$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c16b44e-9c5f-39c9-bb01-1e066d41b0d0.roa File: 7c16b44e-9c5f-39c9-bb01-1e066d41b0d0.roa (raw, json) Hash identifier: vo1KVOjRxMk1v5zfg2wIQHgRqgvV5nwJlLZDOYUJKm8= Subject key identifier: D4:F3:DE:2E:44:5F:D7:C6:75:43:08:BF:2B:DB:75:A9:88:63:C3:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42F4DB2CA5E184D2426E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c16b44e-9c5f-39c9-bb01-1e066d41b0d0.roa Signing time: Tue 26 Aug 2025 22:55:11 +0000 ROA not before: Tue 26 Aug 2025 22:55:11 +0000 ROA not after: Mon 24 Nov 2025 23:55:11 +0000 asID: 31898 IP address blocks: 144.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:f4:db:2c:a5:e1:84:d2:42:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:55:11 2025 GMT Not After : Nov 24 23:55:11 2025 GMT Subject: CN=76d243c6-38a0-4770-8341-6981c6ef05b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:82:27:fc:a0:56:59:2e:92:df:1d:fc:0e: 9d:31:22:91:18:c7:ff:dd:57:3d:19:c1:20:96:0b: 32:3c:6b:61:05:c7:42:8f:39:89:9c:50:03:e2:a6: 7f:48:d6:34:81:1d:9b:b8:c0:5e:2f:45:6f:30:3a: 20:e4:ad:f4:c8:97:c6:f3:65:71:3e:7e:15:1e:83: 50:02:4b:32:ca:0b:c4:bf:9c:65:6b:b8:23:8c:79: 77:f4:3b:a5:44:2f:99:3b:b5:cf:f3:85:f6:f4:d2: 75:3a:f6:aa:95:94:78:fd:7e:5c:6a:ff:99:1a:3f: b5:e1:e6:51:90:2e:b8:fd:d3:0e:cc:f6:58:d4:88: d3:a3:ac:3e:02:2a:54:a7:5d:18:10:46:b6:aa:59: 0d:fa:15:98:48:78:62:15:74:4a:96:92:e7:5f:64: 85:bf:ef:db:c7:cc:31:d3:f1:58:09:6a:47:41:74: 59:36:54:43:9e:78:a6:fe:0d:32:24:4c:b4:91:19: e5:87:b2:e0:f0:1c:14:04:e5:df:1e:7f:70:8f:79: 66:2a:d0:e4:a6:8c:05:61:ce:68:7a:62:17:8e:bd: 37:50:c3:4c:04:e1:c8:2d:fc:96:dd:2c:81:b1:8e: 59:be:9d:88:9b:82:13:a5:a9:32:df:6d:eb:fb:36: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:DE:2E:44:5F:D7:C6:75:43:08:BF:2B:DB:75:A9:88:63:C3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7c16b44e-9c5f-39c9-bb01-1e066d41b0d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:db:2b:16:97:14:04:7a:35:ca:d1:5e:92:dc:8a:27:5a:3c: 9a:86:37:a4:8c:b7:56:48:ce:c9:15:f3:5d:59:cb:fe:17:b0: f4:dc:90:dc:ac:98:60:64:fe:7b:f5:a5:8e:e5:ff:a0:fb:29: 62:76:8c:f9:da:cd:90:51:9e:73:e9:31:df:e1:46:e8:17:b5: 6a:7d:68:1b:97:ad:e0:1c:58:fc:98:35:bd:65:b9:a0:6d:06: d8:2a:00:4c:cf:6c:6d:4e:fc:88:ee:58:12:cf:64:2a:32:2b: 21:85:af:10:a6:ca:24:74:47:83:95:bb:39:da:f1:61:3d:1e: 10:b7:0e:ae:f0:86:6e:fb:33:9d:32:e4:ab:6e:aa:4b:53:9c: 73:14:16:2d:ee:2a:8f:3e:e0:9d:7d:2c:1b:c6:9f:3d:9d:73: 23:f0:1e:cf:74:83:2a:ec:ec:d1:3a:f1:53:04:0b:04:83:6c: 0b:2b:8f:e4:de:fb:aa:5d:10:3c:a2:b2:85:63:5f:d0:c7:c0: a9:0c:72:f5:62:19:57:81:db:2e:c7:d3:02:22:48:2c:e1:c3: cc:63:19:ee:5f:5b:f1:c0:8f:ec:27:13:7e:0d:d3:b2:51:a2: 2e:27:a0:8c:8c:18:47:e3:11:c5:ff:4d:58:2e:0b:2b:7d:6c: 99:f3:c9:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QvTbLKXhhNJCbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTUxMVoXDTI1MTEyNDIzNTUxMVowLzEtMCsGA1UEAxMk NzZkMjQzYzYtMzhhMC00NzcwLTgzNDEtNjk4MWM2ZWYwNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9mCJ/ygVlkukt8d/A6dMSKRGMf/3Vc9GcEg lgsyPGthBcdCjzmJnFAD4qZ/SNY0gR2buMBeL0VvMDog5K30yJfG82VxPn4VHoNQ AksyygvEv5xla7gjjHl39DulRC+ZO7XP84X29NJ1OvaqlZR4/X5cav+ZGj+14eZR kC64/dMOzPZY1IjTo6w+AipUp10YEEa2qlkN+hWYSHhiFXRKlpLnX2SFv+/bx8wx 0/FYCWpHQXRZNlRDnnim/g0yJEy0kRnlh7Lg8BwUBOXfHn9wj3lmKtDkpowFYc5o emIXjr03UMNMBOHILfyW3SyBsY5Zvp2Im4ITpaky323r+zb2SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTz3i5EX9fGdUMIvyvbdamIY8O0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2MxNmI0NGUtOWM1Zi0z OWM5LWJiMDEtMWUwNjZkNDFiMGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPbKxaXFAR6NcrRXpLciidaPJqGN6SMt1ZIzskV811Zy/4XsPTckNys mGBk/nv1pY7l/6D7KWJ2jPnazZBRnnPpMd/hRugXtWp9aBuXreAcWPyYNb1luaBt BtgqAEzPbG1O/IjuWBLPZCoyKyGFrxCmyiR0R4OVuzna8WE9HhC3Dq7whm77M50y 5KtuqktTnHMUFi3uKo8+4J19LBvGnz2dcyPwHs90gyrs7NE68VMECwSDbAsrj+Te +6pdEDyisoVjX9DHwKkMcvViGVeB2y7H0wIiSCzhw8xjGe5fW/HAj+wnE34N07JR oi4noIyMGEfjEcX/TVguCyt9bJnzyQ0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:36 2025 by rpki-client