$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa File: 01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa (raw, json) Hash identifier: pPM8MIdrNujNtURA0rnhTDg9PwMXA2wX4EPklvUHEHw= Subject key identifier: 95:4C:C7:C6:65:70:16:F5:CB:B3:8D:36:75:51:9E:BD:A8:11:4E:3B Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B87B21D6CB19F5D092285BC80 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 144.81.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:6c:b1:9f:5d:09:22:85:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=846cc445-0721-432c-bf5a-833fa27250d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:6a:40:e9:09:79:8b:51:de:45:29:19:d4: 02:ab:fd:37:f6:38:2b:b8:78:76:89:09:cd:dc:6b: d8:23:43:76:3f:7d:a8:30:ef:d7:22:2f:a3:10:2e: 3c:51:b6:50:ff:e8:49:7b:72:af:f0:90:24:73:23: 66:cb:1a:c5:50:1d:8c:00:71:e0:45:b5:be:f4:6a: dd:66:2b:ea:6e:45:3b:a6:00:71:47:08:fc:2e:20: 94:7b:ac:eb:93:c3:85:cf:7b:fe:49:96:a6:ee:76: fa:54:55:c6:3a:30:c4:cd:b3:99:fb:78:48:0c:a8: 56:d4:ff:06:cd:37:b5:fb:7c:0d:58:ad:4b:d5:f4: 27:32:5e:75:25:25:2f:49:ec:8c:aa:22:38:f0:c9: f2:5e:a5:aa:72:8a:5a:95:4d:93:03:ee:90:3f:ce: 40:e0:00:94:fd:19:a9:1f:0b:13:fb:16:c2:7d:14: b7:3d:31:56:b5:8c:71:dd:dc:59:41:cf:35:6a:67: 75:15:3e:07:50:7a:a5:27:4e:81:52:b4:e6:79:fe: 9f:20:60:26:4f:05:49:ce:94:20:fe:65:7a:5b:c7: 89:59:9e:3e:e2:58:1c:0c:8b:27:52:6e:c1:17:db: 0a:55:4a:b3:f2:b7:bf:da:fe:08:d6:17:ef:ae:52: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:C7:C6:65:70:16:F5:CB:B3:8D:36:75:51:9E:BD:A8:11:4E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e4:1a:70:f0:fc:82:50:05:77:89:b0:09:62:cd:79:cd:ca: 02:4a:32:1e:d4:0a:0b:46:ca:e5:0c:8e:03:c1:7a:d5:e6:4b: b3:7e:ee:9a:ef:66:0f:01:cd:2d:0f:42:4c:d4:61:2f:04:7d: 8e:e1:6a:9d:d7:27:43:2c:19:f5:81:5c:24:8d:63:99:cc:ff: ce:3c:68:04:6d:0c:00:95:eb:cb:dc:93:88:87:e7:84:a1:a6: 0e:a4:3f:6f:72:8b:13:ca:96:14:18:1d:85:17:1b:93:8c:db: 0d:fc:4c:cd:58:8e:7d:7f:e0:5b:bc:2c:0e:6c:83:64:da:18: be:a0:bd:31:6e:41:b0:a7:a4:ab:6a:52:dd:ed:9f:43:93:bd: 7f:03:cf:09:86:14:72:d2:43:f5:a4:05:53:21:8a:42:8c:48: b2:95:0f:2c:8f:d0:10:7a:aa:1f:b6:1d:9d:0c:01:dd:0c:9b: 4e:bb:96:48:f5:cf:93:9e:b9:6a:dc:5a:fe:a7:46:f2:0a:e1: 73:76:a9:63:ac:df:3c:cc:87:69:45:60:3d:d7:1c:ba:60:f1: 97:33:41:cd:65:cf:f6:bf:a1:79:52:ec:76:a3:e0:dc:72:cd: 01:8b:09:63:2d:bc:df:f5:09:29:88:a2:9c:2b:94:15:7a:be: fe:da:87:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh1ssZ9dCSKFvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ODQ2Y2M0NDUtMDcyMS00MzJjLWJmNWEtODMzZmEyNzI1MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYRqQOkJeYtR3kUpGdQCq/039jgruHh2iQnN 3GvYI0N2P32oMO/XIi+jEC48UbZQ/+hJe3Kv8JAkcyNmyxrFUB2MAHHgRbW+9Grd ZivqbkU7pgBxRwj8LiCUe6zrk8OFz3v+SZam7nb6VFXGOjDEzbOZ+3hIDKhW1P8G zTe1+3wNWK1L1fQnMl51JSUvSeyMqiI48MnyXqWqcopalU2TA+6QP85A4ACU/Rmp HwsT+xbCfRS3PTFWtYxx3dxZQc81amd1FT4HUHqlJ06BUrTmef6fIGAmTwVJzpQg /mV6W8eJWZ4+4lgcDIsnUm7BF9sKVUqz8re/2v4I1hfvrlK2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVMx8ZlcBb1y7ONNnVRnr2oEU47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMDFjMmIwY2UtM2NmMy0z ZTc0LTk0ZDUtMDRjODBiYmI0ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkFGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInkGnDw/IJQBXeJsAlizXnNygJKMh7UCgtGyuUMjgPBetXmS7N+7prv Zg8BzS0PQkzUYS8EfY7hap3XJ0MsGfWBXCSNY5nM/848aARtDACV68vck4iH54Sh pg6kP29yixPKlhQYHYUXG5OM2w38TM1Yjn1/4Fu8LA5sg2TaGL6gvTFuQbCnpKtq Ut3tn0OTvX8DzwmGFHLSQ/WkBVMhikKMSLKVDyyP0BB6qh+2HZ0MAd0Mm067lkj1 z5OeuWrcWv6nRvIK4XN2qWOs3zzMh2lFYD3XHLpg8ZczQc1lz/a/oXlS7Haj4Nxy zQGLCWMtvN/1CSmIopwrlBV6vv7ah9U= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:48 2025 by rpki-client