMmU3ODQ3YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgNj/PWrcbq9gfhzyX6XmCWJA/TolQHD6WlyKb5MLeie4a62ONj1MPU hRfilL+mALYhylX5FUq8G5+th++UGnM+Dp5Yoa88PRCxeS6MRPrUMVv+YJNyExWc /51jrUP5s1MlxBDu7aeqmVlLAfRdnQL2vEet5dfIqn0QtF4MXA4syZKgZOnIJ3vK 3YGoTcyQqW7lIAU65kO57ECcvpfp/5zmuxO1Uu3Z7onWy6RyJhEZsnZ1zI2acqxV ee+dNEN8Onm6l+GCsbjnx7Ua8AXrdU5kY2qAHwd7WDqlNB2VCLWBUSXcZQPIdkoX baCO4qNfDuBfXHq3fV8CHbx1K/qZT9E= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:20 2025 by rpki-client