$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa File: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (raw, json) Hash identifier: GBRFsz7Pw0Ub/f0CMjT6oa/+nyk3tyXYc+WfmIr3jHw= Subject key identifier: 6F:62:95:4E:54:B7:56:44:9A:29:2B:FB:D7:6C:F4:45:4E:E5:8B:7A Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584B39870872F5A75A446D113460 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 394321 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:08:72:f5:a7:5a:44:6d:11:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=ee149bb4-5198-441f-8e39-82bccf860301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:ed:7d:ff:27:a6:65:22:a3:43:2f:97:fc: 7f:18:1a:85:39:b6:67:dc:d7:2b:c8:e9:c0:ef:49: 73:cd:fe:c8:84:ba:82:28:c6:de:03:09:08:04:77: 99:1c:e4:35:a9:0c:11:7e:35:22:89:f6:c5:36:74: f9:91:a2:b0:a9:c1:e3:e5:e9:15:9a:d1:84:22:37: 38:07:14:69:4e:66:13:a8:dc:d6:d5:7f:cf:0d:05: 88:5c:12:7b:44:d8:03:c9:08:ee:3b:ae:f6:2d:9f: 1c:bc:1d:62:f2:b2:7f:c0:07:7c:62:fe:55:31:12: fa:22:9b:9b:52:0c:60:c9:52:8a:7a:a4:34:79:7a: 6e:79:a5:96:df:e5:48:e4:82:cf:0a:6a:6c:23:10: 4a:0d:db:21:92:c3:29:34:ea:b1:ac:eb:55:ac:8b: 5f:aa:31:a3:2f:c8:f7:f7:c3:fe:66:b1:c2:24:4c: d2:b3:c0:76:ea:8b:63:1c:5b:cc:21:83:96:c5:7a: 56:ed:9a:d1:c3:b5:0b:7c:7b:cb:fd:51:4e:68:4a: 8b:80:b5:95:c1:88:b4:39:cf:54:ba:a2:0d:b9:64: 1c:98:78:4b:54:de:7c:8e:77:44:2d:23:32:ec:d1: d6:ec:67:47:72:ee:f7:78:05:f8:64:fd:0d:d7:10: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:62:95:4E:54:B7:56:44:9A:29:2B:FB:D7:6C:F4:45:4E:E5:8B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5a:09:2c:7a:63:82:b5:24:9a:c8:6e:fd:51:5a:4c:5c:77: 24:f9:2e:65:18:fc:de:56:fc:2c:42:9c:1b:c5:85:cb:d0:f0: 8c:58:b2:05:f8:46:b4:d9:04:c4:04:a5:51:a3:4a:18:41:62: 85:96:49:fb:f5:72:eb:32:06:d8:7a:4e:14:fb:40:f2:36:1e: 6a:1d:99:e7:46:10:78:15:f4:58:bd:2b:e1:71:37:c7:0d:fa: b3:d3:00:24:5e:18:6a:1e:ad:36:0c:6a:05:a2:65:e0:6d:b0: 98:ac:ca:b3:93:53:fc:4f:f3:1a:78:bb:e5:b8:b5:9d:13:2d: 07:c9:0c:4e:10:d7:fa:a2:95:78:8f:5c:5f:96:69:04:a3:31: e9:e6:58:ee:40:62:32:3f:9a:4e:65:8b:25:8a:38:e4:33:69: 1a:5a:7a:14:18:51:ec:df:06:6d:d7:ef:d7:01:fd:2d:87:43: d7:3b:07:ea:61:a7:99:e6:63:5e:2d:16:2d:3b:10:9c:c6:e6: 40:b7:91:7a:e7:bb:28:6c:19:4c:5c:7d:b5:ad:08:7d:33:10: d1:f9:06:e8:24:f0:2f:6f:de:c7:76:2e:48:93:70:44:a7:e8: 8f:46:b8:c7:25:5e:13:91:1f:82:18:ae:6d:cf:f6:db:f4:7f: 72:46:1b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwhy9adaRG0RNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZWUxNDliYjQtNTE5OC00NDFmLThlMzktODJiY2NmODYwMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7tff8npmUio0Mvl/x/GBqFObZn3NcryOnA 70lzzf7IhLqCKMbeAwkIBHeZHOQ1qQwRfjUiifbFNnT5kaKwqcHj5ekVmtGEIjc4 BxRpTmYTqNzW1X/PDQWIXBJ7RNgDyQjuO672LZ8cvB1i8rJ/wAd8Yv5VMRL6Ipub UgxgyVKKeqQ0eXpueaWW3+VI5ILPCmpsIxBKDdshksMpNOqxrOtVrItfqjGjL8j3 98P+ZrHCJEzSs8B26otjHFvMIYOWxXpW7ZrRw7ULfHvL/VFOaEqLgLWVwYi0Oc9U uqINuWQcmHhLVN58jndELSMy7NHW7GdHcu73eAX4ZP0N1xBwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9ilU5Ut1ZEmikr+9ds9EVO5Yt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvZDliZDA2OGYtYTY1NS0z NTZiLWFlNTMtNWFkNzZiYThiZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtaCSx6Y4K1JJrIbv1RWkxcdyT5LmUY/N5W/CxCnBvFhcvQ8IxYsgX4 RrTZBMQEpVGjShhBYoWWSfv1cusyBth6ThT7QPI2HmodmedGEHgV9Fi9K+FxN8cN +rPTACReGGoerTYMagWiZeBtsJisyrOTU/xP8xp4u+W4tZ0TLQfJDE4Q1/qilXiP XF+WaQSjMenmWO5AYjI/mk5liyWKOOQzaRpaehQYUezfBm3X79cB/S2HQ9c7B+ph p5nmY14tFi07EJzG5kC3kXrnuyhsGUxcfbWtCH0zENH5Bugk8C9v3sd2LkiTcESn 6I9GuMclXhORH4IYrm3P9tv0f3JGG9Y= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:27 2025 by rpki-client