$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7a597e0-e733-3910-b03b-f3560dd566f9.roa File: a7a597e0-e733-3910-b03b-f3560dd566f9.roa (raw, json) Hash identifier: 41pFtI8j4vXXGO0L8f/ckQgedDSib1CVSGNVE3aE8Ck= Subject key identifier: 02:79:28:B8:3B:02:EC:59:7D:44:E5:7F:28:1E:D0:4E:3E:16:9E:74 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B10445EE6F2F29805CF698C00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7a597e0-e733-3910-b03b-f3560dd566f9.roa Signing time: Tue 02 Sep 2025 18:18:24 +0000 ROA not before: Tue 02 Sep 2025 18:18:24 +0000 ROA not after: Mon 01 Dec 2025 19:18:24 +0000 asID: 401152 IP address blocks: 144.225.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:44:5e:e6:f2:f2:98:05:cf:69:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 18:18:24 2025 GMT Not After : Dec 1 19:18:24 2025 GMT Subject: CN=9a96cee5-0b6c-4a9c-adc1-3c68ec54094d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:69:6b:d5:7d:8d:12:63:f6:bc:e9:20:c1: b9:56:44:91:fc:97:fe:ff:48:97:c9:b3:7b:bc:f4: 60:e7:b9:50:94:f8:0f:77:48:42:b4:78:ef:d5:b7: 9f:f2:f5:cf:a0:8a:d6:1b:26:bb:f4:39:63:ab:dd: e0:7c:7b:61:59:85:de:a4:18:40:de:45:3a:6d:0a: 45:e5:42:01:a4:4a:09:78:54:dc:fb:e4:8c:d8:5f: a9:c5:e2:3d:cc:1a:0b:36:2c:94:06:25:87:45:aa: fc:d8:fe:bf:21:fc:e6:cd:00:91:03:db:9a:92:08: 90:f1:0d:aa:e4:f4:c2:a9:72:9e:36:21:e0:c0:ee: ee:d6:78:c5:82:05:90:b7:f8:35:3c:6a:f8:2b:c8: f3:a6:8f:89:cc:a7:8f:ad:92:dd:25:5c:b0:df:b1: 38:a4:e2:64:f3:43:35:ee:94:5d:15:61:49:ac:08: 22:f9:b5:dd:a6:5d:84:7d:14:74:ad:07:d3:43:8e: 8b:46:2b:14:1f:81:4f:ca:ec:fc:5b:30:e9:11:91: 25:0d:dc:d6:5f:9a:77:77:84:33:75:f6:15:72:fd: ae:7b:43:f1:56:44:a1:7c:e7:91:e9:c6:3a:95:1f: b2:69:79:42:47:c3:5a:67:74:f7:e0:ca:a8:52:b5: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:28:B8:3B:02:EC:59:7D:44:E5:7F:28:1E:D0:4E:3E:16:9E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7a597e0-e733-3910-b03b-f3560dd566f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:08:9e:bf:85:78:1d:50:84:53:66:49:3e:1d:65:4f:b1:ad: f2:f6:15:b7:bf:3f:e9:60:de:cb:94:96:c1:e6:1b:1e:77:1b: 0b:ce:c7:26:fe:77:86:a0:f4:b4:eb:28:b9:ea:d0:09:53:90: 83:d8:b6:1f:84:3e:2f:07:f7:b8:6d:a7:c2:80:79:c5:bd:1a: 0d:3c:c7:d6:a6:5d:55:e5:e9:15:5f:e0:89:03:f1:92:6c:73: ae:0b:ce:30:50:09:5d:19:b8:08:56:8d:5d:4a:8a:69:79:c2: 5b:0b:42:90:1b:b9:82:5e:52:5c:64:9c:42:02:eb:07:98:38: eb:d0:90:c8:be:3b:32:30:4c:39:86:4e:62:cb:93:82:9a:7f: cc:26:42:42:a7:26:86:52:0b:97:d0:68:67:7a:b5:86:6c:1d: 28:b2:20:3a:a6:df:0e:d9:44:5d:59:46:f0:18:e1:2f:6c:03: e4:cc:6a:f2:16:bc:24:2e:8e:9d:d5:05:29:95:ac:8d:56:ce: 45:cd:80:22:0a:7a:9e:26:38:8d:ef:ed:32:25:13:b7:31:ea: 54:5e:5c:2a:20:d8:d0:63:12:a2:0e:2a:9c:32:19:cc:7a:1c: 10:2b:f2:4a:5c:92:7a:6a:66:a5:63:49:12:1a:38:2e:79:69: c3:82:81:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQRF7m8vKYBc9pjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjE4MTgyNFoXDTI1MTIwMTE5MTgyNFowLzEtMCsGA1UEAxMk OWE5NmNlZTUtMGI2Yy00YTljLWFkYzEtM2M2OGVjNTQwOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxhpa9V9jRJj9rzpIMG5VkSR/Jf+/0iXybN7 vPRg57lQlPgPd0hCtHjv1bef8vXPoIrWGya79Dljq93gfHthWYXepBhA3kU6bQpF 5UIBpEoJeFTc++SM2F+pxeI9zBoLNiyUBiWHRar82P6/IfzmzQCRA9uakgiQ8Q2q 5PTCqXKeNiHgwO7u1njFggWQt/g1PGr4K8jzpo+JzKePrZLdJVyw37E4pOJk80M1 7pRdFWFJrAgi+bXdpl2EfRR0rQfTQ46LRisUH4FPyuz8WzDpEZElDdzWX5p3d4Qz dfYVcv2ue0PxVkShfOeR6cY6lR+yaXlCR8NaZ3T34MqoUrXoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ5KLg7AuxZfUTlfyge0E4+Fp50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTdhNTk3ZTAtZTczMy0z OTEwLWIwM2ItZjM1NjBkZDU2NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcInr+FeB1QhFNmST4dZU+xrfL2Fbe/P+lg3suUlsHmGx53GwvOxyb+ d4ag9LTrKLnq0AlTkIPYth+EPi8H97htp8KAecW9Gg08x9amXVXl6RVf4IkD8ZJs c64LzjBQCV0ZuAhWjV1Kiml5wlsLQpAbuYJeUlxknEIC6weYOOvQkMi+OzIwTDmG TmLLk4Kaf8wmQkKnJoZSC5fQaGd6tYZsHSiyIDqm3w7ZRF1ZRvAY4S9sA+TMavIW vCQujp3VBSmVrI1WzkXNgCIKep4mOI3v7TIlE7cx6lReXCog2NBjEqIOKpwyGcx6 HBAr8kpcknpqZqVjSRIaOC55acOCgW4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:13 2025 by rpki-client