$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa File: 9ed460a0-30e5-359a-99af-46da230b9dbc.roa (raw, json) Hash identifier: CI4l9K0cdQ+NsvmufomYxd2TV/oFuEZK6gsibqNiNl4= Subject key identifier: 5F:B6:47:8A:DD:3A:E4:7F:E8:4E:EF:4A:99:5D:5C:D6:7C:25:89:92 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584AEE268910A4B926E22AA23880 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 144.36.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:89:10:a4:b9:26:e2:2a:a2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6ae5766d-f83d-400a-8e79-cbe1426704b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:78:b1:9e:83:68:ec:1c:0a:c6:2d:a4:83: 99:81:ec:3c:5a:d6:9c:f5:29:c5:3b:be:81:6c:44: 9a:d5:26:22:11:77:6a:95:77:12:db:31:8e:5d:c6: 73:2a:69:70:6f:2d:aa:19:80:70:7b:94:f8:59:55: 77:d4:89:04:a0:94:52:9f:06:fc:7c:40:e5:6f:4f: 5b:0e:d2:0c:4b:fd:ae:17:94:8b:65:78:23:fd:a9: 64:f3:d9:b4:06:9f:70:8a:13:db:ed:4f:62:71:aa: 02:22:ee:03:48:ac:44:bf:f7:8f:6e:6d:3c:94:45: fd:c0:0b:40:4b:9a:7f:fc:89:80:27:64:60:9c:46: ba:6c:86:ec:73:b9:e1:78:13:7b:dc:19:db:02:32: 0e:90:d5:e9:bb:4a:c6:3a:78:05:b6:a1:9b:3e:58: cc:68:6b:07:66:a5:d4:c0:7b:d6:08:06:03:50:b9: 80:1c:aa:78:2f:82:d6:b8:f6:d1:9b:ba:5a:02:f0: c9:e6:f0:19:7d:1d:f6:a6:20:11:b8:83:86:eb:ac: 05:8e:70:59:e7:ca:2f:e4:cd:b1:f6:e1:e0:e3:be: 04:ea:97:24:72:f6:89:b1:87:7b:fd:65:bc:3d:e2: 12:47:b6:8b:30:66:94:78:91:ad:82:e4:52:f8:e2: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:47:8A:DD:3A:E4:7F:E8:4E:EF:4A:99:5D:5C:D6:7C:25:89:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:12:98:72:93:50:f9:12:7d:8e:9e:69:cc:03:eb:f6:4f:d4: 3b:c5:42:3e:0a:e5:57:b4:0c:6b:64:59:9d:93:3c:e2:5f:04: 7c:ac:2a:d0:52:fa:cb:72:fe:86:5e:a5:a0:de:19:45:88:5d: 41:89:ca:5a:43:05:91:d8:72:30:f1:32:9d:be:61:93:ca:ea: fd:40:58:8c:c9:da:d2:b2:61:0a:57:3d:84:2c:c2:db:63:28: 0d:7a:2a:49:ad:ba:f2:5d:06:fc:51:5c:db:c6:1a:11:ff:0d: d6:d7:6b:e6:21:c7:a9:f2:de:21:6b:5c:42:62:80:1d:cc:4a: 97:34:77:fe:37:7e:b8:0a:81:1c:03:d2:e7:67:37:71:36:9d: ce:75:f4:06:bf:57:e0:4f:3c:e4:98:87:2a:24:6a:18:30:8f: af:b7:32:68:42:ab:f2:e4:8e:60:0c:39:90:fd:42:c3:c4:2b: 83:1f:55:bd:a4:d4:4b:20:00:55:16:ae:d5:39:c8:d5:a7:d0: d2:83:0d:ee:c0:12:2c:27:a6:c7:7b:49:7e:b7:e8:ae:1c:26: b4:23:55:6c:e5:5d:09:e8:e1:59:46:81:c2:14:b8:61:e6:85: 70:83:42:82:34:71:a8:68:e7:f0:d8:6d:c3:62:1f:30:90:6a: 60:99:a0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJokQpLkm4iqiOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmFlNTc2NmQtZjgzZC00MDBhLThlNzktY2JlMTQyNjcwNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu054sZ6DaOwcCsYtpIOZgew8Wtac9SnFO76B bESa1SYiEXdqlXcS2zGOXcZzKmlwby2qGYBwe5T4WVV31IkEoJRSnwb8fEDlb09b DtIMS/2uF5SLZXgj/alk89m0Bp9wihPb7U9icaoCIu4DSKxEv/ePbm08lEX9wAtA S5p//ImAJ2RgnEa6bIbsc7nheBN73BnbAjIOkNXpu0rGOngFtqGbPljMaGsHZqXU wHvWCAYDULmAHKp4L4LWuPbRm7paAvDJ5vAZfR32piARuIOG66wFjnBZ58ov5M2x 9uHg474E6pckcvaJsYd7/WW8PeISR7aLMGaUeJGtguRS+OLc4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+2R4rdOuR/6E7vSpldXNZ8JYmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOWVkNDYwYTAtMzBlNS0z NTlhLTk5YWYtNDZkYTIzMGI5ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADISmHKTUPkSfY6eacwD6/ZP1DvFQj4K5Ve0DGtkWZ2TPOJfBHysKtBS +sty/oZepaDeGUWIXUGJylpDBZHYcjDxMp2+YZPK6v1AWIzJ2tKyYQpXPYQswttj KA16KkmtuvJdBvxRXNvGGhH/DdbXa+Yhx6ny3iFrXEJigB3MSpc0d/43frgKgRwD 0udnN3E2nc519Aa/V+BPPOSYhyokahgwj6+3MmhCq/LkjmAMOZD9QsPEK4MfVb2k 1EsgAFUWrtU5yNWn0NKDDe7AEiwnpsd7SX636K4cJrQjVWzlXQno4VlGgcIUuGHm hXCDQoI0caho5/DYbcNiHzCQamCZoL4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:30 2025 by rpki-client