$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/57869440-455a-3f4a-91ae-4e291823c3fa.roa File: 57869440-455a-3f4a-91ae-4e291823c3fa.roa (raw, json) Hash identifier: wkJzmzHeBdCpCl8amlcDJDI2Vi3Tq2hCqW2mLTaw35w= Subject key identifier: 97:60:C0:58:95:19:ED:2E:37:5A:71:3E:BC:AB:1A:2F:6C:18:A7:9C Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584BB727BC4754EDA99E9B1C10E0 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/57869440-455a-3f4a-91ae-4e291823c3fa.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 401838 IP address blocks: 144.208.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:47:54:ed:a9:9e:9b:1c:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=a04ae04e-66af-4b5c-ab70-50a6dce91c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:7e:96:ce:47:e7:61:98:07:ce:cf:55:87: e3:bf:26:7d:a9:ac:a0:cc:7a:db:60:e0:00:62:1c: 61:a1:6b:ae:be:05:e5:7a:3b:85:02:09:67:3d:a0: 8c:7e:10:da:64:ae:2b:e2:0f:8b:4f:c0:58:e3:0e: 16:15:80:0b:ff:f0:73:29:31:79:4d:e1:1b:4e:5f: ab:2c:a4:85:a1:11:d9:96:ed:c8:12:9c:af:36:49: bb:6a:bd:f7:3d:9e:8f:8d:81:60:77:55:98:18:f7: a0:f6:d3:4d:8f:57:c0:96:54:86:9f:03:9b:c2:1a: 69:52:e4:ee:01:56:83:20:c6:84:dd:60:0a:9e:65: eb:83:0d:72:34:9c:a5:38:a8:4b:68:d4:19:b3:fe: 13:05:12:5d:8e:24:e4:a4:5d:2c:eb:be:94:74:25: 14:6e:f3:ee:fd:a7:d9:85:62:86:f0:2d:07:20:4e: 98:13:14:19:92:2d:e3:de:bd:b0:0e:b8:2a:54:ca: 17:da:30:1b:5e:86:99:fe:a9:62:2d:e3:c7:c6:ae: 52:74:ec:4f:8a:49:2e:6c:88:6b:16:f3:97:43:56: df:c0:0e:1f:c3:db:f0:99:8a:d2:66:7b:79:fa:cb: 7e:d0:a5:06:3f:c5:c2:1f:5a:ac:56:ca:68:a3:0d: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:C0:58:95:19:ED:2E:37:5A:71:3E:BC:AB:1A:2F:6C:18:A7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/57869440-455a-3f4a-91ae-4e291823c3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:35:37:63:f5:66:0a:dc:28:02:b4:6b:68:91:8e:4b:73:5f: b2:3f:f9:9f:41:b4:f9:f2:9c:4c:f9:18:41:b7:49:3b:b9:1d: 5f:79:e5:40:37:5c:c8:1a:8d:f4:86:76:cf:f2:e8:06:0d:13: 06:8a:92:6c:f1:f5:1c:c0:e9:d1:bb:63:da:38:07:ef:28:f5: 5c:33:03:13:d6:3f:9d:ea:a6:d1:c7:a5:d2:c8:61:5b:6d:09: 00:63:e7:1b:36:f1:5f:40:16:6e:8b:7b:db:e0:23:76:b8:80: d1:f8:ef:98:fb:a9:17:10:12:6e:b8:60:76:86:60:ab:74:b3: 46:01:b2:b1:7a:c6:f6:52:d9:1e:8c:5c:28:da:df:97:e9:ac: 7f:82:c5:9b:a6:ae:79:58:be:e1:6c:e6:07:96:2c:da:26:03: 41:d4:c7:4c:4d:b4:8a:1b:f1:40:b3:ce:0c:48:2b:35:8b:8b: e0:50:4d:d1:64:57:3f:33:75:b0:46:1f:39:88:38:25:ee:b7: 5c:e6:82:e5:47:d5:bb:14:4c:35:4b:8d:00:55:99:25:b0:f7: cd:40:6d:61:56:0f:a5:13:07:f9:97:43:f1:9e:7d:32:ae:b4: 01:49:92:02:b6:b6:7c:38:11:15:fd:a2:94:f7:d7:6e:1c:d6: a1:e2:5c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7xHVO2pnpscEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YTA0YWUwNGUtNjZhZi00YjVjLWFiNzAtNTBhNmRjZTkxYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSh+ls5H52GYB87PVYfjvyZ9qaygzHrbYOAA YhxhoWuuvgXlejuFAglnPaCMfhDaZK4r4g+LT8BY4w4WFYAL//BzKTF5TeEbTl+r LKSFoRHZlu3IEpyvNkm7ar33PZ6PjYFgd1WYGPeg9tNNj1fAllSGnwObwhppUuTu AVaDIMaE3WAKnmXrgw1yNJylOKhLaNQZs/4TBRJdjiTkpF0s676UdCUUbvPu/afZ hWKG8C0HIE6YExQZki3j3r2wDrgqVMoX2jAbXoaZ/qliLePHxq5SdOxPikkubIhr FvOXQ1bfwA4fw9vwmYrSZnt5+st+0KUGP8XCH1qsVspoow3UmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdgwFiVGe0uN1pxPryrGi9sGKecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNTc4Njk0NDAtNDU1YS0z ZjRhLTkxYWUtNGUyOTE4MjNjM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA1N2P1ZgrcKAK0a2iRjktzX7I/+Z9BtPnynEz5GEG3STu5HV955UA3 XMgajfSGds/y6AYNEwaKkmzx9RzA6dG7Y9o4B+8o9VwzAxPWP53qptHHpdLIYVtt CQBj5xs28V9AFm6Le9vgI3a4gNH475j7qRcQEm64YHaGYKt0s0YBsrF6xvZS2R6M XCja35fprH+CxZumrnlYvuFs5geWLNomA0HUx0xNtIob8UCzzgxIKzWLi+BQTdFk Vz8zdbBGHzmIOCXut1zmguVH1bsUTDVLjQBVmSWw981AbWFWD6UTB/mXQ/GefTKu tAFJkgK2tnw4ERX9opT3124c1qHiXKE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:08 2025 by rpki-client