$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: YN1w+1BjdX52BdWAyZHFrxKzkfEoiy6+lTTCdYDI4P0= Subject key identifier: C4:00:B3:FB:0C:DB:74:62:15:C4:62:5C:23:BC:93:D9:B6:AC:68:22 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584AE1966D033518AE6585B50580 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6d:03:35:18:ae:65:85:b5:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=b25f40ea-b24e-44ea-af51-c207110d4b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:23:bd:49:e6:a0:2f:34:6f:dd:5d:f6:ab: eb:e4:07:58:8d:7e:f1:88:35:8e:db:9c:e8:15:fc: 8e:b2:c9:01:fe:62:3a:a2:8e:88:e8:a0:c1:9a:1e: bb:b9:82:be:e1:eb:4e:9b:86:db:16:ab:a1:ad:b4: f2:d9:ef:c0:a4:83:c3:7e:7d:cb:11:f6:50:a0:e2: 2a:a7:9c:fa:91:18:96:2b:50:20:c5:89:82:fb:57: 43:80:3d:6a:8b:00:59:9a:d8:e9:28:14:bd:d7:a5: 59:b3:c4:b6:de:81:73:e9:97:6f:8a:f3:67:be:cf: 53:e3:29:eb:9e:9c:84:f1:b4:b0:55:fb:a7:4c:cd: 43:e4:32:7a:08:28:21:ee:62:72:41:4d:b9:65:26: 36:c6:85:72:8b:b4:f7:05:d6:d7:6a:ed:b2:86:2e: 62:c6:65:76:c6:ce:df:ea:09:87:4d:fc:e5:d1:83: 65:16:0e:6a:b9:42:01:e3:a9:46:5d:98:c6:da:cc: 21:fb:51:28:40:64:5b:ae:4a:47:12:9c:3a:30:93: b6:e4:3c:68:72:b9:eb:5f:c8:3f:8d:a0:68:57:f4: 3c:2e:15:5b:40:9a:e9:10:a9:c5:e9:5e:20:a4:be: 2f:4c:e2:c1:10:98:41:dc:a8:b5:b2:ba:0f:28:18: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:B3:FB:0C:DB:74:62:15:C4:62:5C:23:BC:93:D9:B6:AC:68:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:08:8e:00:0c:50:dc:6a:ab:f0:b5:9b:cc:39:55:15:ca:16: 95:63:d5:e1:e3:f6:48:5e:55:97:7c:7c:7c:2d:49:48:f5:ea: 54:4f:57:c0:7d:18:11:f8:8f:88:cd:70:93:1b:2d:85:06:02: 8d:8f:53:70:00:87:3c:0b:a3:51:06:b2:5a:88:39:19:53:c7: 51:d2:03:5b:22:28:13:be:d0:f3:8e:a4:d6:bb:6f:17:cc:c0: 73:e2:55:24:54:3e:ab:f3:69:21:5e:89:fe:4d:17:9e:d5:f5: eb:7f:40:87:75:98:ba:14:9e:dc:da:5d:df:b5:66:bb:93:12: c6:e3:1b:7e:9e:b7:15:89:78:8a:4c:8a:02:c7:fb:e0:55:eb: 61:c7:df:79:ba:59:be:3f:e9:73:34:8d:e7:37:cf:6f:18:99: d4:bc:82:58:13:e8:a5:2b:df:64:63:e2:ca:ea:dd:cf:40:0a: e3:dd:5f:31:dc:55:a0:45:42:d4:32:21:a3:65:4e:4a:8a:33: 7b:5a:cb:d0:ea:fb:43:fd:83:3a:fe:3a:4c:d1:c6:89:8a:28: 38:e6:a5:ee:0d:dd:71:fa:01:a7:1e:29:d6:f0:4f:c5:89:23: 4e:06:d0:23:e8:5d:d1:59:29:ed:00:47:23:37:2f:62:9b:0a: 4f:db:da:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlm0DNRiuZYW1BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YjI1ZjQwZWEtYjI0ZS00NGVhLWFmNTEtYzIwNzExMGQ0YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg30jvUnmoC80b91d9qvr5AdYjX7xiDWO25zo FfyOsskB/mI6oo6I6KDBmh67uYK+4etOm4bbFquhrbTy2e/ApIPDfn3LEfZQoOIq p5z6kRiWK1AgxYmC+1dDgD1qiwBZmtjpKBS916VZs8S23oFz6ZdvivNnvs9T4ynr npyE8bSwVfunTM1D5DJ6CCgh7mJyQU25ZSY2xoVyi7T3BdbXau2yhi5ixmV2xs7f 6gmHTfzl0YNlFg5quUIB46lGXZjG2swh+1EoQGRbrkpHEpw6MJO25DxocrnrX8g/ jaBoV/Q8LhVbQJrpEKnF6V4gpL4vTOLBEJhB3Ki1sroPKBg/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQAs/sM23RiFcRiXCO8k9m2rGgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQIjgAMUNxqq/C1m8w5VRXKFpVj1eHj9kheVZd8fHwtSUj16lRPV8B9 GBH4j4jNcJMbLYUGAo2PU3AAhzwLo1EGslqIORlTx1HSA1siKBO+0POOpNa7bxfM wHPiVSRUPqvzaSFeif5NF57V9et/QId1mLoUntzaXd+1ZruTEsbjG36etxWJeIpM igLH++BV62HH33m6Wb4/6XM0jec3z28YmdS8glgT6KUr32Rj4srq3c9ACuPdXzHc VaBFQtQyIaNlTkqKM3tay9Dq+0P9gzr+OkzRxomKKDjmpe4N3XH6AaceKdbwT8WJ I04G0CPoXdFZKe0ARyM3L2KbCk/b2ng= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:07 2025 by rpki-client