$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/c1649bd0-ba36-3e76-86c8-b0c45877a342.roa File: c1649bd0-ba36-3e76-86c8-b0c45877a342.roa (raw, json) Hash identifier: 28VYTccYK1y0esGiOUc9WIkHoCxhBbXh5uYtYvAStIY= Subject key identifier: 2F:53:8E:B2:4A:AE:57:83:45:BE:99:3C:7E:6A:7C:EC:09:33:28:6B Certificate issuer: /CN=744f8564-502f-4952-8060-09b4c7e292b0 Certificate serial: 010D0C9F4328584AEB7187C9E0503546ECE91000 Authority key identifier: 72:61:82:AD:C8:5C:5A:18:24:2F:B9:4B:96:EB:EE:04:2C:4C:A4:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/c1649bd0-ba36-3e76-86c8-b0c45877a342.roa Signing time: Wed 20 Aug 2025 13:44:28 +0000 ROA not before: Wed 20 Aug 2025 13:44:28 +0000 ROA not after: Tue 18 Nov 2025 14:44:28 +0000 asID: 26554 IP address blocks: 95.129.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:71:87:c9:e0:50:35:46:ec:e9:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744f8564-502f-4952-8060-09b4c7e292b0 Validity Not Before: Aug 20 13:44:28 2025 GMT Not After : Nov 18 14:44:28 2025 GMT Subject: CN=41c021e2-6bde-44f6-89bc-bafc19fbafe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:85:a8:3b:d2:46:97:e4:51:f1:9e:81:28: c3:fe:28:0e:51:4f:58:5c:bd:4f:d7:58:0e:cd:07: 1f:43:76:d2:07:af:8e:4c:b1:67:0b:7b:98:2c:3f: db:01:89:ac:d4:ae:7f:c1:29:7f:e3:fb:8e:ef:8d: 8e:0b:ba:13:0f:d0:6c:df:7d:8d:17:c3:ad:3b:84: 42:dc:dd:14:c6:2e:85:7b:7d:15:37:7d:60:0a:ec: 91:35:94:69:9e:66:4a:3b:dc:86:36:2d:df:e3:96: 58:82:fb:4f:35:be:3e:b7:d1:92:23:3a:2c:5a:5f: ff:0d:2c:dc:76:b2:2c:de:fc:90:8d:06:0e:b4:e8: c2:35:27:29:a0:3a:1c:ea:9b:62:4d:42:74:6d:ae: e7:d3:1b:8b:ac:83:8c:59:5e:42:ed:0f:3b:ad:12: 98:19:6e:7e:f3:3f:e0:64:b0:cd:2f:a8:43:d3:c7: 0a:d6:7a:21:ad:34:dd:92:55:d0:07:6f:d9:c5:b9: 75:12:37:62:0f:66:b2:ca:8a:ac:df:d9:87:ed:b8: a9:69:63:bf:77:2e:e0:03:4b:16:d8:6d:3b:88:4a: 6b:40:ba:9f:a7:fc:ab:08:7f:71:87:38:75:3a:d7: 1b:b3:18:0d:8b:0c:fc:5d:31:e7:6c:94:5d:e2:b5: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:8E:B2:4A:AE:57:83:45:BE:99:3C:7E:6A:7C:EC:09:33:28:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/c1649bd0-ba36-3e76-86c8-b0c45877a342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.crl X509v3 Authority Key Identifier: keyid:72:61:82:AD:C8:5C:5A:18:24:2F:B9:4B:96:EB:EE:04:2C:4C:A4:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer sbgp-ipAddrBlock: critical IPv4: 95.129.