$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8688a0a9-53b2-36a9-92ef-a495194f153b.roa File: 8688a0a9-53b2-36a9-92ef-a495194f153b.roa (raw, json) Hash identifier: etX0I/6WOihldHa53lD7zGdRnADubAfW90qrcQ2SDNo= Subject key identifier: FF:95:5D:A9:A8:C8:34:36:E5:9B:EA:E9:26:67:19:E2:DD:8D:7B:AB Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B9E07D663017C1C10110CD700 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8688a0a9-53b2-36a9-92ef-a495194f153b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 54339 IP address blocks: 144.208.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d6:63:01:7c:1c:10:11:0c:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b4f27260-710f-466b-b56e-6ba9e5954948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:99:1e:87:13:fa:93:6a:b6:dd:b7:24:23: 72:30:bd:55:fc:d6:02:e3:4f:1c:fc:8a:87:83:b5: 29:33:03:5b:08:70:ac:04:25:5f:20:46:b5:fe:be: 46:ea:cf:e3:44:8d:ec:a9:45:79:a1:82:d9:ae:89: 45:64:ff:77:74:47:24:73:f3:8f:b5:99:5e:5d:df: ce:2d:b9:c8:ce:c8:ee:38:ed:fa:41:a3:70:29:16: a3:98:d3:17:f7:4d:3f:b7:7f:59:1f:f2:ad:80:de: f4:c1:37:b8:e7:7d:cc:be:69:c6:fd:93:03:1f:52: 6d:9b:b6:a9:15:0d:64:64:ee:27:16:07:e6:c5:c3: 59:37:de:8e:7c:ac:5a:12:fc:bf:da:28:b6:65:65: 55:67:da:b5:16:e7:b6:3c:2a:b0:eb:7b:32:d1:bf: 20:74:0e:da:98:76:6b:82:8b:e4:1f:b6:6e:20:8f: 1b:67:17:5f:96:73:0f:1a:b3:15:d9:bf:0c:d2:21: fd:66:e6:9e:13:2d:4d:53:0a:72:82:2d:e1:23:e3: 4c:57:b4:7b:4b:07:67:c8:f6:80:cc:fd:b7:3b:58: 3b:d4:7b:57:05:45:38:62:e9:6c:44:4d:c0:fb:7f: 94:b9:d4:b0:5b:93:e3:bd:17:fc:9b:5f:f3:11:8f: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:5D:A9:A8:C8:34:36:E5:9B:EA:E9:26:67:19:E2:DD:8D:7B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8688a0a9-53b2-36a9-92ef-a495194f153b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2a:06:70:c7:4b:50:db:9d:b6:9f:cd:18:69:b9:8a:b1:b5: c2:6e:0c:ea:86:e3:e5:04:b3:a9:52:06:e9:43:34:71:0d:d4: ce:6f:a6:c4:75:a1:af:74:5d:09:71:67:9e:b8:95:4f:39:90: 71:2a:33:ae:70:84:ca:0f:23:73:45:83:c2:1a:62:fe:2c:c8: 67:3c:eb:8b:12:dd:84:b9:75:ad:c2:af:fa:e8:50:a5:21:11: d2:b5:d4:44:9b:62:f6:bf:aa:97:a2:6a:8b:ec:ec:aa:4f:d8: d6:41:7a:dc:87:f4:d2:a3:10:6d:18:49:8f:51:f2:cd:ac:b8: d9:9f:51:0b:bb:ef:ad:98:b6:e6:db:6f:a3:55:0f:ad:ad:cd: 21:d3:11:92:6c:40:2b:23:fe:93:98:df:be:57:7c:3c:e7:74: 16:ab:17:97:b6:ee:ef:c5:b8:c9:0f:3f:df:af:5c:40:18:35: be:3c:06:a3:49:c4:64:fc:83:44:68:db:9e:18:c8:2c:78:c4: 81:1c:77:d6:82:5a:be:18:dc:32:fe:d1:49:a3:33:d8:b2:81: 45:3f:aa:18:1f:7f:65:30:e3:ad:55:78:0f:66:fc:43:42:0b: 0e:f9:63:4e:fb:f8:4a:eb:77:aa:20:e9:3c:41:80:e8:b3:d0: c9:0e:94:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9ZjAXwcEBEM1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjRmMjcyNjAtNzEwZi00NjZiLWI1NmUtNmJhOWU1OTU0OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/uZHocT+pNqtt23JCNyML1V/NYC408c/IqH g7UpMwNbCHCsBCVfIEa1/r5G6s/jRI3sqUV5oYLZrolFZP93dEckc/OPtZleXd/O LbnIzsjuOO36QaNwKRajmNMX900/t39ZH/KtgN70wTe4533MvmnG/ZMDH1Jtm7ap FQ1kZO4nFgfmxcNZN96OfKxaEvy/2ii2ZWVVZ9q1Fue2PCqw63sy0b8gdA7amHZr govkH7ZuII8bZxdflnMPGrMV2b8M0iH9ZuaeEy1NUwpygi3hI+NMV7R7SwdnyPaA zP23O1g71HtXBUU4YulsRE3A+3+UudSwW5PjvRf8m1/zEY9uUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+VXamoyDQ25Zvq6SZnGeLdjXurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODY4OGEwYTktNTNiMi0z NmE5LTkyZWYtYTQ5NTE5NGYxNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAqBnDHS1DbnbafzRhpuYqxtcJuDOqG4+UEs6lSBulDNHEN1M5vpsR1 oa90XQlxZ564lU85kHEqM65whMoPI3NFg8IaYv4syGc864sS3YS5da3Cr/roUKUh EdK11ESbYva/qpeiaovs7KpP2NZBetyH9NKjEG0YSY9R8s2suNmfUQu7762Ytubb b6NVD62tzSHTEZJsQCsj/pOY375XfDzndBarF5e27u/FuMkPP9+vXEAYNb48BqNJ xGT8g0Ro254YyCx4xIEcd9aCWr4Y3DL+0UmjM9iygUU/qhgff2Uw461VeA9m/ENC Cw75Y077+Errd6og6TxBgOiz0MkOlMI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:43 2025 by rpki-client