$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa File: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (raw, json) Hash identifier: sPzNexbW1+95DjELFZvzOLAKYG/r9Ok/Ho/NCqggip0= Subject key identifier: F6:6F:04:AA:49:3A:B4:7A:EC:9F:DB:7C:DB:33:94:E1:A4:EE:74:3C Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584AE46110535BAC4DAB57667F60 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:10:53:5b:ac:4d:ab:57:66:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=6b620d55-78a6-47e3-b7ba-6f686f48d1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:f1:eb:e5:e6:0e:e4:d5:2c:13:ee:46:9a: cf:d5:8f:71:ac:49:ca:af:af:74:d9:4d:2e:52:a8: 91:1d:10:64:33:8e:9a:dc:aa:ac:01:25:45:78:c0: ac:a2:7e:7b:0e:34:25:63:69:2f:ae:07:96:da:99: 89:58:bc:96:4d:90:3e:04:21:90:0b:72:65:1c:7b: f7:9a:f9:cc:c9:5f:d7:28:fa:56:08:b5:29:6a:cb: 40:15:ab:da:09:05:2b:8f:10:27:ca:fb:1c:b6:51: cc:a8:15:50:a0:6d:ea:59:2b:b7:0b:40:f4:88:83: 06:f5:d1:c4:6b:03:83:d7:79:22:23:16:15:a1:0b: 70:61:26:68:bc:76:db:20:2e:dc:23:84:dc:69:dd: b3:2a:46:22:3c:ef:eb:f5:b8:93:b1:fb:70:2f:ee: b3:23:24:50:18:67:3a:93:e2:8e:34:72:9a:60:b1: eb:76:1e:41:9e:08:26:00:f3:30:92:80:78:34:b2: 65:4d:18:28:73:0e:d8:aa:61:9a:a7:21:17:e6:e4: 06:52:b0:a5:46:66:0f:ee:57:f7:96:9b:fa:47:39: 86:f6:bc:e7:f7:38:c5:c3:34:c3:d3:47:33:d4:1a: f0:e8:a0:ed:ef:e1:f1:cd:19:62:64:ba:2f:18:52: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6F:04:AA:49:3A:B4:7A:EC:9F:DB:7C:DB:33:94:E1:A4:EE:74:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:09:67:eb:43:c8:1c:4f:2a:b7:32:70:20:11:12:24:ba:3b: 96:c8:0b:98:2e:0e:45:17:ee:0b:e5:1d:a5:cd:e2:e2:10:0c: 55:7f:3f:12:0d:e6:5d:77:21:fa:d1:29:2e:4a:c5:8b:09:d5: 21:c1:85:c5:c0:0f:dc:ff:e6:e4:04:46:77:30:6e:56:97:99: 07:86:e3:e3:a5:ad:e7:58:f2:c4:6e:b6:aa:38:df:df:62:a6: a3:c8:42:1c:14:b9:e1:bf:20:fd:2e:ed:81:50:e3:43:4d:6b: f7:45:1c:74:46:61:46:a4:e6:59:89:41:22:f8:28:b1:81:d3: 95:ad:d3:c0:6d:28:d0:dd:a1:39:6e:cf:c4:79:d8:ac:a4:db: ef:f4:d6:81:5c:56:40:86:0e:67:91:16:33:25:17:42:4b:7f: 77:06:0a:2f:9f:99:79:95:e1:9f:32:8a:41:51:99:91:27:13: c6:03:a8:59:48:e5:81:69:60:b6:e1:dc:ca:ca:e8:9c:85:70: a8:8d:da:c5:39:10:6e:81:5e:4f:6e:23:b7:7f:72:95:25:57: 0c:39:7c:db:6d:ad:8a:dd:76:6c:46:7c:91:5b:6c:bc:e1:3b: 95:3e:a3:83:b3:36:16:27:4e:8c:50:e9:3d:bf:6c:30:12:3b: 20:a2:03:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRBTW6xNq1dmf2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NmI2MjBkNTUtNzhhNi00N2UzLWI3YmEtNmY2ODZmNDhkMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrzx6+XmDuTVLBPuRprP1Y9xrEnKr6902U0u UqiRHRBkM46a3KqsASVFeMCson57DjQlY2kvrgeW2pmJWLyWTZA+BCGQC3JlHHv3 mvnMyV/XKPpWCLUpastAFavaCQUrjxAnyvsctlHMqBVQoG3qWSu3C0D0iIMG9dHE awOD13kiIxYVoQtwYSZovHbbIC7cI4Tcad2zKkYiPO/r9biTsftwL+6zIyRQGGc6 k+KONHKaYLHrdh5BnggmAPMwkoB4NLJlTRgocw7YqmGapyEX5uQGUrClRmYP7lf3 lpv6RzmG9rzn9zjFwzTD00cz1Brw6KDt7+HxzRliZLovGFJk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZvBKpJOrR67J/bfNszlOGk7nQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMTI5ZWU1MmItNjA5ZC0z NmQ5LWE1YWMtMTEwOGUwYjBkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkJZ+tDyBxPKrcycCAREiS6O5bIC5guDkUX7gvlHaXN4uIQDFV/PxIN 5l13IfrRKS5KxYsJ1SHBhcXAD9z/5uQERncwblaXmQeG4+OlredY8sRutqo4399i pqPIQhwUueG/IP0u7YFQ40NNa/dFHHRGYUak5lmJQSL4KLGB05Wt08BtKNDdoTlu z8R52Kyk2+/01oFcVkCGDmeRFjMlF0JLf3cGCi+fmXmV4Z8yikFRmZEnE8YDqFlI 5YFpYLbh3MrK6JyFcKiN2sU5EG6BXk9uI7d/cpUlVww5fNttrYrddmxGfJFbbLzh O5U+o4OzNhYnToxQ6T2/bDASOyCiA5Y= -----END CERTIFICATE-----Generated at Sat Aug 23 08:25:16 2025 by rpki-client