$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa File: 6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa (raw, json) Hash identifier: 0p1nzfgQRm/17+zTvUx6XCIW0sM115HC4lem+IaFub0= Subject key identifier: 4E:90:F2:EB:D5:58:3B:CA:7D:BA:B4:BF:71:B6:FF:38:EB:C7:A0:B7 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584AD74FE9EB19C99C3DBC697780 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa Signing time: Wed 13 Aug 2025 08:40:34 +0000 ROA not before: Wed 13 Aug 2025 08:40:34 +0000 ROA not after: Tue 11 Nov 2025 09:40:34 +0000 asID: 401838 IP address blocks: 144.208.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:4f:e9:eb:19:c9:9c:3d:bc:69:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Aug 13 08:40:34 2025 GMT Not After : Nov 11 09:40:34 2025 GMT Subject: CN=38fae5c7-8dee-46b6-bf3e-3fb7de76eb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:37:7f:2b:37:be:dd:9c:69:2a:2e:11:3d: a8:05:d8:1b:83:96:cf:18:ae:4b:57:e0:4b:e9:72: fc:27:d4:29:a0:69:07:59:d3:de:0c:14:91:20:c7: d9:d5:d9:bf:05:c4:cb:c5:b6:85:14:88:8d:10:97: d3:cd:12:36:cd:c4:f5:eb:75:23:53:ab:ac:d4:42: 9b:f9:a9:69:8e:b2:79:74:9d:e6:22:58:b6:8b:ab: 2a:62:70:00:71:14:31:b6:83:71:21:3d:df:40:28: e6:a3:04:bf:43:5b:6f:37:7b:1d:b4:14:4f:d6:e6: 13:65:49:44:fc:90:99:83:0f:49:d2:f2:58:3f:8e: 69:7b:41:61:46:be:46:35:54:22:5d:34:a7:45:74: 53:a6:21:83:2d:68:80:50:31:5a:e6:63:c3:ae:cd: c2:7a:e5:dd:6b:19:ab:4d:bf:28:1c:4c:80:c8:61: c9:41:1e:05:fc:57:5e:08:74:f9:c3:be:f2:b2:3f: ba:5c:f7:3f:1e:52:e8:26:e3:a4:88:de:58:05:af: 16:26:77:62:14:65:55:8f:d6:de:b9:35:e9:91:f9: af:f0:89:68:9d:6e:fe:c2:22:a1:1c:66:29:9d:43: b4:52:08:79:e8:37:76:2e:71:f0:4d:0f:3d:50:3b: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:F2:EB:D5:58:3B:CA:7D:BA:B4:BF:71:B6:FF:38:EB:C7:A0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6414dd1f-dd0d-31dd-bf9c-08586ed3a075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:34:18:82:89:98:12:d7:a0:9d:0c:41:64:ef:9d:b5:ac:24: b4:ef:37:38:eb:42:4e:d7:07:f3:11:80:64:a6:28:85:f8:35: 80:1d:2f:37:2f:82:fc:30:c7:48:7a:68:2f:f4:c0:89:df:a6: 8b:c4:00:c9:3f:bc:df:b5:e4:b1:47:52:09:6f:bc:24:c0:b7: 9c:97:c4:b4:97:74:a8:43:8b:ed:85:cd:4a:12:66:a0:4a:45: a8:d1:72:90:70:a4:b3:fb:7c:cf:3b:eb:51:cf:05:7a:07:83: eb:df:f9:ee:31:49:cb:31:b8:19:71:fa:07:05:d0:f5:2a:6c: a6:ec:6e:77:88:4b:83:bf:9f:61:6b:2d:a4:b8:a5:4a:19:8a: cf:df:7f:c6:a3:f6:df:5a:68:fc:55:3f:36:3f:16:91:a2:40: d8:9e:90:e7:dc:66:5d:f8:0b:38:2b:08:b6:bc:f7:df:90:bc: 29:b9:1a:32:f6:ea:bb:5a:91:a5:31:5d:81:d1:d8:38:a8:5f: 31:3f:8a:83:85:d6:8e:07:8d:6d:3f:a4:9d:86:18:ca:dd:12: 59:0b:04:99:a8:00:9f:2b:b1:9e:27:d8:22:e4:1c:dc:85:28: df:be:9a:c4:07:27:23:2d:af:6f:a6:af:50:d0:79:fa:e4:57: eb:7f:d6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErXT+nrGcmcPbxpd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDgxMzA4NDAzNFoXDTI1MTExMTA5NDAzNFowLzEtMCsGA1UEAxMk MzhmYWU1YzctOGRlZS00NmI2LWJmM2UtM2ZiN2RlNzZlYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN43fys3vt2caSouET2oBdgbg5bPGK5LV+BL 6XL8J9QpoGkHWdPeDBSRIMfZ1dm/BcTLxbaFFIiNEJfTzRI2zcT163UjU6us1EKb +alpjrJ5dJ3mIli2i6sqYnAAcRQxtoNxIT3fQCjmowS/Q1tvN3sdtBRP1uYTZUlE /JCZgw9J0vJYP45pe0FhRr5GNVQiXTSnRXRTpiGDLWiAUDFa5mPDrs3CeuXdaxmr Tb8oHEyAyGHJQR4F/FdeCHT5w77ysj+6XPc/HlLoJuOkiN5YBa8WJndiFGVVj9be uTXpkfmv8IlonW7+wiKhHGYpnUO0Ugh56Dd2LnHwTQ89UDveJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6Q8uvVWDvKfbq0v3G2/zjrx6C3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjQxNGRkMWYtZGQwZC0z MWRkLWJmOWMtMDg1ODZlZDNhMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw0GIKJmBLXoJ0MQWTvnbWsJLTvNzjrQk7XB/MRgGSmKIX4NYAdLzcv gvwwx0h6aC/0wInfpovEAMk/vN+15LFHUglvvCTAt5yXxLSXdKhDi+2FzUoSZqBK RajRcpBwpLP7fM8761HPBXoHg+vf+e4xScsxuBlx+gcF0PUqbKbsbneIS4O/n2Fr LaS4pUoZis/ff8aj9t9aaPxVPzY/FpGiQNiekOfcZl34CzgrCLa899+QvCm5GjL2 6rtakaUxXYHR2DioXzE/ioOF1o4HjW0/pJ2GGMrdElkLBJmoAJ8rsZ4n2CLkHNyF KN++msQHJyMtr2+mr1DQefrkV+t/1mg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:50:19 2025 by rpki-client