$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa File: 5fd301a7-3fa3-3db8-86fd-2366cec59320.roa (raw, json) Hash identifier: ZDYt2g0IPGrG75ukZGYeU0LVKGoeywPZmlYask5KQVE= Subject key identifier: CA:3C:7E:1E:2E:37:90:42:AB:5D:57:B4:4F:F7:33:32:38:DF:5B:54 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF5602A415575B35A36D8280 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa Signing time: Thu 21 Aug 2025 23:12:15 +0000 ROA not before: Thu 21 Aug 2025 23:12:15 +0000 ROA not after: Thu 20 Nov 2025 00:12:15 +0000 asID: 31898 IP address blocks: 144.25.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:56:02:a4:15:57:5b:35:a3:6d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:12:15 2025 GMT Not After : Nov 20 00:12:15 2025 GMT Subject: CN=a85247cf-a922-4c5f-ac6a-0edea016bc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:3a:3c:cd:73:ec:c7:d9:f3:9c:62:55:b8: 93:5d:ca:7f:bb:99:eb:a2:1c:0f:ed:17:ad:fc:0a: ca:3b:f2:22:1a:77:53:4d:e0:d7:2c:39:96:84:1a: 2b:47:aa:de:9e:f3:81:b3:78:2e:c0:f3:a7:c0:eb: 0c:45:56:7d:5d:5d:42:af:9c:32:be:0e:a4:67:b2: 8d:06:d0:8d:08:57:ba:d8:f6:99:46:39:50:a0:33: 42:5c:99:13:62:d6:2b:d9:f3:1f:5c:ca:28:dc:33: f8:19:98:5a:d8:27:b6:09:b6:5e:d4:1e:2a:93:b1: 9f:f1:0d:ab:18:09:17:bf:9a:25:9f:64:e3:fc:f4: ea:94:ad:d4:ec:6a:e9:0f:bb:61:0c:36:8e:cf:48: 46:1a:72:4f:70:24:63:aa:bc:88:31:e5:70:e5:86: 15:7b:f6:49:94:6f:12:05:be:9e:ec:c3:04:78:17: 2d:8a:60:a9:7d:81:e7:cb:6e:c8:8c:b7:a5:20:f1: 42:6b:26:e6:df:1e:f0:73:ce:21:76:1d:ce:da:0f: b1:51:62:31:6f:ab:4a:3a:89:28:2d:33:9b:64:49: 11:c3:ec:47:d8:83:49:6a:7d:50:8d:4e:1c:c2:f9: c7:67:6a:af:e4:88:ba:c3:3c:48:86:fc:dc:47:35: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:7E:1E:2E:37:90:42:AB:5D:57:B4:4F:F7:33:32:38:DF:5B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5fd301a7-3fa3-3db8-86fd-2366cec59320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4e:db:ae:74:77:84:35:37:30:1d:8d:82:f3:5c:69:7e:26: c8:a6:2a:12:9a:dd:2c:65:8e:5a:bb:62:a8:27:1e:06:50:a1: 42:23:3d:c7:c0:01:bd:0a:ed:c5:91:aa:74:63:a6:1b:22:4d: b6:ec:a9:41:94:37:43:74:2c:be:d4:28:c6:98:89:40:a3:2f: 2e:8b:f3:ea:f0:e3:b5:f9:a7:7f:d2:b8:ca:7b:81:3f:5a:5a: 0e:d1:2f:31:cf:69:55:01:05:bf:fe:4a:8d:0b:42:25:31:77: a9:56:12:05:33:ae:83:c4:42:f0:fc:8a:b3:e4:04:ab:3d:73: b8:97:f5:f6:9a:d7:f5:4d:4c:61:99:d0:fa:1c:e1:4c:ec:bc: c6:be:b7:15:98:aa:85:78:50:68:f3:20:0a:e0:de:97:2c:f0: f8:5f:4b:28:64:4d:41:98:f3:29:03:19:6e:9f:ad:73:82:fe: f2:63:77:d5:40:4c:7e:11:bb:5d:cb:ce:78:cb:44:1c:c4:c5: 51:32:7c:ad:7a:3a:27:de:bc:8c:aa:4c:c0:09:64:08:57:08: 2f:f3:d1:ba:5c:43:c0:ea:e7:29:ba:16:a6:79:7e:ce:e6:2b: 5b:23:72:bc:85:73:f8:af:4a:9a:48:ef:4a:24:7f:7c:cb:74: 8a:67:74:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVgKkFVdbNaNtgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTIxNVoXDTI1MTEyMDAwMTIxNVowLzEtMCsGA1UEAxMk YTg1MjQ3Y2YtYTkyMi00YzVmLWFjNmEtMGVkZWEwMTZiYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJM6PM1z7MfZ85xiVbiTXcp/u5nrohwP7Ret /ArKO/IiGndTTeDXLDmWhBorR6renvOBs3guwPOnwOsMRVZ9XV1Cr5wyvg6kZ7KN BtCNCFe62PaZRjlQoDNCXJkTYtYr2fMfXMoo3DP4GZha2Ce2CbZe1B4qk7Gf8Q2r GAkXv5oln2Tj/PTqlK3U7GrpD7thDDaOz0hGGnJPcCRjqryIMeVw5YYVe/ZJlG8S Bb6e7MMEeBctimCpfYHny27IjLelIPFCaybm3x7wc84hdh3O2g+xUWIxb6tKOoko LTObZEkRw+xH2INJan1QjU4cwvnHZ2qv5Ii6wzxIhvzcRzXofQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo8fh4uN5BCq11XtE/3MzI431tUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNWZkMzAxYTctM2ZhMy0z ZGI4LTg2ZmQtMjM2NmNlYzU5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5O2650d4Q1NzAdjYLzXGl+JsimKhKa3Sxljlq7YqgnHgZQoUIjPcfA Ab0K7cWRqnRjphsiTbbsqUGUN0N0LL7UKMaYiUCjLy6L8+rw47X5p3/SuMp7gT9a Wg7RLzHPaVUBBb/+So0LQiUxd6lWEgUzroPEQvD8irPkBKs9c7iX9faa1/VNTGGZ 0Poc4UzsvMa+txWYqoV4UGjzIArg3pcs8PhfSyhkTUGY8ykDGW6frXOC/vJjd9VA TH4Ru13LznjLRBzExVEyfK16OifevIyqTMAJZAhXCC/z0bpcQ8Dq5ym6FqZ5fs7m K1sjcryFc/ivSppI70okf3zLdIpndP0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:56 2025 by rpki-client