$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa File: d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa (raw, json) Hash identifier: YP0BkFLNkcESPn4Z1DvE7/S6+LTqJzMTM7VvnvKz86U= Subject key identifier: 73:46:55:0E:E9:A3:E8:01:FF:AC:B1:3D:08:AE:5E:20:BB:A3:B3:17 Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B95A7971662C0E20906C82A80 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 144.81.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:97:16:62:c0:e2:09:06:c8:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=79c907dd-418a-4c2c-86ca-377aa97a1f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:fa:bb:a7:71:9a:77:42:eb:5f:74:08:59: bd:e1:2e:88:fe:71:00:c8:77:45:7b:80:98:b4:5c: 49:74:49:6f:c5:be:d2:78:cf:29:d5:5c:43:63:f8: fe:c2:84:c4:22:f6:8a:f8:3c:d0:32:5b:4f:58:9e: e0:63:b2:5d:25:66:54:3e:b6:06:89:42:c5:e5:8b: c6:74:05:5b:b2:22:53:f7:a9:6b:04:53:6e:9d:4d: 50:db:d1:d4:02:45:64:87:47:cf:c9:be:e8:81:7b: bf:db:b9:b9:28:d5:a9:2f:99:97:d3:21:1a:b6:0c: cc:cf:08:8a:b8:0c:67:1f:0f:b1:dd:15:1c:c3:11: 16:d5:fc:61:fc:e4:14:ef:da:cd:96:3c:9c:a2:8d: 12:8c:67:db:33:d3:dd:63:1f:ba:54:d7:86:52:66: 87:f4:8f:3c:de:e2:dd:b9:c1:d9:13:93:73:6a:c0: 6b:0c:53:b1:33:d3:a4:41:f7:93:a3:be:5c:ef:5c: 3b:70:0f:a1:f7:88:c7:a0:33:47:d3:60:04:0e:55: db:80:d5:0c:98:95:a4:f4:66:65:f6:c0:79:d4:8c: 27:37:7c:82:2d:a5:dc:95:7b:6b:a7:ba:5a:38:15: 4c:62:ca:d8:85:f3:2b:9b:b9:36:bb:b2:48:a5:25: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:46:55:0E:E9:A3:E8:01:FF:AC:B1:3D:08:AE:5E:20:BB:A3:B3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:55:e9:7b:8b:9d:a9:83:30:d2:7e:fd:02:e8:e0:f8:0a:63: c8:e4:29:17:5d:c8:ea:ea:83:49:72:90:26:65:40:61:68:fc: c7:b3:93:70:2d:5c:92:71:df:3d:95:d1:10:ad:07:c1:fe:02: f0:23:f1:47:82:ff:f4:7a:2e:66:c7:20:cc:bc:17:7c:94:12: 09:51:58:20:f5:9c:14:ab:cd:2a:29:e3:05:3d:11:cb:55:44: 67:ff:0c:2a:e1:36:d2:e0:cb:10:9c:be:ac:ea:d9:ed:b4:97: e9:79:c5:91:c9:5e:ed:51:2b:6b:11:2d:d4:db:60:c0:90:da: d9:80:1e:04:1a:92:47:d6:97:5b:d6:f9:1f:8f:44:1b:96:d8: 93:d5:e8:ed:b1:2a:92:04:3a:35:41:e6:b0:39:d8:50:7c:46: f8:b7:20:0f:30:4a:5a:5e:ea:42:92:2a:fe:c9:06:2c:9c:4d: 57:fe:c4:1d:f8:d2:e1:6d:b3:df:51:1e:ef:27:54:d9:af:3f: db:f2:26:c8:e7:df:15:98:27:7a:42:4d:d6:3d:77:85:e6:ab: a6:32:5e:f0:9d:11:a3:aa:7b:0e:9a:05:bf:b3:06:70:27:84: 4a:11:9a:d8:53:0c:d8:89:55:10:76:95:5b:5a:8b:33:0f:02: c0:23:34:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5cWYsDiCQbIKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzljOTA3ZGQtNDE4YS00YzJjLTg2Y2EtMzc3YWE5N2ExZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8L6u6dxmndC6190CFm94S6I/nEAyHdFe4CY tFxJdElvxb7SeM8p1VxDY/j+woTEIvaK+DzQMltPWJ7gY7JdJWZUPrYGiULF5YvG dAVbsiJT96lrBFNunU1Q29HUAkVkh0fPyb7ogXu/27m5KNWpL5mX0yEatgzMzwiK uAxnHw+x3RUcwxEW1fxh/OQU79rNljycoo0SjGfbM9PdYx+6VNeGUmaH9I883uLd ucHZE5NzasBrDFOxM9OkQfeTo75c71w7cA+h94jHoDNH02AEDlXbgNUMmJWk9GZl 9sB51IwnN3yCLaXclXtrp7paOBVMYsrYhfMrm7k2u7JIpSU9fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNGVQ7po+gB/6yxPQiuXiC7o7MXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvZDNmYmU2M2QtNTFiOC0z YTZiLWJmNTQtMWU1ZmE5NjQxZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItV6XuLnamDMNJ+/QLo4PgKY8jkKRddyOrqg0lykCZlQGFo/Mezk3At XJJx3z2V0RCtB8H+AvAj8UeC//R6LmbHIMy8F3yUEglRWCD1nBSrzSop4wU9EctV RGf/DCrhNtLgyxCcvqzq2e20l+l5xZHJXu1RK2sRLdTbYMCQ2tmAHgQakkfWl1vW +R+PRBuW2JPV6O2xKpIEOjVB5rA52FB8Rvi3IA8wSlpe6kKSKv7JBiycTVf+xB34 0uFts99RHu8nVNmvP9vyJsjn3xWYJ3pCTdY9d4Xmq6YyXvCdEaOqew6aBb+zBnAn hEoRmthTDNiJVRB2lVtaizMPAsAjNPM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:56 2025 by rpki-client