$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa File: 02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa (raw, json) Hash identifier: bwYZysjbrY6naN/qZvBnKZ9DNfRe0OmKIjwG8/L2v/M= Subject key identifier: 0D:14:87:3A:08:A5:31:BE:C5:E5:F0:3E:89:B7:8E:86:61:0E:1D:95 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADDD694E955A4A949FEB00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa Signing time: Thu 21 Aug 2025 17:33:28 +0000 ROA not before: Thu 21 Aug 2025 17:33:28 +0000 ROA not after: Wed 19 Nov 2025 18:33:28 +0000 asID: 31898 IP address blocks: 144.25.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:dd:69:4e:95:5a:4a:94:9f:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:28 2025 GMT Not After : Nov 19 18:33:28 2025 GMT Subject: CN=fee25fb2-4653-4668-87d2-ec1417f147a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:10:55:71:04:4c:f5:9d:78:44:e6:ae:0c: cc:fd:cd:be:f4:fe:2f:ff:7f:58:f8:48:33:40:a9: ad:66:82:a7:43:3b:fb:f7:bf:d1:4d:c6:d3:8d:aa: f9:82:1c:52:0b:d2:40:02:44:59:f3:3c:6d:c2:45: 0d:c5:44:9a:6d:25:70:89:b9:7a:15:4f:6f:42:29: d4:50:cd:43:3d:66:9b:7a:e2:31:15:6b:c3:9a:7a: 70:f4:76:17:e1:3e:1a:27:6d:ca:da:1e:16:cb:56: 9e:4e:3d:66:d8:3c:de:70:27:c9:52:19:e5:c1:74: 81:17:d1:ad:97:59:ec:f4:41:86:58:20:f5:a0:d7: 0c:41:f7:b1:e4:b5:88:2d:4f:ed:19:f7:18:84:2c: 42:f3:5d:f7:3b:50:a0:24:38:d7:16:39:a9:70:e1: 93:27:3c:b9:d1:46:90:eb:0b:4f:48:71:4c:84:bd: 8b:61:7e:b0:fa:5c:f9:b3:59:c8:d9:52:6e:09:91: 65:99:85:2f:1a:ec:6a:2c:63:cb:d8:38:4f:12:07: 61:9c:b6:35:cc:00:9c:fa:82:b2:f6:43:32:03:ff: a3:d5:0a:73:a0:0e:07:d7:fb:67:40:9c:0b:96:11: 5c:f4:4f:cb:6a:78:0c:55:42:d7:ac:40:c2:f6:dc: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:14:87:3A:08:A5:31:BE:C5:E5:F0:3E:89:B7:8E:86:61:0E:1D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/02f572c5-d288-32b0-91a6-8e2d4ea5a530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:46:fd:76:9c:22:9a:70:4b:b9:84:c0:cf:ad:84:b6:84:12: 3d:9b:a5:e0:c8:df:51:28:08:b5:2e:07:57:9b:63:af:08:5c: 63:32:32:e3:23:9a:7d:a3:d4:62:8b:89:4c:1f:ba:eb:8c:49: 66:ba:05:26:45:62:32:56:11:49:ce:75:6a:5e:4f:14:9a:d3: 5d:6d:69:f5:06:b7:64:54:3a:97:d2:8c:9c:9e:3a:62:30:7a: 0a:9b:52:9b:85:1a:ec:92:85:ce:c2:01:42:76:dd:0a:6d:06: c8:e2:64:39:7c:58:3f:99:72:c8:97:78:23:a9:1f:e5:5f:6d: 98:be:92:c4:5d:21:3c:c0:b8:63:fc:db:4e:fd:c7:34:9b:63: 1a:f6:cb:90:e2:a6:97:63:72:e8:77:7a:e4:ff:15:00:ee:c1: f2:e6:3c:ec:a7:73:ab:85:8f:9e:55:71:d2:11:77:d1:fd:00: c2:d1:a0:c9:4f:07:a1:2e:39:3e:14:34:a3:70:e9:e0:a8:48: 89:de:c3:1d:c6:38:f9:0c:6a:7b:1a:bf:53:12:e5:c7:15:0d: 71:23:10:c8:e6:56:c0:4b:5a:56:6a:2a:47:4a:dd:d1:f9:5c: ea:03:36:14:2a:98:59:86:13:f8:46:11:fa:5e:d0:46:1d:8b: 12:4c:fd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurd1pTpVaSpSf6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMyOFoXDTI1MTExOTE4MzMyOFowLzEtMCsGA1UEAxMk ZmVlMjVmYjItNDY1My00NjY4LTg3ZDItZWMxNDE3ZjE0N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6EQVXEETPWdeETmrgzM/c2+9P4v/39Y+Egz QKmtZoKnQzv797/RTcbTjar5ghxSC9JAAkRZ8zxtwkUNxUSabSVwibl6FU9vQinU UM1DPWabeuIxFWvDmnpw9HYX4T4aJ23K2h4Wy1aeTj1m2DzecCfJUhnlwXSBF9Gt l1ns9EGGWCD1oNcMQfex5LWILU/tGfcYhCxC8133O1CgJDjXFjmpcOGTJzy50UaQ 6wtPSHFMhL2LYX6w+lz5s1nI2VJuCZFlmYUvGuxqLGPL2DhPEgdhnLY1zACc+oKy 9kMyA/+j1QpzoA4H1/tnQJwLlhFc9E/LangMVULXrEDC9tyimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0UhzoIpTG+xeXwPom3joZhDh2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMDJmNTcyYzUtZDI4OC0z MmIwLTkxYTYtOGUyZDRlYTVhNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpG/XacIppwS7mEwM+thLaEEj2bpeDI31EoCLUuB1ebY68IXGMyMuMj mn2j1GKLiUwfuuuMSWa6BSZFYjJWEUnOdWpeTxSa011tafUGt2RUOpfSjJyeOmIw egqbUpuFGuyShc7CAUJ23QptBsjiZDl8WD+ZcsiXeCOpH+VfbZi+ksRdITzAuGP8 2079xzSbYxr2y5Dippdjcuh3euT/FQDuwfLmPOync6uFj55VcdIRd9H9AMLRoMlP B6EuOT4UNKNw6eCoSInewx3GOPkMansav1MS5ccVDXEjEMjmVsBLWlZqKkdK3dH5 XOoDNhQqmFmGE/hGEfpe0EYdixJM/Qk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:46 2025 by rpki-client