$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ad69f7e3-f238-33c0-a7af-142ecd7edee5.roa File: ad69f7e3-f238-33c0-a7af-142ecd7edee5.roa (raw, json) Hash identifier: X+kjvNzTSwuNSOCPHNvcCwrzwr5m3K9pdS8LYx6WpEg= Subject key identifier: B2:20:02:70:9F:0E:D3:D7:95:22:50:F8:34:97:77:CA:D3:AC:1F:21 Certificate issuer: /CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d Certificate serial: 010D0C9F4328584B4D11D494FEC6FAD63D250740 Authority key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ad69f7e3-f238-33c0-a7af-142ecd7edee5.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 205.236.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d4:94:fe:c6:fa:d6:3d:25:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=76b3c4a4-70e1-4767-8ba2-d4eba790b3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:77:e4:ed:e0:50:db:82:ac:59:8c:a0:9c: ec:e2:e8:a4:28:64:31:e8:32:64:a5:64:ce:9e:c1: b3:ad:91:c5:bf:0f:e9:d0:3e:4b:4b:c8:05:b9:a8: 74:35:d9:25:38:69:4c:78:e5:5d:ed:35:51:9b:77: 99:14:b1:e9:51:f8:c1:64:ba:7c:d4:12:85:a4:7a: 82:e7:22:21:7c:65:8e:d8:ce:1d:1e:77:c7:eb:f1: 64:f2:6b:dc:9e:54:9a:cf:0b:56:0d:50:92:a4:f9: 00:24:fe:f9:a3:5a:42:3d:81:0c:34:41:7f:bf:db: c9:22:23:a5:5c:c4:c6:dc:82:82:a3:d8:9f:b5:1f: 12:70:b7:b4:8d:67:cb:60:3f:bf:79:21:18:50:71: d1:be:65:76:c4:66:d7:20:e0:1a:4c:fd:25:d6:df: 51:27:e4:b5:6a:08:f3:a0:50:08:ba:f8:8f:64:af: b6:0a:f5:11:e2:66:e5:ce:3b:4f:69:22:b8:41:9b: 76:f8:b8:51:a0:21:30:bf:49:27:1d:20:c7:eb:83: 65:4b:f6:5b:75:00:2a:f2:67:29:8a:5f:be:3b:b5: 9a:53:77:b9:a1:8a:60:ac:c5:15:22:8b:81:6b:28: 0a:8e:22:b4:0b:86:e2:e7:bb:64:91:f8:1d:c0:c5: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:02:70:9F:0E:D3:D7:95:22:50:F8:34:97:77:CA:D3:AC:1F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ad69f7e3-f238-33c0-a7af-142ecd7edee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl X509v3 Authority Key Identifier: keyid:AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer sbgp-ipAddrBlock: critical IPv4: 205.236.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:de:57:7a:7d:3b:50:71:cf:8d:80:65:7f:23:7f:f5:c6:fe: c5:7c:4d:55:41:67:ee:00:c6:43:10:37:33:43:68:8d:e5:a4: a4:e4:24:dd:4f:0d:27:ac:eb:0e:a7:fc:b1:3f:aa:99:a7:2c: 5e:ef:04:9d:9b:0b:d9:73:89:5b:f0:33:c3:ca:37:63:02:3b: 74:e4:41:b0:2d:9d:75:0a:a2:01:e9:8b:27:6a:41:32:96:ea: 15:fe:72:cc:61:9e:c8:85:be:00:e7:1a:37:f6:9b:c9:83:44: 95:07:13:19:1d:d8:e1:78:0d:8b:43:90:1f:fa:de:9c:28:98: c4:86:3e:85:1d:df:ba:66:91:6b:5e:12:7d:95:15:f8:9b:21: 03:ef:f3:9a:8a:3d:84:63:7f:9a:99:43:08:06:11:a5:95:4f: b9:7b:ba:e1:83:52:a9:85:83:58:63:e5:b1:6d:da:9a:e3:ea: cd:91:9f:ed:c0:0c:00:9a:bb:bf:ac:d9:5c:8c:e3:7b:52:7f: 96:41:25:a6:60:61:90:2d:0c:2e:be:69:7b:a3:e4:49:c9:21: c1:3d:25:8e:30:e2:89:18:60:30:ba:aa:21:ba:83:1e:c1:0a: f3:5c:69:f0:4a:40:bd:41:a1:c5:0d:7a:f4:c7:77:b6:40:a4: 51:1a:df:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdSU/sb61j0lB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkNDQ3NDUtNGVjOS00ZjEzLWEwMWQtNzBiYjJmM2Fk YjhkMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NzZiM2M0YTQtNzBlMS00NzY3LThiYTItZDRlYmE3OTBiM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo135O3gUNuCrFmMoJzs4uikKGQx6DJkpWTO nsGzrZHFvw/p0D5LS8gFuah0NdklOGlMeOVd7TVRm3eZFLHpUfjBZLp81BKFpHqC 5yIhfGWO2M4dHnfH6/Fk8mvcnlSazwtWDVCSpPkAJP75o1pCPYEMNEF/v9vJIiOl XMTG3IKCo9iftR8ScLe0jWfLYD+/eSEYUHHRvmV2xGbXIOAaTP0l1t9RJ+S1agjz oFAIuviPZK+2CvUR4mblzjtPaSK4QZt2+LhRoCEwv0knHSDH64NlS/ZbdQAq8mcp il++O7WaU3e5oYpgrMUVIouBaygKjiK0C4bi57tkkfgdwMUipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIgAnCfDtPXlSJQ+DSXd8rTrB8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMWQ0 NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYzYWRiOGQvYWQ2OWY3ZTMtZjIzOC0z M2MwLWE3YWYtMTQyZWNkN2VkZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjFkNDQ3NDUtNGVjOS00ZjEzLWEw MWQtNzBiYjJmM2FkYjhkLzIxZDQ0NzQ1LTRlYzktNGYxMy1hMDFkLTcwYmIyZjNh ZGI4ZC5jcmwwHwYDVR0jBBgwFoAUrTRyULHAxcgP1MuGnOzf0RfvLecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJi MmYzYWRiOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMneV3p9O1Bxz42AZX8jf/XG/sV8TVVBZ+4AxkMQNzNDaI3lpKTkJN1P DSes6w6n/LE/qpmnLF7vBJ2bC9lziVvwM8PKN2MCO3TkQbAtnXUKogHpiydqQTKW 6hX+csxhnsiFvgDnGjf2m8mDRJUHExkd2OF4DYtDkB/63pwomMSGPoUd37pmkWte En2VFfibIQPv85qKPYRjf5qZQwgGEaWVT7l7uuGDUqmFg1hj5bFt2prj6s2Rn+3A DACau7+s2VyM43tSf5ZBJaZgYZAtDC6+aXuj5EnJIcE9JY4w4okYYDC6qiG6gx7B CvNcafBKQL1BocUNevTHd7ZApFEa3xk= -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:05 2025 by rpki-client