$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa File: 95037d37-41f0-3224-b20d-ed8abd26d1c5.roa (raw, json) Hash identifier: ejCbXhv1BUHf56jG8ULnkVlQcs18/J9vGW1Nlk4k9Q8= Subject key identifier: BC:B1:E0:4A:A9:D6:81:4E:8C:36:A9:66:5D:A3:3B:9A:1F:68:D4:78 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F0D6CF6A8942A94F15E2FC400 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f6:a8:94:2a:94:f1:5e:2f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=cac05818-4278-42fe-a408-646b62ff133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:d0:b4:bc:78:59:47:b4:c5:b9:b1:06:56: 7b:fc:06:24:05:93:ff:ad:7c:3c:50:48:3c:e2:f7: 34:85:05:fb:4c:69:dc:3d:93:f8:09:98:14:42:23: 30:54:0d:1a:c8:ff:57:f2:bc:68:a7:a1:d4:f3:15: aa:59:57:2d:02:c7:ac:87:a1:d3:06:9f:db:13:81: 3d:60:1f:25:9d:16:1e:50:fa:3c:c0:9e:d3:0f:b8: a7:0d:2c:79:b2:ad:a9:65:7d:f6:52:9d:5c:bd:4e: dd:d5:b5:67:b3:4c:21:71:c1:ff:d0:5e:bc:c0:91: cc:99:1c:7a:93:31:91:c3:58:6d:b0:c6:77:ad:3b: ae:43:bd:e1:58:1d:ab:58:89:3e:22:f8:e9:5e:fb: f1:43:c1:e1:b1:4d:f9:4c:59:51:de:a6:5b:1d:3b: 17:4b:01:fd:dd:0a:69:53:1e:9e:59:7a:83:0e:19: c2:93:cb:14:fe:01:a5:a1:50:8f:65:3a:9a:fb:ab: 9d:80:c9:c8:3e:6a:ed:ac:a4:cc:b3:ef:50:06:76: ea:85:ba:b5:9c:dd:82:bc:22:b7:37:08:21:19:36: 07:78:6a:2c:d3:94:b5:00:b5:1e:36:f2:b5:01:7a: a9:88:58:90:bd:e9:f6:e1:a5:d8:12:44:7d:c3:7a: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:E0:4A:A9:D6:81:4E:8C:36:A9:66:5D:A3:3B:9A:1F:68:D4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d2:97:1a:c1:41:d7:8a:92:5f:a0:23:8a:1d:f9:24:11:11: 40:06:62:90:87:1d:c9:b6:ee:7d:8a:d7:1e:81:58:4c:b2:aa: a1:a6:24:79:9f:1d:0a:cb:1b:c4:b5:4f:e2:da:bd:f8:15:a5: ec:ae:0b:cc:c0:14:da:d2:ba:64:d9:6a:9c:8d:2c:ef:18:0d: b3:e9:58:d6:e2:28:d4:d5:af:ae:c4:ca:3b:a6:20:77:b5:79: 71:3f:60:f0:1d:8a:cb:71:69:8e:ad:9f:f0:3d:43:95:74:15: 3c:95:98:eb:9d:bd:62:af:24:8c:44:23:dd:f7:24:fc:c5:3a: ee:c2:55:27:29:87:76:91:84:3f:1f:38:01:af:9f:ad:5e:b3: fd:5d:05:74:d5:7d:0a:eb:d7:28:ff:63:d7:bc:55:9f:73:87: 08:3b:67:06:94:b7:4e:37:87:a4:2e:2c:06:27:ac:65:93:b9: 81:4d:b5:db:46:9c:a8:85:ac:7d:d2:85:e8:6f:28:ff:9e:be: 6f:a8:e6:1e:fd:05:07:62:ef:2a:ba:f1:fc:e9:20:80:2d:9c: ff:e6:37:d1:71:87:f1:7a:c1:47:70:46:39:e4:54:7f:c8:fc: 06:43:b9:5c:12:e5:3a:dc:ee:64:19:ad:70:5b:3b:72:9e:f2: 6b:0e:cd:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPaolCqU8V4vxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2FjMDU4MTgtNDI3OC00MmZlLWE0MDgtNjQ2YjYyZmYxMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0fQtLx4WUe0xbmxBlZ7/AYkBZP/rXw8UEg8 4vc0hQX7TGncPZP4CZgUQiMwVA0ayP9X8rxop6HU8xWqWVctAsesh6HTBp/bE4E9 YB8lnRYeUPo8wJ7TD7inDSx5sq2pZX32Up1cvU7d1bVns0whccH/0F68wJHMmRx6 kzGRw1htsMZ3rTuuQ73hWB2rWIk+IvjpXvvxQ8HhsU35TFlR3qZbHTsXSwH93Qpp Ux6eWXqDDhnCk8sU/gGloVCPZTqa+6udgMnIPmrtrKTMs+9QBnbqhbq1nN2CvCK3 NwghGTYHeGos05S1ALUeNvK1AXqpiFiQven24aXYEkR9w3pvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyx4Eqp1oFOjDapZl2jO5ofaNR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTUwMzdkMzctNDFmMC0z MjI0LWIyMGQtZWQ4YWJkMjZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHSlxrBQdeKkl+gI4od+SQREUAGYpCHHcm27n2K1x6BWEyyqqGmJHmf HQrLG8S1T+LavfgVpeyuC8zAFNrSumTZapyNLO8YDbPpWNbiKNTVr67EyjumIHe1 eXE/YPAdistxaY6tn/A9Q5V0FTyVmOudvWKvJIxEI933JPzFOu7CVScph3aRhD8f OAGvn61es/1dBXTVfQrr1yj/Y9e8VZ9zhwg7ZwaUt043h6QuLAYnrGWTuYFNtdtG nKiFrH3ShehvKP+evm+o5h79BQdi7yq68fzpIIAtnP/mN9Fxh/F6wUdwRjnkVH/I /AZDuVwS5Trc7mQZrXBbO3Ke8msOzZ0= -----END CERTIFICATE-----Generated at Tue Sep 22 12:52:11 2026 by rpki-client