$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa File: 5bf45f2d-7e44-30b1-a788-cda2637a8626.roa (raw, json) Hash identifier: 3fTWI+u062x4tzpBfm90SeKMp/ffee0F8D9+3AV4T6U= Subject key identifier: AA:48:B8:C1:57:E0:85:AF:E8:7C:18:F8:2F:74:2B:C1:A9:46:9F:E0 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FA29583FCD54BA7AAD220 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa Signing time: Mon 13 Oct 2025 14:11:00 +0000 ROA not before: Mon 13 Oct 2025 14:11:00 +0000 ROA not after: Sun 11 Jan 2026 15:11:00 +0000 asID: 21433 IP address blocks: 144.36.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:a2:95:83:fc:d5:4b:a7:aa:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:00 2025 GMT Not After : Jan 11 15:11:00 2026 GMT Subject: CN=bea782cc-4867-49e6-a2ac-285709a669ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:ea:59:31:32:01:7b:92:c9:57:7a:48:8d: 61:49:27:35:f2:e9:c0:6f:ee:73:22:37:c3:b5:06: ac:23:a0:0e:2c:b1:a5:e6:c2:7b:53:6d:19:aa:27: 17:4f:d3:51:3d:98:02:8d:24:bf:e4:3b:12:6c:2d: 72:ae:0e:b7:b3:af:09:36:8e:c5:b5:ac:e6:16:fd: be:84:ad:df:0e:d7:67:18:8f:d0:ad:bd:92:67:65: fc:a3:82:ce:d9:ac:43:92:9d:5d:4c:71:e7:e1:15: 57:74:84:b6:c3:ed:0c:40:a1:50:5f:26:1b:58:80: 87:16:a8:93:13:82:a6:00:39:d3:e7:c7:94:76:88: 8a:45:64:1c:43:3c:fb:fe:68:b2:14:d5:e0:b1:40: 5e:bf:d2:0a:0a:31:a3:52:46:f2:b6:32:7a:2e:b0: 91:3d:fb:a4:c3:bd:0f:94:c1:9a:ea:09:a4:9d:b6: 3f:96:23:cd:35:02:79:67:3a:30:81:18:29:eb:ca: 4c:4c:13:72:8a:5d:40:8c:6f:8a:d7:45:c8:30:c8: 26:57:47:98:57:b3:5d:51:4b:cc:3d:a8:03:19:cd: b3:75:0a:c4:da:16:09:bb:86:95:e4:68:54:42:86: a6:d3:a8:98:3b:67:34:65:7b:bd:95:99:a9:d7:1e: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:48:B8:C1:57:E0:85:AF:E8:7C:18:F8:2F:74:2B:C1:A9:46:9F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1a:c2:23:97:05:02:80:16:86:2e:a3:a0:8c:65:9b:d0:57: 16:92:59:d3:31:a6:16:1b:5a:86:25:ff:59:e7:82:60:cc:9b: 1e:7c:2c:ce:45:c7:85:4c:fb:cf:0a:7b:08:38:10:1c:54:8e: 7d:3f:f2:17:27:da:ab:0d:fe:57:e6:51:78:1c:a5:88:dc:f9: 3e:35:d5:61:78:bc:e9:90:d4:9e:c4:23:3a:fb:4c:28:da:1a: 5c:13:5b:a6:b4:5d:87:24:ec:40:a3:f2:e4:15:bd:24:b6:d9: 5d:01:d2:b5:02:c5:d9:22:bb:e4:b8:29:c8:95:bb:ea:2a:a2: bd:d0:bf:fd:e5:b3:95:39:a8:fc:e5:1b:a0:ad:db:07:4f:31: 11:f2:bb:4c:99:ad:35:17:f1:bf:e2:7c:73:38:c3:a8:db:df: e0:56:6c:18:36:b2:45:e2:34:df:69:bf:d8:7d:5e:62:17:e1: 37:ff:bb:dd:db:39:d7:b6:6c:78:1c:05:81:da:4f:f8:70:08: 36:ab:d4:ed:02:35:c1:b6:cf:e9:3e:e0:d9:d5:aa:30:55:12: 5f:68:f9:c6:01:df:52:89:48:d9:ea:25:0f:7f:9e:07:c6:b3: 92:b9:b5:0c:92:03:9e:5c:cb:50:11:68:b1:08:94:de:20:20: 87:77:ec:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP6KVg/zVS6eq0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTEwMFoXDTI2MDExMTE1MTEwMFowLzEtMCsGA1UEAxMk YmVhNzgyY2MtNDg2Ny00OWU2LWEyYWMtMjg1NzA5YTY2OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxETqWTEyAXuSyVd6SI1hSSc18unAb+5zIjfD tQasI6AOLLGl5sJ7U20ZqicXT9NRPZgCjSS/5DsSbC1yrg63s68JNo7FtazmFv2+ hK3fDtdnGI/Qrb2SZ2X8o4LO2axDkp1dTHHn4RVXdIS2w+0MQKFQXyYbWICHFqiT E4KmADnT58eUdoiKRWQcQzz7/miyFNXgsUBev9IKCjGjUkbytjJ6LrCRPfukw70P lMGa6gmknbY/liPNNQJ5ZzowgRgp68pMTBNyil1AjG+K10XIMMgmV0eYV7NdUUvM PagDGc2zdQrE2hYJu4aV5GhUQoam06iYO2c0ZXu9lZmp1x78bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpIuMFX4IWv6HwY+C90K8GpRp/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNWJmNDVmMmQtN2U0NC0z MGIxLWE3ODgtY2RhMjYzN2E4NjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4awiOXBQKAFoYuo6CMZZvQVxaSWdMxphYbWoYl/1nngmDMmx58LM5F x4VM+88Kewg4EBxUjn0/8hcn2qsN/lfmUXgcpYjc+T411WF4vOmQ1J7EIzr7TCja GlwTW6a0XYck7ECj8uQVvSS22V0B0rUCxdkiu+S4KciVu+oqor3Qv/3ls5U5qPzl G6Ct2wdPMRHyu0yZrTUX8b/ifHM4w6jb3+BWbBg2skXiNN9pv9h9XmIX4Tf/u93b Ode2bHgcBYHaT/hwCDar1O0CNcG2z+k+4NnVqjBVEl9o+cYB31KJSNnqJQ9/ngfG s5K5tQySA55cy1ARaLEIlN4gIId37OM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:53 2025 by rpki-client