$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa File: 0a3f164c-5f88-301b-adde-657863805f1c.roa (raw, json) Hash identifier: uQNHdMrfDeXvRSYnAr0F2IsmQ668gVwvf/lUtbzuMeg= Subject key identifier: D9:49:4E:8F:97:79:DB:AD:AE:05:CC:01:31:C5:EE:BB:98:C8:B6:CD Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584AE461184189AFBE99B9C5E040 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:18:41:89:af:be:99:b9:c5:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=e6ade860-e137-48f1-b251-12369234be87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:0d:6c:74:0a:69:84:e5:c0:49:a5:49:c4: 68:0e:ca:77:a0:d5:bf:8c:60:c8:d7:8c:15:eb:c3: 84:4d:9f:96:8c:ff:b3:bb:0b:1c:d9:23:55:56:8f: 60:4c:c2:a7:b0:7e:49:09:e3:cb:9c:8a:e9:b5:d4: a7:68:b2:42:66:b6:6f:96:d4:f3:09:0f:f6:dc:22: 14:4c:89:29:86:f2:0c:a0:b0:37:07:ad:d2:c6:3f: 2d:7a:9e:56:ed:b6:39:b4:0f:15:84:03:72:a5:63: 57:e7:fd:7d:97:85:5c:62:91:08:02:f7:44:15:13: f9:31:5d:54:f6:a6:3e:d6:fa:88:7d:55:b3:d5:76: a1:3b:1a:e7:a3:d5:39:14:8f:c8:2a:62:60:a1:a2: e1:52:2e:95:bd:4f:09:d1:bc:fc:26:d9:fa:53:b8: c1:f4:7d:85:87:fd:8f:d6:2d:ba:a5:b0:f4:e8:a4: 42:90:18:40:82:67:54:ca:ca:fd:60:1a:2f:20:33: ce:b8:9c:37:6a:9a:49:ce:9f:df:72:15:b6:4b:e5: dd:e2:db:29:75:49:b6:fd:18:e7:c5:22:26:1a:ca: fe:3f:3b:79:6f:24:cb:50:7c:2f:35:c2:ce:6a:21: a5:14:6f:14:5d:83:78:3f:87:ae:a1:70:41:bc:b2: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:4E:8F:97:79:DB:AD:AE:05:CC:01:31:C5:EE:BB:98:C8:B6:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/0a3f164c-5f88-301b-adde-657863805f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:6b:54:8c:0f:df:93:27:f1:55:fa:bd:31:3d:05:66:a7: 69:d8:18:aa:22:97:46:2b:6e:1b:ef:bc:79:fc:54:88:ed:1d: 17:7e:34:62:bd:40:0f:55:f1:9f:e2:66:f0:8a:ba:b0:9b:80: 03:1e:ee:6c:b7:af:36:c6:a1:6a:a4:da:7b:9c:44:4f:fc:02: 4c:a1:ec:42:d3:5b:fc:30:b9:6d:1d:38:e1:c5:11:12:7c:d5: f5:11:8d:b1:b0:80:7b:a3:a3:49:f7:b3:a6:5a:82:c1:a5:40: 43:56:cc:ea:91:cb:e6:0a:16:f3:7c:99:93:75:ac:90:23:14: 3d:6a:c8:ed:ce:9b:70:f4:2a:a2:3b:ed:04:8b:19:a5:88:af: 82:aa:b0:0a:b9:70:c7:bb:28:d8:12:35:80:72:af:c8:06:51: 57:de:4a:5f:a0:fc:99:e0:2d:21:2a:29:26:21:01:55:c4:52: 23:e2:ed:d7:54:58:27:6f:56:66:2f:e7:52:a5:8a:2a:9d:a7: ff:a7:15:45:71:d7:97:a5:4e:7d:e5:b7:e2:f5:0b:c7:d3:84: 1b:94:26:08:b2:89:53:d6:d2:d4:76:e7:02:8d:32:69:7d:c9: 32:d2:7b:cf:6e:99:2f:82:fc:4d:45:3c:7f:ad:f7:c2:c8:b7: de:9c:85:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRhBia++mbnF4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTZhZGU4NjAtZTEzNy00OGYxLWIyNTEtMTIzNjkyMzRiZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y0NbHQKaYTlwEmlScRoDsp3oNW/jGDI14wV 68OETZ+WjP+zuwsc2SNVVo9gTMKnsH5JCePLnIrptdSnaLJCZrZvltTzCQ/23CIU TIkphvIMoLA3B63Sxj8tep5W7bY5tA8VhANypWNX5/19l4VcYpEIAvdEFRP5MV1U 9qY+1vqIfVWz1XahOxrno9U5FI/IKmJgoaLhUi6VvU8J0bz8Jtn6U7jB9H2Fh/2P 1i26pbD06KRCkBhAgmdUysr9YBovIDPOuJw3appJzp/fchW2S+Xd4tspdUm2/Rjn xSImGsr+Pzt5byTLUHwvNcLOaiGlFG8UXYN4P4euoXBBvLIalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlJTo+XedutrgXMATHF7ruYyLbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMGEzZjE2NGMtNWY4OC0z MDFiLWFkZGUtNjU3ODYzODA1ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP1a1SMD9+TJ/FV+r0xPQVmp2nYGKoil0YrbhvvvHn8VIjtHRd+NGK9 QA9V8Z/iZvCKurCbgAMe7my3rzbGoWqk2nucRE/8Akyh7ELTW/wwuW0dOOHFERJ8 1fURjbGwgHujo0n3s6ZagsGlQENWzOqRy+YKFvN8mZN1rJAjFD1qyO3Om3D0KqI7 7QSLGaWIr4KqsAq5cMe7KNgSNYByr8gGUVfeSl+g/JngLSEqKSYhAVXEUiPi7ddU WCdvVmYv51Kliiqdp/+nFUVx15elTn3lt+L1C8fThBuUJgiyiVPW0tR25wKNMml9 yTLSe89umS+C/E1FPH+t98LIt96chcY= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:23 2025 by rpki-client