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b8:d5:d8:04:a4:ca:12:50:03:2d:ad:e9:84:4e:6d:fc:8f: 76:05:af:9e:db:e9:0d:33:c0:40:20:de:32:3c:4a:a0:77:14: 70:ab:1b:77:4f:5f:b7:11:02:2f:ad:b5:c3:fe:8f:b2:3a:2e: e8:9b:a8:b1:c6:97:2d:14:fe:a3:fd:c5:e8:8e:3b:ba:e3:bd: fc:bb:48:0e:cd:b3:57:de:d2:43:fb:4d:23:2f:e1:9e:f3:d2: 43:88:f3:44:8e:36:ed:4c:9e:8e:73:97:5b:f7:e6:7f:18:d4: 09:0a:cf:42:97:e3:f3:68:23:25:46:ce:a2:8c:52:9c:f9:4b: 74:14:30:80:a2:86:a6:9e:86:9c:ae:6f:52:87:d4:63:d2:00: c4:28:2d:bf:d1:8a:a9:b0:6b:98:e2:80:17:2e:c9:a5:65:43: d8:02:12:f0:4f:f6:60:fe:64:a2:70:98:fc:4a:85:72:e5:d1: f4:43:94:0e:4d:9b:a0:8e:0d:97:7c:74:ac:12:88:f8:d7:1c: 60:15:7f:46:57:07:77:66:cc:43:cb:c0:46:d0:7f:95:3c:0e: bc:13:ac:16:2b:31:1f:49:71:9c:9c:f1:b3:48:c9:9f:2d:8f: 93:fc:4b:3b:bb:2c:14:13:63:8d:93:b0:cf:f8:3a:8a:36:3e: b1:6b:f3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrcYfJ4FA1RuzpEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ0Zjg1NjQtNTAyZi00OTUyLTgwNjAtMDliNGM3ZTI5 MmIwMB4XDTI1MDgyMDEzNDQyOFoXDTI1MTExODE0NDQyOFowLzEtMCsGA1UEAxMk NDFjMDIxZTItNmJkZS00NGY2LTg5YmMtYmFmYzE5ZmJhZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SaFqDvSRpfkUfGegSjD/igOUU9YXL1P11gO zQcfQ3bSB6+OTLFnC3uYLD/bAYms1K5/wSl/4/uO742OC7oTD9Bs332NF8OtO4RC 3N0Uxi6Fe30VN31gCuyRNZRpnmZKO9yGNi3f45ZYgvtPNb4+t9GSIzosWl//DSzc drIs3vyQjQYOtOjCNScpoDoc6ptiTUJ0ba7n0xuLrIOMWV5C7Q87rRKYGW5+8z/g ZLDNL6hD08cK1nohrTTdklXQB2/Zxbl1EjdiD2ayyoqs39mH7bipaWO/dy7gA0sW 2G07iEprQLqfp/yrCH9xhzh1OtcbsxgNiwz8XTHnbJRd4rVAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9TjrJKrleDRb6ZPH5qfOwJMyhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDRm ODU2NC01MDJmLTQ5NTItODA2MC0wOWI0YzdlMjkyYjAvYzE2NDliZDAtYmEzNi0z ZTc2LTg2YzgtYjBjNDU4NzdhMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQ0Zjg1NjQtNTAyZi00OTUyLTgw NjAtMDliNGM3ZTI5MmIwLzc0NGY4NTY0LTUwMmYtNDk1Mi04MDYwLTA5YjRjN2Uy OTJiMC5jcmwwHwYDVR0jBBgwFoAUcmGCrchcWhgkL7lLluvuBCxMpPUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NDRmODU2NC01MDJmLTQ5NTItODA2MC0wOWI0 YzdlMjkyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4ElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK41dgEpMoSUAMtremETm38j3YFr57b6Q0zwEAg3jI8SqB3FHCrG3dP X7cRAi+ttcP+j7I6LuibqLHGly0U/qP9xeiOO7rjvfy7SA7Ns1fe0kP7TSMv4Z7z 0kOI80SONu1Mno5zl1v35n8Y1AkKz0KX4/NoIyVGzqKMUpz5S3QUMICihqaehpyu b1KH1GPSAMQoLb/Riqmwa5jigBcuyaVlQ9gCEvBP9mD+ZKJwmPxKhXLl0fRDlA5N m6CODZd8dKwSiPjXHGAVf0ZXB3dmzEPLwEbQf5U8DrwTrBYrMR9JcZyc8bNIyZ8t j5P8Szu7LBQTY42TsM/4Ooo2PrFr89g= -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:04 2025 by rpki-client