$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa File: 6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa (raw, json) Hash identifier: gKJADrQVGCjSHzcZb5S8CDqv+XCbBgQx4QcfaLPfQZw= Subject key identifier: CA:FF:9B:67:E7:BC:6A:6B:D2:54:1A:60:AC:0E:1F:B8:2E:17:78:0D Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584BB727BC58292BFBF35B629E00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 401838 IP address blocks: 144.208.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bc:58:29:2b:fb:f3:5b:62:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=7e61f626-9bf7-414a-9a92-b9f43e812b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:80:0e:02:ca:33:68:09:25:50:56:69:0b: 2b:05:5a:5e:98:e7:7c:97:9e:ef:3d:a4:04:b5:5d: e8:99:99:18:a5:c2:39:e5:94:a9:29:31:85:61:8c: fe:c1:df:6f:3c:c3:11:61:ca:37:ea:aa:95:77:77: 6c:08:0b:e2:74:cc:e0:d1:14:b2:b7:02:9d:8c:c5: c4:dd:b6:05:53:c9:ea:b7:dd:63:c2:65:8d:0d:c3: 4c:cd:f8:67:56:a2:c0:03:2e:4c:6f:c9:a9:fa:4f: b9:f1:09:5d:fe:6c:2c:ab:bd:60:c4:fa:85:11:1d: 1b:23:08:97:b4:90:03:5a:03:0f:51:d0:d1:9e:f3: fe:a4:4f:6d:52:9e:48:3d:95:99:23:c2:f8:91:f5: 91:8f:79:21:a8:20:6f:ca:b4:50:2e:76:f5:fb:49: 7f:2a:12:6e:0b:b7:fe:90:2b:80:7a:a6:af:88:b9: b0:6d:cd:30:f1:5c:68:d0:af:ae:48:3e:92:98:24: 61:46:eb:52:24:82:f5:bb:f4:65:3f:66:44:ff:47: 15:40:09:c0:8a:f2:df:04:74:f2:be:8d:c9:2d:74: 0e:03:a4:eb:a5:f3:e3:00:06:fd:e3:4c:82:ed:ce: 84:9e:7a:c3:37:3e:d2:b4:f2:00:bb:1b:e0:88:3f: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FF:9B:67:E7:BC:6A:6B:D2:54:1A:60:AC:0E:1F:B8:2E:17:78:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b2:41:42:e7:eb:41:8a:77:ac:01:49:66:72:0e:16:8c:d0: f4:f4:49:7e:58:e2:dd:ab:cd:b5:19:2c:b5:e2:57:e7:2d:3a: 47:e6:06:6e:f3:45:ab:7a:fe:8b:f5:6f:2c:26:61:0f:d6:8e: a3:de:55:19:04:2a:df:c1:d7:9c:a5:fc:6f:81:e2:d2:2c:e0: 2c:3b:d0:99:05:d5:e6:cd:9d:a0:d4:e8:41:9d:8a:ec:fa:dc: 65:f9:54:0e:19:d5:c1:62:88:c0:97:08:7a:89:c2:36:75:27: 32:38:78:34:35:b5:ea:32:f3:40:90:03:26:a9:55:b7:58:4e: af:9e:d3:fc:19:b7:9e:98:47:4b:3a:9c:7b:8c:40:d5:76:ef: d3:fc:5d:7f:58:fc:1a:ea:b7:12:6a:9e:de:57:e4:5b:4b:23: 89:60:13:06:db:0c:0f:15:cd:4a:bc:df:62:41:ea:60:96:22: 4a:43:f5:09:6d:ea:3d:2b:24:50:cb:4b:28:4b:15:0e:ae:d9: 1d:d6:30:8e:d8:3e:a7:c9:28:60:51:d7:88:04:70:43:49:e1: 40:fa:3e:73:49:b0:78:9e:80:4d:71:c7:9e:0b:22:d1:9f:69: 76:ae:d8:8c:c1:22:c9:24:11:2b:be:9c:6b:fe:21:aa:1b:41: c6:6d:8f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7xYKSv781tingAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk N2U2MWY2MjYtOWJmNy00MTRhLTlhOTItYjlmNDNlODEyYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqiADgLKM2gJJVBWaQsrBVpemOd8l57vPaQE tV3omZkYpcI55ZSpKTGFYYz+wd9vPMMRYco36qqVd3dsCAvidMzg0RSytwKdjMXE 3bYFU8nqt91jwmWNDcNMzfhnVqLAAy5Mb8mp+k+58Qld/mwsq71gxPqFER0bIwiX tJADWgMPUdDRnvP+pE9tUp5IPZWZI8L4kfWRj3khqCBvyrRQLnb1+0l/KhJuC7f+ kCuAeqaviLmwbc0w8Vxo0K+uSD6SmCRhRutSJIL1u/RlP2ZE/0cVQAnAivLfBHTy vo3JLXQOA6TrpfPjAAb940yC7c6EnnrDNz7StPIAuxvgiD+A2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr/m2fnvGpr0lQaYKwOH7guF3gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjQxNGRkMWYtZGQwZC0z MWRkLWJmOWMtMDg1ODZlZDNhMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSyQULn60GKd6wBSWZyDhaM0PT0SX5Y4t2rzbUZLLXiV+ctOkfmBm7z Rat6/ov1bywmYQ/WjqPeVRkEKt/B15yl/G+B4tIs4Cw70JkF1ebNnaDU6EGdiuz6 3GX5VA4Z1cFiiMCXCHqJwjZ1JzI4eDQ1teoy80CQAyapVbdYTq+e0/wZt56YR0s6 nHuMQNV279P8XX9Y/BrqtxJqnt5X5FtLI4lgEwbbDA8VzUq832JB6mCWIkpD9Qlt 6j0rJFDLSyhLFQ6u2R3WMI7YPqfJKGBR14gEcENJ4UD6PnNJsHiegE1xx54LItGf aXau2IzBIskkESu+nGv+IaobQcZtj5g= -----END CERTIFICATE-----Generated at Wed Nov 5 08:13:14 2025 by rpki-client