$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa File: 95037d37-41f0-3224-b20d-ed8abd26d1c5.roa (raw, json) Hash identifier: diWOHJ3NNMpUv+S7wEW3Zh/S6yHBsiWx53gw+AlCe94= Subject key identifier: BD:F9:E3:51:17:2C:EF:9E:01:81:D0:23:9B:AA:48:8E:29:F4:0A:AD Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E6B0A2AD3156E2D16257151C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 144.25.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2a:d3:15:6e:2d:16:25:71:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=e1c8524c-00be-4c75-9710-316d0726db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:9f:43:e1:5a:35:de:08:0a:29:77:a7:fb: 61:6e:20:99:25:0e:e8:89:61:f2:67:b4:37:9c:fb: 8f:87:fe:29:3d:84:dd:b7:e0:07:1f:f3:68:65:2d: 18:97:9b:be:0f:f8:b1:ee:df:7a:a5:62:fb:73:84: 63:69:3a:e8:4a:4b:39:05:37:0b:7a:ae:60:b8:c6: 55:5f:5e:5e:92:2b:f0:34:34:70:f3:31:ac:8e:7a: 38:06:5f:17:0f:36:88:73:d8:c6:59:6f:43:b0:af: ee:ee:b6:31:f3:72:2b:6c:50:24:9c:56:bb:3e:f1: f9:05:8e:82:23:4d:9f:ac:36:20:69:06:dc:04:6d: e7:62:8f:12:00:b8:37:61:3b:93:86:4b:03:8d:da: c0:39:28:c2:66:30:20:c7:38:27:16:9b:59:fc:f8: c6:3b:b3:f6:65:30:78:f1:60:2b:64:f7:7a:14:ea: 13:a9:9e:c4:a3:28:f8:cb:1f:c6:e9:c1:df:9a:7c: b4:11:88:91:8e:87:46:70:40:a9:e2:e0:32:6d:db: 07:d9:2d:5d:46:5e:8e:19:19:cf:79:4e:0a:64:ff: 7b:9b:8a:69:c0:5b:a1:d8:cd:8a:ae:f1:0f:d1:a0: f0:53:d7:e8:31:dc:21:ff:a4:e4:f0:9c:3b:44:2a: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:E3:51:17:2C:EF:9E:01:81:D0:23:9B:AA:48:8E:29:F4:0A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/95037d37-41f0-3224-b20d-ed8abd26d1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1a:b1:a4:9c:e1:0b:56:87:2e:2b:11:07:16:dd:31:95:50: 33:0d:03:62:3d:39:48:76:d1:2f:e5:be:19:ae:f3:76:60:a5: 18:c4:4b:57:17:e3:6d:57:6a:f1:d0:77:21:57:aa:ad:25:a4: af:7d:fd:e1:a5:6b:eb:4b:b5:47:0f:ae:49:4d:bc:bc:55:91: 70:23:07:27:c9:58:7b:22:47:8d:b7:a9:f2:da:e0:2f:be:69: 82:09:88:ed:fd:34:c2:cf:99:2e:77:bf:35:cf:b0:4b:0a:f4: d8:ef:38:fd:80:15:33:e0:ac:bb:8d:cc:5f:0d:9a:39:50:80: 5e:4c:3f:9b:78:89:b2:5f:0f:23:8f:7c:78:a0:7a:ea:ec:8b: 26:20:47:30:7f:be:c5:a6:18:05:f8:8a:bd:ec:8f:f0:73:b6: bf:8b:c0:d9:a2:30:3a:54:2a:95:1f:0e:c4:af:30:d8:58:26: 52:6b:bb:13:59:4e:19:ab:fd:53:14:cc:01:23:b9:74:5f:08: 75:bc:88:ee:fb:6e:ca:8a:02:05:ff:10:f8:4e:de:54:fb:42: 2d:70:26:f8:e2:e4:52:f3:1f:70:53:34:7b:29:a1:8d:cf:d5: 62:61:fd:12:73:f4:08:38:4d:59:57:d1:b9:0c:39:e0:ae:0a: b9:d7:6e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCirTFW4tFiVxUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZTFjODUyNGMtMDBiZS00Yzc1LTk3MTAtMzE2ZDA3MjZkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPafQ+FaNd4ICil3p/thbiCZJQ7oiWHyZ7Q3 nPuPh/4pPYTdt+AHH/NoZS0Yl5u+D/ix7t96pWL7c4RjaTroSks5BTcLeq5guMZV X15ekivwNDRw8zGsjno4Bl8XDzaIc9jGWW9DsK/u7rYx83IrbFAknFa7PvH5BY6C I02frDYgaQbcBG3nYo8SALg3YTuThksDjdrAOSjCZjAgxzgnFptZ/PjGO7P2ZTB4 8WArZPd6FOoTqZ7Eoyj4yx/G6cHfmny0EYiRjodGcECp4uAybdsH2S1dRl6OGRnP eU4KZP97m4ppwFuh2M2KrvEP0aDwU9foMdwh/6Tk8Jw7RCrMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3541EXLO+eAYHQI5uqSI4p9AqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTUwMzdkMzctNDFmMC0z MjI0LWIyMGQtZWQ4YWJkMjZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoasaSc4QtWhy4rEQcW3TGVUDMNA2I9OUh20S/lvhmu83ZgpRjES1cX 421XavHQdyFXqq0lpK99/eGla+tLtUcPrklNvLxVkXAjByfJWHsiR423qfLa4C++ aYIJiO39NMLPmS53vzXPsEsK9NjvOP2AFTPgrLuNzF8NmjlQgF5MP5t4ibJfDyOP fHigeursiyYgRzB/vsWmGAX4ir3sj/Bztr+LwNmiMDpUKpUfDsSvMNhYJlJruxNZ Thmr/VMUzAEjuXRfCHW8iO77bsqKAgX/EPhO3lT7Qi1wJvji5FLzH3BTNHspoY3P 1WJh/RJz9Ag4TVlX0bkMOeCuCrnXbtM= -----END CERTIFICATE-----Generated at Fri Jul 24 00:48:01 2026 by rpki-client