$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa File: f009b2db-a105-342d-9a34-13cd3745128d.roa (raw, json) Hash identifier: KW5GPr6c1/pQx84iIQQIfLCTg1s745O2ucL+P6Fzs5U= Subject key identifier: 47:4D:5D:3F:1A:A1:5E:FC:B1:A4:C6:FF:38:AD:4F:C3:3B:CE:15:46 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584AF01514C5FF010DF5D8175010 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa Signing time: Fri 22 Aug 2025 05:37:15 +0000 ROA not before: Fri 22 Aug 2025 05:37:15 +0000 ROA not after: Thu 20 Nov 2025 06:37:15 +0000 asID: 31898 IP address blocks: 144.25.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:15:14:c5:ff:01:0d:f5:d8:17:50:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Aug 22 05:37:15 2025 GMT Not After : Nov 20 06:37:15 2025 GMT Subject: CN=bbcf9a81-c384-475c-8ded-19df591fa11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:9a:b6:7b:5e:10:9e:ea:35:d9:16:7b:54: 0f:49:09:bc:dc:3e:fb:94:ed:b7:53:b1:59:84:a9: 95:46:1d:18:3e:85:62:38:8f:a3:7d:63:9c:b9:68: 9c:9e:bf:66:c3:6d:26:f3:05:36:81:b8:96:f8:4e: 5d:76:6c:3f:e9:71:32:4d:72:7d:ae:51:45:c4:17: 3a:aa:ee:f6:a3:e5:16:7f:07:f0:e2:19:f8:5c:67: 62:ea:57:52:64:b7:d0:ed:af:e7:19:d3:d4:8e:e2: 3d:2e:b6:6b:4e:1f:16:26:9b:ed:49:26:e6:c4:49: d3:d0:08:d4:47:60:af:a1:5d:66:c6:b5:1b:8c:fd: c3:af:c1:7e:2e:9c:65:f5:16:26:c3:0a:a4:08:ec: b8:97:fc:0c:f9:63:c5:11:75:e7:4a:e7:70:57:12: 2f:a9:58:d4:c1:2f:cd:70:38:d8:be:0f:9f:4e:13: fa:07:12:09:83:69:25:b2:7b:14:5f:29:97:12:6e: ac:64:3c:a2:bf:ca:f6:76:ea:24:15:5a:87:24:9d: 2c:9b:4d:85:94:cc:a0:6f:91:66:67:70:b3:e4:b8: 9d:0c:96:b9:14:dc:99:10:ed:36:41:70:54:4a:0a: 7c:76:9e:23:7e:84:ce:91:ad:f7:6a:8d:09:0c:a2: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:5D:3F:1A:A1:5E:FC:B1:A4:C6:FF:38:AD:4F:C3:3B:CE:15:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/f009b2db-a105-342d-9a34-13cd3745128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ba:41:6b:dd:73:1f:b9:e3:57:ec:ba:e5:c8:4c:27:eb:e4: 50:7f:60:f6:d4:9a:b7:eb:10:c1:7f:4f:2d:d9:dd:d1:d2:3b: 39:f9:b4:e2:b5:90:3c:6a:e4:e9:49:e7:3c:90:6e:b4:b2:c7: 00:2b:57:5d:68:21:b1:b7:b7:d0:b5:86:4a:9c:02:2a:db:68: 2f:3a:0c:90:da:6e:8a:f2:f5:fc:6b:97:47:d7:d5:2b:f6:55: 02:88:9d:ef:da:55:cb:e7:5b:d0:14:45:2d:ce:c6:81:18:84: e0:c0:89:83:f0:b9:07:71:8e:8f:30:0e:5b:6c:21:2a:3b:5e: ca:bc:22:3a:2f:7b:10:b2:e7:a5:25:82:6b:2b:6f:a0:d4:49: 70:e6:7f:93:a6:bf:b2:23:2b:92:e2:73:23:48:7c:c4:48:ff: 76:a1:d3:e3:05:a0:94:f9:dc:de:13:f8:d6:9f:92:0e:23:65: 5a:ef:d1:92:e6:e1:f9:7c:ac:fc:ae:0a:cd:2c:ff:6e:59:b7: e8:48:f6:8e:56:69:a4:96:b4:04:de:1b:d1:23:c5:d4:f9:dd: fd:48:62:b7:a5:ec:3e:e2:65:3d:a6:3d:bf:ba:3a:a9:22:ea: c5:65:66:a4:36:b5:48:6c:8a:91:c6:99:fa:af:18:0a:f5:8a: 0d:7b:69:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFRTF/wEN9dgXUBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MDgyMjA1MzcxNVoXDTI1MTEyMDA2MzcxNVowLzEtMCsGA1UEAxMk YmJjZjlhODEtYzM4NC00NzVjLThkZWQtMTlkZjU5MWZhMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdKatnteEJ7qNdkWe1QPSQm83D77lO23U7FZ hKmVRh0YPoViOI+jfWOcuWicnr9mw20m8wU2gbiW+E5ddmw/6XEyTXJ9rlFFxBc6 qu72o+UWfwfw4hn4XGdi6ldSZLfQ7a/nGdPUjuI9LrZrTh8WJpvtSSbmxEnT0AjU R2CvoV1mxrUbjP3Dr8F+Lpxl9RYmwwqkCOy4l/wM+WPFEXXnSudwVxIvqVjUwS/N cDjYvg+fThP6BxIJg2klsnsUXymXEm6sZDyiv8r2duokFVqHJJ0sm02FlMygb5Fm Z3Cz5LidDJa5FNyZEO02QXBUSgp8dp4jfoTOka33ao0JDKK3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdNXT8aoV78saTG/zitT8M7zhVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZjAwOWIyZGItYTEwNS0z NDJkLTlhMzQtMTNjZDM3NDUxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkBl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO6QWvdcx+541fsuuXITCfr5FB/YPbUmrfrEMF/Ty3Z3dHSOzn5tOK1 kDxq5OlJ5zyQbrSyxwArV11oIbG3t9C1hkqcAirbaC86DJDabory9fxrl0fX1Sv2 VQKIne/aVcvnW9AURS3OxoEYhODAiYPwuQdxjo8wDltsISo7Xsq8IjovexCy56Ul gmsrb6DUSXDmf5Omv7IjK5LicyNIfMRI/3ah0+MFoJT53N4T+Nafkg4jZVrv0ZLm 4fl8rPyuCs0s/25Zt+hI9o5WaaSWtATeG9EjxdT53f1IYrel7D7iZT2mPb+6Oqki 6sVlZqQ2tUhsipHGmfqvGAr1ig17abI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:24 2025 by rpki-client