$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa File: 2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa (raw, json) Hash identifier: J7wV9dMhDyO2TCyopS8VtMwuc3wqd9ToX2uaVdoaoJk= Subject key identifier: 9D:19:5C:F9:EA:CC:5F:8D:98:D5:93:2F:7B:C3:6C:D9:54:CA:E2:10 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B87B21DAF60FE1F1E18654600 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 144.81.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:af:60:fe:1f:1e:18:65:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=a82236ab-bc6e-4129-922a-250a437b8239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:4a:f9:d3:b7:17:2e:cd:66:3d:de:e4:10: 8d:76:8c:a2:14:81:8b:0e:6b:87:a0:d7:fa:fc:2a: 87:20:c2:9d:be:6a:88:44:fd:e6:62:8a:c0:21:56: ae:f9:95:96:83:97:42:df:9f:26:97:20:61:55:9d: a7:c1:57:9a:85:d9:48:e6:5d:7e:08:f5:48:ee:9e: 0c:f4:99:2e:a8:4c:49:7e:05:5b:87:5f:5c:99:d7: 44:9a:67:3f:af:70:08:db:92:92:56:98:b6:d6:3d: b6:5f:27:2f:62:01:94:77:1d:3d:40:b0:65:51:43: 06:11:5b:ce:51:0c:68:d7:66:86:13:ae:13:5e:75: 52:c5:e4:b7:24:ef:70:16:bc:11:98:a3:71:ad:b0: f8:38:e3:3e:a7:7f:29:f7:db:b9:db:4c:9b:b2:7f: c3:8b:c2:02:da:73:18:2c:58:d6:21:b9:f6:cf:fa: a6:60:e4:9f:ae:ac:1e:77:82:18:15:20:8b:ca:89: 27:b4:e4:00:a6:f1:c7:92:c1:33:5d:4a:34:cb:f2: aa:00:77:33:77:90:dc:2b:f6:80:c5:a1:06:07:08: f2:9a:a9:4a:97:cc:f9:c4:4a:11:67:8a:4c:2f:4b: 59:c9:4f:18:0a:8e:82:c3:7a:ba:83:39:27:b5:9d: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:19:5C:F9:EA:CC:5F:8D:98:D5:93:2F:7B:C3:6C:D9:54:CA:E2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2da0ef2a-81fc-37f9-9a02-59e4c47ed2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9f:79:86:73:57:f8:0b:97:c1:29:78:45:97:f8:38:b4:a0: fd:8e:3c:71:4b:6e:ef:03:a7:37:36:20:9b:7e:eb:af:2a:47: e8:94:96:98:33:71:7e:28:7b:c5:63:bf:f0:d2:9c:c7:3c:cf: 0f:1c:92:a4:b8:06:ba:4a:dc:4b:86:84:0c:34:47:6e:0d:f3: 82:69:b3:c7:a6:72:5b:76:43:ce:84:bf:40:70:ea:b7:cf:b0: 2c:f8:be:3e:97:4a:91:f5:45:9e:b2:f1:e0:0f:ce:6a:20:90: 79:0c:dc:44:ba:56:03:e6:22:0e:65:36:ff:20:dc:f8:16:2d: 0b:af:af:60:84:32:6c:d6:33:53:a5:e5:8c:34:a0:c9:fb:7e: 43:75:54:28:35:2f:41:4c:55:f1:a8:42:b8:4d:24:35:e1:62: 63:91:44:3e:f3:f2:66:f4:66:72:ef:32:93:f3:01:4c:cb:e0: 38:93:d5:12:72:08:b6:f3:76:58:cf:04:71:a9:39:2f:dd:f6: 83:1d:a9:ff:50:d1:b8:ab:76:84:5c:50:db:73:d5:63:af:9b: ea:93:75:4c:7f:15:e8:38:a7:05:55:82:d9:2f:0e:ef:44:b6: 17:c3:2d:28:8f:76:29:ff:4d:40:9c:71:4a:fb:c9:78:d8:11: 76:ca:be:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh2vYP4fHhhlRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YTgyMjM2YWItYmM2ZS00MTI5LTkyMmEtMjUwYTQzN2I4MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15lK+dO3Fy7NZj3e5BCNdoyiFIGLDmuHoNf6 /CqHIMKdvmqIRP3mYorAIVau+ZWWg5dC358mlyBhVZ2nwVeahdlI5l1+CPVI7p4M 9JkuqExJfgVbh19cmddEmmc/r3AI25KSVpi21j22XycvYgGUdx09QLBlUUMGEVvO UQxo12aGE64TXnVSxeS3JO9wFrwRmKNxrbD4OOM+p38p99u520ybsn/Di8IC2nMY LFjWIbn2z/qmYOSfrqwed4IYFSCLyokntOQApvHHksEzXUo0y/KqAHczd5DcK/aA xaEGBwjymqlKl8z5xEoRZ4pML0tZyU8YCo6Cw3q6gzkntZ0C1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0ZXPnqzF+NmNWTL3vDbNlUyuIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMmRhMGVmMmEtODFmYy0z N2Y5LTlhMDItNTllNGM0N2VkMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWfeYZzV/gLl8EpeEWX+Di0oP2OPHFLbu8Dpzc2IJt+668qR+iUlpgz cX4oe8Vjv/DSnMc8zw8ckqS4BrpK3EuGhAw0R24N84Jps8emclt2Q86Ev0Bw6rfP sCz4vj6XSpH1RZ6y8eAPzmogkHkM3ES6VgPmIg5lNv8g3PgWLQuvr2CEMmzWM1Ol 5Yw0oMn7fkN1VCg1L0FMVfGoQrhNJDXhYmORRD7z8mb0ZnLvMpPzAUzL4DiT1RJy CLbzdljPBHGpOS/d9oMdqf9Q0birdoRcUNtz1WOvm+qTdUx/Feg4pwVVgtkvDu9E thfDLSiPdin/TUCccUr7yXjYEXbKvgs= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:54 2025 by rpki-client