$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa File: 3672ce80-0d2a-362b-ae2d-f084212a54ba.roa (raw, json) Hash identifier: DsS/qDcylwMaXIrM1Cf9rNC6M/71ntQC3zWmXQQBRHs= Subject key identifier: 88:62:B3:6F:AB:51:08:77:19:36:A0:5B:D6:2B:EB:B0:8E:49:0D:D7 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B87B21D25A71F62898BC9AE60 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 144.81.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:25:a7:1f:62:89:8b:c9:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=3dedcd59-6118-40fc-b62d-b5708ee0ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:c2:d1:96:8d:bc:16:f4:0e:be:b1:b0:e2: 81:12:d3:86:5a:8e:c6:56:f6:b8:ff:ab:9f:e6:80: 0e:26:23:48:a5:fc:7b:52:e0:9f:fd:6f:13:b3:58: 53:03:28:f3:62:86:78:9a:97:22:5b:66:6e:ee:f4: 62:62:ab:0b:ce:0a:25:bd:61:6f:fb:03:d1:b3:a5: ce:f4:cb:4a:9f:77:f8:c2:eb:36:f4:cc:e6:77:d2: ba:f9:55:92:1a:6f:18:4c:67:d8:2b:d1:f0:41:2f: fd:4a:41:38:b8:a6:4c:eb:b8:8a:f6:cd:b0:7e:e0: 29:00:b7:1a:20:7f:3a:65:4e:f7:ae:da:f4:03:38: 8b:fa:25:b9:cd:48:d9:3b:c5:c5:1a:47:60:63:ff: 24:b8:49:a5:d2:e0:09:d6:29:7a:de:4a:78:66:86: be:7f:3c:2c:29:62:51:d8:81:3f:d2:ce:8f:6c:e7: 01:c7:90:75:80:51:77:a1:b3:a2:40:a7:e9:3d:81: 0f:28:0d:3f:26:69:cd:61:c7:22:e8:92:6f:ca:94: 38:69:38:73:c0:0d:c8:a8:c3:65:a1:dd:d6:79:ea: 00:0d:2d:9c:a9:dc:19:53:71:03:ef:99:07:2f:12: 3e:07:5a:1c:40:cd:78:d5:ac:d1:c4:2e:b5:c4:d0: 6c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:62:B3:6F:AB:51:08:77:19:36:A0:5B:D6:2B:EB:B0:8E:49:0D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3672ce80-0d2a-362b-ae2d-f084212a54ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:36:2e:f5:03:be:d6:68:3f:6b:b0:6b:e6:a1:39:59:bc:43: 9e:9b:09:5d:e7:19:e3:a8:81:cb:56:66:a3:44:eb:9c:55:b0: 78:d6:c0:b2:c7:59:bf:e2:9a:9f:ef:15:93:b6:e6:57:ab:7d: 00:ae:04:06:b5:92:41:57:b5:a8:47:0a:29:a7:a0:de:74:0e: ec:ea:2a:1c:63:ae:24:3c:db:89:3a:41:e9:4c:08:9b:f9:89: 3c:dd:2c:1d:f0:8a:62:b8:aa:99:81:31:ab:13:4a:c7:f7:0b: 37:2b:66:d9:02:3a:9b:1e:72:8e:eb:34:de:fa:5b:75:2d:73: db:f8:fc:83:95:56:c2:a8:3a:cd:31:ad:b6:f7:79:36:22:b7: cd:33:41:c7:31:b0:b7:19:98:ce:90:41:11:17:05:33:80:ec: 6e:4c:02:ee:7c:c3:63:21:a9:f9:21:a1:64:c8:b6:f3:ed:f1: b2:35:6f:c7:d2:e7:d2:72:4a:80:85:c7:77:7f:2d:5e:19:d5: 3c:7e:86:78:92:95:98:79:a3:47:39:ba:d8:dd:56:93:2b:fe: 1e:82:89:1c:e5:95:34:ed:9d:29:40:76:71:7a:53:19:b1:dd: 55:33:29:03:9e:dc:62:d5:54:dd:86:1c:de:4f:7e:78:86:ce: 25:b3:41:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh0lpx9iiYvJrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk M2RlZGNkNTktNjExOC00MGZjLWI2MmQtYjU3MDhlZTBhZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwTC0ZaNvBb0Dr6xsOKBEtOGWo7GVva4/6uf 5oAOJiNIpfx7UuCf/W8Ts1hTAyjzYoZ4mpciW2Zu7vRiYqsLzgolvWFv+wPRs6XO 9MtKn3f4wus29Mzmd9K6+VWSGm8YTGfYK9HwQS/9SkE4uKZM67iK9s2wfuApALca IH86ZU73rtr0AziL+iW5zUjZO8XFGkdgY/8kuEml0uAJ1il63kp4Zoa+fzwsKWJR 2IE/0s6PbOcBx5B1gFF3obOiQKfpPYEPKA0/JmnNYcci6JJvypQ4aThzwA3IqMNl od3WeeoADS2cqdwZU3ED75kHLxI+B1ocQM141azRxC61xNBsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhis2+rUQh3GTagW9Yr67COSQ3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvMzY3MmNlODAtMGQyYS0z NjJiLWFlMmQtZjA4NDIxMmE1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU2LvUDvtZoP2uwa+ahOVm8Q56bCV3nGeOogctWZqNE65xVsHjWwLLH Wb/imp/vFZO25lerfQCuBAa1kkFXtahHCimnoN50DuzqKhxjriQ824k6QelMCJv5 iTzdLB3wimK4qpmBMasTSsf3CzcrZtkCOpseco7rNN76W3Utc9v4/IOVVsKoOs0x rbb3eTYit80zQccxsLcZmM6QQREXBTOA7G5MAu58w2MhqfkhoWTItvPt8bI1b8fS 59JySoCFx3d/LV4Z1Tx+hniSlZh5o0c5utjdVpMr/h6CiRzllTTtnSlAdnF6Uxmx 3VUzKQOe3GLVVN2GHN5PfniGziWzQaM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:07 2025 by rpki-client