$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: dCN+b0DjxZwOFeXTi4arbo8/CZ+lVXiJif40pTlD6aU= Subject key identifier: BB:F4:25:51:8B:01:C9:5A:C1:4A:4C:12:AB:CA:03:83:08:BD:9D:C3 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584A5FC5EB00346F3AC3CAFC8700 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:eb:00:34:6f:3a:c3:ca:fc:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=993db281-70c1-4ad0-be97-2f467c470cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:82:fb:ae:98:85:05:3c:1f:cd:21:e4:8f: 94:86:5f:ed:23:94:aa:03:a7:cf:23:41:76:be:31: 5f:8f:c2:21:89:76:f0:cf:54:91:73:45:a2:63:c8: 24:31:25:7d:6b:1a:d7:dc:ae:d1:ee:2b:89:0b:86: 8d:a3:d8:0c:3c:77:12:56:e7:8f:1f:43:bd:df:d8: f0:e9:a8:05:a6:fe:69:5f:bb:02:66:75:20:c7:9d: f7:af:1e:56:ac:ad:b3:0b:56:0b:8e:1a:ae:04:50: 73:7a:cf:e2:e2:44:4b:69:09:5c:00:a7:db:4f:e5: 09:46:7b:b5:c7:33:86:53:9f:c6:73:e6:38:77:7c: a2:10:ab:0b:44:f3:24:d7:a8:5c:a0:e4:b8:ac:46: 24:66:82:7c:ff:62:25:74:c0:52:42:e9:44:6e:08: f3:0c:33:0c:8c:5f:a7:68:8c:46:65:07:18:b3:d0: fb:c6:f6:6d:52:95:cb:cb:62:ff:ef:f2:79:3e:4e: 05:2f:62:d1:14:1f:c2:fb:85:c1:e8:87:09:6a:75: e8:42:c8:8d:c4:0e:14:9e:01:6b:15:b8:b3:5d:4e: 7d:8d:66:ab:49:0c:4a:66:50:dd:83:d3:f6:43:e6: 44:cb:35:13:f5:49:45:7e:0a:dc:fe:ec:69:2c:f2: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:25:51:8B:01:C9:5A:C1:4A:4C:12:AB:CA:03:83:08:BD:9D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:09:43:65:af:ca:f1:ef:2b:1d:c2:3e:68:4b:30:1f:90:67: 97:8b:15:7f:2c:e4:df:19:45:51:45:fe:d1:26:52:72:16:90: b7:9c:b1:f4:a9:fb:35:db:8a:e7:35:7a:a1:b1:70:ca:12:4e: f5:1c:44:ac:08:71:d5:9e:a0:2c:cc:fa:bb:8c:52:a0:e8:5c: e8:07:85:aa:fe:6b:77:2a:ce:2e:fb:ec:0a:44:fb:20:6d:35: 7a:22:b8:92:2b:f8:e8:1b:33:d0:f6:9a:c0:2c:48:0e:5b:ed: ad:24:c1:b2:4c:ef:71:7a:0b:06:b8:4b:2c:2e:04:c5:b2:d9: 41:f8:6d:4d:bd:c8:d9:29:26:2d:b8:2c:14:b7:d2:fa:34:f9: 80:da:e4:da:81:f9:74:b2:1d:90:2d:d1:84:07:4d:b8:a7:30: 18:c4:a0:c2:ac:77:38:09:ed:74:a5:2d:66:1b:d4:46:3c:65: 04:2f:66:3c:94:d3:0d:99:6f:e5:ee:e8:0b:71:2b:bc:c9:b5: 5e:0e:e6:0b:54:e8:3a:80:56:b7:49:ab:63:c4:7f:85:75:c8: f8:68:d8:02:e8:7a:0e:a2:7d:f4:69:c8:a5:32:d1:6c:73:9c: e4:0b:e5:61:eb:99:a1:6c:7e:22:49:ad:c1:f0:5d:95:5e:8c: 4e:1b:34:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxesANG86w8r8hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OTkzZGIyODEtNzBjMS00YWQwLWJlOTctMmY0NjdjNDcwY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgGC+66YhQU8H80h5I+Uhl/tI5SqA6fPI0F2 vjFfj8IhiXbwz1SRc0WiY8gkMSV9axrX3K7R7iuJC4aNo9gMPHcSVuePH0O939jw 6agFpv5pX7sCZnUgx533rx5WrK2zC1YLjhquBFBzes/i4kRLaQlcAKfbT+UJRnu1 xzOGU5/Gc+Y4d3yiEKsLRPMk16hcoOS4rEYkZoJ8/2IldMBSQulEbgjzDDMMjF+n aIxGZQcYs9D7xvZtUpXLy2L/7/J5Pk4FL2LRFB/C+4XB6IcJanXoQsiNxA4UngFr FbizXU59jWarSQxKZlDdg9P2Q+ZEyzUT9UlFfgrc/uxpLPKoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv0JVGLAclawUpMEqvKA4MIvZ3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMJQ2WvyvHvKx3CPmhLMB+QZ5eLFX8s5N8ZRVFF/tEmUnIWkLecsfSp +zXbiuc1eqGxcMoSTvUcRKwIcdWeoCzM+ruMUqDoXOgHhar+a3cqzi777ApE+yBt NXoiuJIr+OgbM9D2msAsSA5b7a0kwbJM73F6Cwa4SywuBMWy2UH4bU29yNkpJi24 LBS30vo0+YDa5NqB+XSyHZAt0YQHTbinMBjEoMKsdzgJ7XSlLWYb1EY8ZQQvZjyU 0w2Zb+Xu6AtxK7zJtV4O5gtU6DqAVrdJq2PEf4V1yPho2ALoeg6iffRpyKUy0Wxz nOQL5WHrmaFsfiJJrcHwXZVejE4bNFc= -----END CERTIFICATE-----Generated at Mon Jul 28 15:30:20 2025 by rpki-client