$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa File: a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa (raw, json) Hash identifier: 9WoJDdfvFYrtFtUuDdRWKfuf3oIt2Mp8teMsTzr+RyY= Subject key identifier: B2:5C:59:00:FF:33:E4:AA:68:50:5B:0F:18:8A:BC:26:7C:B2:2D:EB Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524B4AFB7547B234300A40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 107.144.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4b:4a:fb:75:47:b2:34:30:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=91d4d2e8-a09d-42e8-b1d6-86b6dac3f3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:c7:c2:f1:bc:d6:1a:89:a2:ea:0c:85:1e: 84:80:03:e5:75:02:bf:0a:2e:e8:5e:e9:e4:ff:e8: 7c:34:57:21:3f:89:46:ca:5f:41:7d:36:f0:df:07: 1e:3b:74:20:80:9b:74:f3:b5:97:5a:c0:6a:ff:62: b1:a8:27:e7:15:5b:9f:53:ca:9e:ba:d3:ac:a4:46: e5:40:dc:cc:27:10:74:9f:72:c5:5a:45:fd:4d:ba: da:c0:d4:1d:f2:c5:c9:10:25:a7:35:0b:f3:06:34: 5b:a9:1c:a0:ca:19:09:37:76:00:60:61:ef:cb:84: e5:96:f3:62:20:3c:2d:e1:b6:9a:3f:76:4d:57:32: 63:23:cd:66:3f:64:bb:cc:cd:9f:5a:3a:8e:fe:b4: 95:fd:cf:8d:ea:61:de:43:c8:b8:be:17:81:ab:91: 04:a2:9c:06:42:cb:8a:07:ba:e0:32:8c:7f:e4:bd: a0:26:88:97:3f:34:90:cc:67:fc:4a:3a:dc:58:54: 67:5a:b6:5a:99:1c:5d:3f:70:1e:7e:c4:65:7c:76: 20:55:56:52:b2:a0:23:cd:de:e6:64:27:e4:c5:49: 4c:7a:ed:25:bd:d1:e0:fc:f3:40:e9:95:81:37:19: 9b:27:ef:3d:d0:91:d8:2b:44:4e:f3:7e:b0:4c:e1: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:59:00:FF:33:E4:AA:68:50:5B:0F:18:8A:BC:26:7C:B2:2D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 107.144.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:19:b3:f2:30:85:2e:4f:e3:08:dd:90:8f:e5:79:cc:af:9d: c1:55:3b:8b:c5:7f:5b:1a:cd:b1:3e:f1:c8:a8:83:00:58:a5: dc:f3:86:6b:97:be:22:a0:d9:d5:55:4c:45:96:38:33:b6:f3: 27:d5:b3:3a:d7:1e:b1:67:0c:23:cc:bc:07:8b:31:59:9a:21: d4:36:d3:df:92:e6:41:80:4a:b4:05:3e:af:4c:3c:68:7a:6a: f8:71:e8:cb:94:8c:0d:79:a8:6d:1f:a3:97:83:1d:6c:57:03: 53:05:0a:90:18:5c:c1:0f:1f:f9:0e:c3:85:7f:54:94:f2:2c: 1f:de:29:08:28:88:a3:51:6b:e5:a4:ff:a6:9a:73:ec:99:76: 6d:d8:4e:85:88:b5:7c:4f:7c:c0:d4:28:1b:54:b1:ec:31:1f: c7:bc:0c:21:74:bf:e9:4e:c5:7b:f7:6c:d8:80:ca:7d:75:e2: d0:96:6d:95:ed:c8:6a:9a:d9:6f:8c:5e:60:95:d0:be:98:67: b0:81:28:96:d3:fc:82:be:f6:cb:6b:f3:b9:c1:e3:9d:4b:a8: 78:cd:c7:8b:f0:ec:2a:de:f3:49:14:7b:23:f8:e0:f4:f2:9f: db:c3:c0:88:11:98:13:ce:c0:af:0a:b2:65:8e:29:80:3f:15: 1f:24:d5:b3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt/UktK+3VHsjQwCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTFkNGQyZTgtYTA5ZC00MmU4LWIxZDYtODZiNmRhYzNmM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGnHwvG81hqJouoMhR6EgAPldQK/Ci7oXunk /+h8NFchP4lGyl9BfTbw3wceO3QggJt087WXWsBq/2KxqCfnFVufU8qeutOspEbl QNzMJxB0n3LFWkX9TbrawNQd8sXJECWnNQvzBjRbqRygyhkJN3YAYGHvy4TllvNi IDwt4baaP3ZNVzJjI81mP2S7zM2fWjqO/rSV/c+N6mHeQ8i4vheBq5EEopwGQsuK B7rgMox/5L2gJoiXPzSQzGf8SjrcWFRnWrZamRxdP3AefsRlfHYgVVZSsqAjzd7m ZCfkxUlMeu0lvdHg/PNA6ZWBNxmbJ+890JHYK0RO836wTOGZYQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLJcWQD/M+SqaFBbDxiKvCZ8si3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTg1ZGM5ZWQtODg4Ny0z YzQ4LWFjYzItY2ZiYTVlOGRlMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBa5AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJRmz8jCFLk/jCN2Qj+V5zK+dwVU7i8V/WxrNsT7xyKiDAFil3POGa5e+ IqDZ1VVMRZY4M7bzJ9WzOtcesWcMI8y8B4sxWZoh1DbT35LmQYBKtAU+r0w8aHpq +HHoy5SMDXmobR+jl4MdbFcDUwUKkBhcwQ8f+Q7DhX9UlPIsH94pCCiIo1Fr5aT/ pppz7Jl2bdhOhYi1fE98wNQoG1Sx7DEfx7wMIXS/6U7Fe/ds2IDKfXXi0JZtle3I aprZb4xeYJXQvphnsIEoltP8gr72y2vzucHjnUuoeM3Hi/DsKt7zSRR7I/jg9PKf 28PAiBGYE87ArwqyZY4pgD8VHyTVsw== -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:08 2025 by rpki-client