$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa File: 89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa (raw, json) Hash identifier: kYJK+bSRh6aiiXz4NekNKFkzIacsE+OJZWd693gp0Gg= Subject key identifier: C8:4D:72:8C:A1:2E:40:0E:78:9A:A7:4A:7A:82:F2:13:D1:E5:1A:23 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEF55FD6D747973D99A272000 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa Signing time: Thu 21 Aug 2025 23:12:13 +0000 ROA not before: Thu 21 Aug 2025 23:12:13 +0000 ROA not after: Thu 20 Nov 2025 00:12:13 +0000 asID: 31898 IP address blocks: 144.25.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:fd:6d:74:79:73:d9:9a:27:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 23:12:13 2025 GMT Not After : Nov 20 00:12:13 2025 GMT Subject: CN=b3ba5cb4-3fdd-45cb-a07d-f88dcdd59dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:d0:33:db:54:f4:3c:07:c1:03:11:49:b3: 5e:ed:d1:52:e2:39:d2:6c:de:9a:ce:a0:0d:ce:6d: 01:1d:76:79:88:80:e6:cf:c6:e1:7d:b3:14:c2:60: 85:86:a1:a8:19:cb:5d:24:01:ba:e6:7b:1e:1b:38: b6:38:25:4b:ea:32:7b:2f:a9:2a:7c:f4:b2:2c:e3: 9c:fc:68:68:63:a0:8d:01:93:64:4a:1d:ac:28:e2: a1:e7:78:43:8a:41:9d:63:0e:9e:72:c0:37:76:7a: a6:c2:95:ef:d3:9f:f0:d5:10:a8:87:35:49:f3:4d: e4:f9:42:f5:96:0b:4a:fc:a4:4d:f4:16:0b:b4:d8: 0a:75:7a:bf:73:91:78:a2:5b:55:57:3d:de:75:42: de:7d:45:b7:03:6f:6c:40:45:db:68:32:74:32:2b: f6:94:fa:77:a3:cf:38:0b:bb:42:ff:0d:87:5b:33: 97:04:22:93:7e:ff:d9:88:37:00:0c:ec:c7:ef:c4: cb:bd:17:af:c2:bc:1d:6f:15:f4:fa:ed:ab:5e:ef: 79:1e:3a:18:e3:8b:51:8b:de:49:3d:23:c8:7d:28: f6:a5:30:ca:98:f6:93:e5:4b:3e:3a:22:19:f9:44: 41:43:3b:41:77:02:68:cf:e8:e3:04:7a:d3:48:16: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:72:8C:A1:2E:40:0E:78:9A:A7:4A:7A:82:F2:13:D1:E5:1A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89ceb6c0-bf41-3b8f-aa82-33fb5a693fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:82:c6:ea:40:cc:ee:c4:43:4c:6a:27:60:75:3e:7f:69:70: 13:de:6c:32:67:8f:03:06:70:44:7f:f2:8f:fb:c5:4a:2d:ca: b5:81:16:2e:db:4e:b0:f7:9a:14:56:c1:3b:51:2b:67:a3:44: 48:8f:62:7f:fa:06:03:dd:11:eb:45:2f:ba:a9:ce:ae:5d:f3: 52:15:c8:58:7f:7f:ac:db:29:af:e8:97:30:49:d1:68:d1:8d: 22:1e:a2:15:af:da:98:cc:a5:fd:ca:25:ca:66:72:27:a8:90: 3d:27:e5:e7:98:1e:eb:21:b3:d1:04:68:32:85:89:2c:d4:b8: 32:ab:84:35:dc:bc:b9:d8:b1:bd:d6:55:34:99:be:55:7f:2d: 40:31:d6:5f:9c:0d:de:2b:7d:c8:a3:01:f3:e3:fd:13:15:aa: 78:ee:a7:d6:7f:14:9a:62:c8:8f:d5:48:f7:87:9c:57:8a:c2: 16:a3:74:80:8b:72:9d:38:5a:97:99:17:dd:7c:89:45:2c:5f: 9c:6e:c9:e9:83:9e:30:40:06:6d:79:35:a7:7b:a4:4b:64:c3: 09:4d:3f:19:20:63:6c:9c:55:8e:11:fb:25:0e:7d:e2:c9:1a: 1b:4d:1f:d1:65:f5:6a:36:5e:ad:da:2e:b3:c9:d7:34:49:47: db:f2:11:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVf1tdHlz2ZonIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTIzMTIxM1oXDTI1MTEyMDAwMTIxM1owLzEtMCsGA1UEAxMk YjNiYTVjYjQtM2ZkZC00NWNiLWEwN2QtZjg4ZGNkZDU5ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha3QM9tU9DwHwQMRSbNe7dFS4jnSbN6azqAN zm0BHXZ5iIDmz8bhfbMUwmCFhqGoGctdJAG65nseGzi2OCVL6jJ7L6kqfPSyLOOc /GhoY6CNAZNkSh2sKOKh53hDikGdYw6ecsA3dnqmwpXv05/w1RCohzVJ803k+UL1 lgtK/KRN9BYLtNgKdXq/c5F4oltVVz3edULefUW3A29sQEXbaDJ0Miv2lPp3o884 C7tC/w2HWzOXBCKTfv/ZiDcADOzH78TLvRevwrwdbxX0+u2rXu95HjoY44tRi95J PSPIfSj2pTDKmPaT5Us+OiIZ+URBQztBdwJoz+jjBHrTSBan2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhNcoyhLkAOeJqnSnqC8hPR5RojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODljZWI2YzAtYmY0MS0z YjhmLWFhODItMzNmYjVhNjkzZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqCxupAzO7EQ0xqJ2B1Pn9pcBPebDJnjwMGcER/8o/7xUotyrWBFi7b TrD3mhRWwTtRK2ejREiPYn/6BgPdEetFL7qpzq5d81IVyFh/f6zbKa/olzBJ0WjR jSIeohWv2pjMpf3KJcpmcieokD0n5eeYHushs9EEaDKFiSzUuDKrhDXcvLnYsb3W VTSZvlV/LUAx1l+cDd4rfcijAfPj/RMVqnjup9Z/FJpiyI/VSPeHnFeKwhajdICL cp04WpeZF918iUUsX5xuyemDnjBABm15Nad7pEtkwwlNPxkgY2ycVY4R+yUOfeLJ GhtNH9Fl9Wo2Xq3aLrPJ1zRJR9vyEQA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:59:38 2025 by rpki-client