$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa File: c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa (raw, json) Hash identifier: MEuD1rJLGS+krxj0IoXEhmzzS4Ge0cISzcd+oyPjyak= Subject key identifier: 46:01:24:95:B7:3D:4C:3F:BC:0A:0B:19:32:D8:E0:D2:41:3F:B8:F4 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AEEADD7F21D59296860D6C200 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa Signing time: Thu 21 Aug 2025 17:33:25 +0000 ROA not before: Thu 21 Aug 2025 17:33:25 +0000 ROA not after: Wed 19 Nov 2025 18:33:25 +0000 asID: 31898 IP address blocks: 144.25.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:d7:f2:1d:59:29:68:60:d6:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 21 17:33:25 2025 GMT Not After : Nov 19 18:33:25 2025 GMT Subject: CN=ec1e9b2e-4641-483c-95b8-53dd9a6ba94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:04:b9:c6:14:e7:f0:bf:69:4c:6d:44:af: e7:ec:9a:c6:ff:f0:a2:5c:a9:66:6f:25:63:0d:da: a5:0a:bc:2b:24:db:cb:a3:4c:d0:4f:3e:59:ac:ec: c1:83:60:11:05:d6:47:0b:84:d6:b6:28:6b:db:8a: a9:33:1f:2f:bf:c9:92:b2:a6:3c:b8:58:8c:e2:ae: 2a:95:b1:c3:69:c6:68:48:71:75:ca:31:7b:ac:48: 88:83:8b:61:09:2b:28:8d:d0:5e:0e:15:ef:c9:0b: 6e:72:cc:53:73:07:19:fd:6b:00:8c:cc:76:d8:fc: 62:7f:29:c4:28:e6:8e:33:79:6b:aa:26:23:61:f5: 9e:20:0f:6f:f0:90:e5:da:68:23:3a:d9:5c:04:dd: 48:f8:b3:c7:57:95:ed:8c:de:43:29:10:ff:5e:25: ba:c4:4b:7c:6a:36:93:8a:de:d1:12:6e:71:7b:3e: ff:78:60:23:9e:57:7d:5b:df:19:65:9e:e6:3e:1f: 07:2f:43:7e:71:f0:26:02:28:d4:a1:a1:ea:e6:35: 38:c1:cf:f8:62:46:02:97:b1:32:8f:fd:86:36:69: 7a:e8:36:8f:26:ae:03:6d:75:0c:c4:94:f2:25:c8: 6e:29:e6:34:56:05:8b:a5:18:04:1d:ed:b3:57:6a: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:24:95:B7:3D:4C:3F:BC:0A:0B:19:32:D8:E0:D2:41:3F:B8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:57:bf:43:f0:e8:00:f0:ad:60:59:4f:96:68:75:ab:71:09: d3:75:2d:4a:d0:18:4e:7c:f9:f7:36:57:d7:93:a1:74:55:51: e5:99:ad:86:48:40:6a:0b:bf:41:1b:cc:bd:eb:67:b7:e2:e1: 5d:76:b8:1e:83:46:22:32:79:2e:50:65:a7:35:be:b7:f2:e3: fd:ed:f3:12:13:a3:98:ef:3c:be:94:07:a8:bb:03:88:e1:cb: 4c:42:cd:49:55:a3:bc:bf:d3:ed:5c:29:7a:60:ee:83:bb:d8: 55:d3:b4:81:03:fb:ac:b0:5c:5e:c8:33:5b:6c:da:bb:6a:27: db:09:a4:9a:1b:c3:77:51:e8:ee:77:fb:94:1b:e4:88:43:3f: 85:71:19:d4:a8:8f:37:48:ef:1c:0a:e9:ff:19:d1:83:75:f0: ef:65:4e:a6:99:f2:2b:58:e9:38:52:1e:71:70:fe:4a:4f:33: 90:aa:41:44:dd:1a:ab:b9:7d:1c:95:bb:c4:54:1d:6a:fc:28: f5:f0:28:46:4e:43:fc:06:14:b8:25:1d:4c:b7:39:c0:37:c6: df:89:65:06:24:81:26:68:27:ee:18:7f:e4:fe:64:3a:86:28: 43:ea:a2:33:7c:98:90:d7:aa:4e:3b:0f:a3:eb:08:8c:eb:0a: 27:d8:bf:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurdfyHVkpaGDWwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMTE3MzMyNVoXDTI1MTExOTE4MzMyNVowLzEtMCsGA1UEAxMk ZWMxZTliMmUtNDY0MS00ODNjLTk1YjgtNTNkZDlhNmJhOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYEucYU5/C/aUxtRK/n7JrG//CiXKlmbyVj DdqlCrwrJNvLo0zQTz5ZrOzBg2ARBdZHC4TWtihr24qpMx8vv8mSsqY8uFiM4q4q lbHDacZoSHF1yjF7rEiIg4thCSsojdBeDhXvyQtucsxTcwcZ/WsAjMx22PxifynE KOaOM3lrqiYjYfWeIA9v8JDl2mgjOtlcBN1I+LPHV5XtjN5DKRD/XiW6xEt8ajaT it7REm5xez7/eGAjnld9W98ZZZ7mPh8HL0N+cfAmAijUoaHq5jU4wc/4YkYCl7Ey j/2GNml66DaPJq4DbXUMxJTyJchuKeY0VgWLpRgEHe2zV2oY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYBJJW3PUw/vAoLGTLY4NJBP7j0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzZhNTI2YWMtM2FkNi0z YjQzLWIwNDUtYTk4NDdiMmQ5MzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApXv0Pw6ADwrWBZT5ZodatxCdN1LUrQGE58+fc2V9eToXRVUeWZrYZI QGoLv0EbzL3rZ7fi4V12uB6DRiIyeS5QZac1vrfy4/3t8xITo5jvPL6UB6i7A4jh y0xCzUlVo7y/0+1cKXpg7oO72FXTtIED+6ywXF7IM1ts2rtqJ9sJpJobw3dR6O53 +5Qb5IhDP4VxGdSojzdI7xwK6f8Z0YN18O9lTqaZ8itY6ThSHnFw/kpPM5CqQUTd Gqu5fRyVu8RUHWr8KPXwKEZOQ/wGFLglHUy3OcA3xt+JZQYkgSZoJ+4Yf+T+ZDqG KEPqojN8mJDXqk47D6PrCIzrCifYv+Y= -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:17 2025 by rpki-client