$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa File: 75c92172-6911-32c6-b7a8-a35de8403ddd.roa (raw, json) Hash identifier: BkyL+TwqRepLd4pUqv7bmVBa+/A6Tei7SsPdpc2GPbs= Subject key identifier: 1E:E7:5C:59:3F:63:18:55:C7:CE:2F:7F:90:CB:F9:51:3B:A6:ED:3A Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584B92DCF10EAE9C75421FDDCD00 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 397301 IP address blocks: 172.99.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f1:0e:ae:9c:75:42:1f:dd:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=311f9ea4-9234-4f53-8ee7-8e7b5b811e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:d9:ff:70:95:6e:b0:9e:4c:1d:ce:85:01: b9:95:09:42:57:6c:95:b7:52:c4:da:f3:b0:c0:88: fd:a2:9b:cd:3c:8c:76:7d:69:e0:98:6f:e8:92:74: 57:20:99:15:76:c6:d3:21:28:96:48:32:c7:d8:71: 4d:c7:d5:d5:03:a7:d1:29:7c:67:2d:e8:4b:18:00: d5:d4:2f:89:16:a1:9d:34:25:28:aa:f9:b0:e4:2b: 23:05:7b:91:26:8c:3b:2b:33:86:ee:62:8f:26:03: ce:1c:94:ed:0f:56:ea:cc:2c:83:0a:26:c3:2f:d7: 65:a8:7b:d2:3e:79:4b:98:11:0c:dd:e0:2e:32:4a: e1:2a:ba:d0:7a:59:a3:08:c6:d3:b1:b2:bf:a9:20: a0:e2:78:aa:b3:cf:b7:8c:da:9b:06:d3:3b:e3:8f: 34:29:bb:93:1e:26:e4:77:c3:49:60:57:de:67:11: b0:21:b8:f4:f8:15:21:23:3f:b0:65:5e:b2:82:ce: 0d:f9:83:55:00:f2:76:8f:36:2f:b9:82:ed:f1:33: 09:29:1f:dc:0d:d9:6d:d7:fa:78:bb:c7:49:be:e0: 41:6a:fa:b5:67:8e:d6:4d:17:1c:81:73:5c:4c:12: 2a:dc:f2:31:46:03:eb:87:d5:40:bf:42:17:71:81: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:5C:59:3F:63:18:55:C7:CE:2F:7F:90:CB:F9:51:3B:A6:ED:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e0:e1:77:31:cd:f7:e8:ad:5c:be:03:d3:06:66:8f:14:dc: 1b:29:a2:a8:6f:95:45:98:c4:99:5f:68:6a:f9:68:35:72:74: 6a:d5:3c:44:d3:89:1b:c3:56:13:e6:f6:5e:a0:b9:51:0d:7a: 1c:e6:5b:07:59:c4:a6:9f:87:1b:25:d7:32:7d:69:5e:b3:26: 1b:bd:e7:24:96:6e:ae:93:09:1a:be:7e:bb:66:b1:f6:3d:29: 2e:b8:6e:dd:aa:4c:83:de:b3:ae:64:d9:57:8e:d0:82:cc:46: 04:fd:3b:30:d6:52:7c:55:6a:2a:6e:98:21:58:37:c7:ef:4b: 33:1e:d8:99:6b:7b:bb:1a:30:f1:e8:42:5e:cb:37:2c:c8:af: 64:83:bd:43:55:90:b9:1f:39:a2:01:3a:bb:ed:2d:fb:e1:56: 56:29:90:bd:f8:a8:c5:cc:1f:4a:d4:0d:49:af:93:66:25:14: 68:a7:3f:c2:de:84:32:03:0b:60:68:a9:8a:f3:69:29:d1:54: 7d:b5:87:e9:a8:37:81:ea:ad:e1:a2:88:45:c6:fa:bc:cb:99: 0e:29:fa:00:a5:3d:38:87:a3:e8:ff:dd:59:0c:e3:09:5c:0f: 6f:48:6e:82:71:83:ad:d8:97:54:96:d2:63:49:12:61:16:8d: 60:46:db:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PEOrpx1Qh/dzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MzExZjllYTQtOTIzNC00ZjUzLThlZTctOGU3YjViODExZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6rZ/3CVbrCeTB3OhQG5lQlCV2yVt1LE2vOw wIj9opvNPIx2fWngmG/oknRXIJkVdsbTISiWSDLH2HFNx9XVA6fRKXxnLehLGADV 1C+JFqGdNCUoqvmw5CsjBXuRJow7KzOG7mKPJgPOHJTtD1bqzCyDCibDL9dlqHvS PnlLmBEM3eAuMkrhKrrQelmjCMbTsbK/qSCg4niqs8+3jNqbBtM74480KbuTHibk d8NJYFfeZxGwIbj0+BUhIz+wZV6ygs4N+YNVAPJ2jzYvuYLt8TMJKR/cDdlt1/p4 u8dJvuBBavq1Z47WTRccgXNcTBIq3PIxRgPrh9VAv0IXcYEUEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7nXFk/YxhVx84vf5DL+VE7pu06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNzVjOTIxNzItNjkxMS0z MmM2LWI3YTgtYTM1ZGU4NDAzZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAng4XcxzfforVy+A9MGZo8U3BspoqhvlUWYxJlfaGr5aDVydGrVPETT iRvDVhPm9l6guVENehzmWwdZxKafhxsl1zJ9aV6zJhu95ySWbq6TCRq+frtmsfY9 KS64bt2qTIPes65k2VeO0ILMRgT9OzDWUnxVaipumCFYN8fvSzMe2Jlre7saMPHo Ql7LNyzIr2SDvUNVkLkfOaIBOrvtLfvhVlYpkL34qMXMH0rUDUmvk2YlFGinP8Le hDIDC2BoqYrzaSnRVH21h+moN4HqreGiiEXG+rzLmQ4p+gClPTiHo+j/3VkM4wlc D29IboJxg63Yl1SW0mNJEmEWjWBG28Q= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:14 2025 by rpki-client