$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa File: f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json) Hash identifier: wq2f8q9O0xgokhv1hfRy0ZOqvbSHtb1Y4h0AmueAkmM= Subject key identifier: 96:0A:37:64:07:AF:F2:54:A8:18:9D:97:41:88:4F:CA:0A:11:06:54 Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Certificate serial: 010D0C9F4328584B715CB79A5C9AD618D2DA5000 Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 18615 IP address blocks: 147.160.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b7:9a:5c:9a:d6:18:d2:da:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=270a4f46-75aa-4908-87a0-2ec4a3113c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:a5:3b:8e:2b:53:8f:d4:2c:26:c8:19:79: cd:7a:dd:1a:a1:34:52:b5:00:da:39:05:87:3b:2a: b1:c4:58:fc:db:54:28:8f:dc:66:1b:a5:42:f8:ea: 4e:7f:68:40:49:0d:7b:e8:91:9b:b9:a0:6a:07:57: cb:25:83:a5:dd:a4:99:64:d4:41:c7:d1:11:74:a5: cf:4a:ea:f7:e0:a3:e0:6e:6e:5f:53:45:6b:17:55: 41:34:e5:00:1a:12:ea:38:41:2d:25:db:65:1d:fb: a2:1d:03:27:96:d6:09:7f:8e:35:73:66:b7:37:4e: 33:e8:38:34:25:20:3c:3c:90:90:82:df:02:90:8b: 65:8e:4f:46:6f:4d:10:94:33:7a:04:38:6e:6f:21: 9b:af:5a:08:b8:62:21:04:2d:53:8c:3b:94:fe:5e: 59:e6:4d:e7:18:d9:6b:f3:03:d0:33:ad:12:3d:a9: a4:2d:6a:c8:25:19:cb:ce:fd:09:8b:24:43:a7:e1: d7:e0:00:22:b6:d6:04:69:b1:e5:0d:9e:a0:0e:34: 1d:67:36:c5:d1:0a:39:68:4e:b7:24:62:b8:ac:42: d7:0a:9f:05:1f:bc:6b:44:1c:c2:56:22:e5:30:2b: 95:d9:e5:a1:cb:14:4a:4e:58:c8:d5:a8:e8:87:e1: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:37:64:07:AF:F2:54:A8:18:9D:97:41:88:4F:CA:0A:11:06:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl X509v3 Authority Key Identifier: keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer sbgp-ipAddrBlock: critical IPv4: 147.160.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:73:da:fb:cc:15:7f:2f:c6:6d:fa:75:7d:6e:d9:66:b9:0d: a5:12:a2:88:7a:d2:5f:8c:b5:a1:82:b8:b8:59:69:29:7c:83: 69:1f:d3:6d:e4:e0:fc:29:25:e2:66:29:7a:c8:48:22:5d:39: 68:1b:b4:fc:82:91:a4:e8:85:91:f9:5e:1a:08:23:ce:5f:66: 77:07:46:0d:25:e9:8a:92:26:19:b0:a0:60:d0:2d:a7:84:3c: 31:88:62:e8:27:d1:49:36:9b:c5:e1:18:93:3b:eb:a9:f4:73: ef:24:08:c8:28:77:73:8c:3a:44:1e:84:63:ba:9b:cb:7d:c9: 90:da:72:cc:0d:46:e7:fe:b1:cb:51:d3:c6:15:68:0b:ac:66: 90:e9:5c:f5:63:ae:dd:fe:60:a4:bc:52:08:0a:07:6c:be:d5: 1c:41:83:e6:d5:13:54:76:ef:84:70:5a:53:15:90:7e:d6:f0: 64:3d:98:a3:41:49:97:60:97:b6:e1:2e:4d:78:2c:0b:6a:e9: fb:61:a5:47:ce:73:fc:96:84:d5:18:48:a0:47:35:c9:6a:72: 54:26:bb:2f:c3:ec:dc:33:1d:2d:25:1c:95:a2:e5:06:c9:5e: 89:91:c8:78:a1:87:9d:d3:46:45:9a:49:ae:7f:09:e2:cf:d4: 81:10:b7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLeaXJrWGNLaUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZiYzJkYTctNWIzYi00ZmY2LThiYzItNTljNDJjOTAx MDg2MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjcwYTRmNDYtNzVhYS00OTA4LTg3YTAtMmVjNGEzMTEzYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9GlO44rU4/ULCbIGXnNet0aoTRStQDaOQWH OyqxxFj821Qoj9xmG6VC+OpOf2hASQ176JGbuaBqB1fLJYOl3aSZZNRBx9ERdKXP Sur34KPgbm5fU0VrF1VBNOUAGhLqOEEtJdtlHfuiHQMnltYJf441c2a3N04z6Dg0 JSA8PJCQgt8CkItljk9Gb00QlDN6BDhubyGbr1oIuGIhBC1TjDuU/l5Z5k3nGNlr 8wPQM60SPamkLWrIJRnLzv0JiyRDp+HX4AAittYEabHlDZ6gDjQdZzbF0Qo5aE63 JGK4rELXCp8FH7xrRBzCViLlMCuV2eWhyxRKTljI1ajoh+GAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYKN2QHr/JUqBidl0GIT8oKEQZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJj MmRhNy01YjNiLTRmZjYtOGJjMi01OWM0MmM5MDEwODYvZjBmZWYxMWItZmQxOC0z YWEyLTg1NzMtZjY2ZGJmZjE1NjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzZiYzJkYTctNWIzYi00ZmY2LThi YzItNTljNDJjOTAxMDg2L2M2YmMyZGE3LTViM2ItNGZmNi04YmMyLTU5YzQyYzkw MTA4Ni5jcmwwHwYDVR0jBBgwFoAUnWYfnyPnx7Ih8ugzbHvOq2WXMfIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNmJjMmRhNy01YjNiLTRmZjYtOGJjMi01OWM0 MmM5MDEwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk6AIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtz2vvMFX8vxm36dX1u2Wa5DaUSooh60l+MtaGCuLhZaSl8g2kf023k 4PwpJeJmKXrISCJdOWgbtPyCkaTohZH5XhoII85fZncHRg0l6YqSJhmwoGDQLaeE PDGIYugn0Uk2m8XhGJM766n0c+8kCMgod3OMOkQehGO6m8t9yZDacswNRuf+sctR 08YVaAusZpDpXPVjrt3+YKS8UggKB2y+1RxBg+bVE1R274RwWlMVkH7W8GQ9mKNB SZdgl7bhLk14LAtq6fthpUfOc/yWhNUYSKBHNclqclQmuy/D7NwzHS0lHJWi5QbJ XomRyHihh53TRkWaSa5/CeLP1IEQt/4= -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:51 2025 by rpki-client