$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa File: 3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa (raw, json) Hash identifier: vitwes0OQ1eDjnaQR1siWO7AC8ZABrim5dZE7OFyYoo= Subject key identifier: 73:05:B7:8E:2D:45:B9:19:CC:4B:B1:7D:6A:2B:D8:41:97:0B:1C:29 Certificate issuer: /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9 Certificate serial: 010D0C9F4328584AF52129C3F17CF047B844DD80 Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8849 IP address blocks: 162.247.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:29:c3:f1:7c:f0:47:b8:44:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=88e3ac8c-3efe-4c0e-9bfb-3acb453b713a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f2:ac:a2:1a:83:82:64:c9:c3:a6:5a:6e:e6: 67:47:3f:e0:15:b7:f8:9e:ed:c7:df:ac:02:61:d4: 6f:66:7a:fd:5a:2f:7c:05:bc:1a:42:72:69:46:c8: ba:c5:22:08:64:f1:5d:a4:c9:55:6d:04:1b:96:e7: f9:05:38:53:f7:6c:2a:ff:07:db:49:43:c9:c7:ef: a0:27:43:5c:a3:a1:40:58:5c:18:7d:e4:32:b2:98: ad:0e:b6:d6:9d:34:9e:31:16:81:32:1f:11:c2:e9: c9:85:14:51:1f:b5:98:eb:e8:43:3b:94:fe:ab:96: 24:76:a9:bd:ca:7d:98:d7:32:c7:93:02:2d:9f:e8: 6f:53:32:36:d2:8d:12:9e:4d:57:b0:1d:18:8e:fb: 4a:ad:50:f0:99:96:0b:41:4f:2c:1f:86:24:42:be: 67:d4:b1:a4:25:f2:d5:d9:95:e7:65:5a:37:73:5e: c6:d1:aa:39:ce:ca:ca:25:da:9e:d0:e1:0d:7b:2a: 5b:ee:92:19:9c:74:db:10:8b:61:f8:51:74:83:b9: 44:31:b4:60:eb:64:9c:9f:14:9a:4f:62:3c:79:36: 81:6e:0b:41:7f:30:71:46:e9:cf:77:73:16:45:49: 1b:45:bb:af:98:9d:11:7b:37:78:54:fc:a4:9f:b9: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:05:B7:8E:2D:45:B9:19:CC:4B:B1:7D:6A:2B:D8:41:97:0B:1C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl X509v3 Authority Key Identifier: keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer sbgp-ipAddrBlock: critical IPv4: 162.247.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b3:62:6d:d9:6d:7e:c2:83:e9:79:2c:48:3b:d1:f3:ff:55: b9:50:23:9b:02:81:86:a7:72:3c:41:7f:b0:f0:29:32:df:36: 93:3d:55:6a:6c:84:d9:f0:58:7a:5a:9f:82:05:30:0d:cd:31: d0:3a:57:5d:5f:3e:90:06:04:7a:06:96:c2:f7:b6:38:0a:e5: ef:26:a6:e7:fa:e0:e6:3b:1b:a0:e1:b3:ee:d9:7d:62:68:a2: 56:c2:c3:90:91:04:15:f8:b7:ad:e1:27:ea:2c:e2:02:af:61: b8:6c:b3:24:8a:9b:b9:64:56:f1:cf:4e:b3:b9:c0:be:e9:97: f3:36:94:86:eb:ce:14:22:94:93:d8:0b:ff:1c:19:7e:8f:1a: 5b:2b:74:e9:ce:b5:e9:33:06:77:98:c5:cc:50:88:69:e2:96: 47:40:d5:c4:95:7b:93:3e:b4:7b:21:27:b9:b5:6a:6a:c8:0c: 83:b6:33:d9:7f:d6:c1:c0:fe:2a:b2:cb:4c:e0:94:0f:d9:0b: 61:08:46:4a:f2:0a:ec:d9:ed:d2:7b:bb:89:e2:d0:bc:bc:7c: d9:d2:88:7a:33:72:96:cd:8f:97:45:74:3b:8c:52:4f:76:f7: 2d:24:52:7a:cd:cc:64:73:c7:b1:65:5b:ef:92:01:3e:dc:96: e3:27:bc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISnD8XzwR7hE3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNmY2JhNzQtMTE1Ny00NGU2LWExZTktN2Y0ZDRkOTIx OGQ5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODhlM2FjOGMtM2VmZS00YzBlLTliZmItM2FjYjQ1M2I3MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPKsohqDgmTJw6ZabuZnRz/gFbf4nu3H36wC YdRvZnr9Wi98BbwaQnJpRsi6xSIIZPFdpMlVbQQbluf5BThT92wq/wfbSUPJx++g J0Nco6FAWFwYfeQyspitDrbWnTSeMRaBMh8RwunJhRRRH7WY6+hDO5T+q5Ykdqm9 yn2Y1zLHkwItn+hvUzI20o0Snk1XsB0YjvtKrVDwmZYLQU8sH4YkQr5n1LGkJfLV 2ZXnZVo3c17G0ao5zsrKJdqe0OENeypb7pIZnHTbEIth+FF0g7lEMbRg62ScnxSa T2I8eTaBbgtBfzBxRunPd3MWRUkbRbuvmJ0Rezd4VPykn7mfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMFt44tRbkZzEuxfWor2EGXCxwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Y2Zj YmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRkNGQ5MjE4ZDkvM2M0N2VlZTQtNmZlZC0z Mjc3LWI1YjMtZTA4ZTY0ZGNhZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGNmY2JhNzQtMTE1Ny00NGU2LWEx ZTktN2Y0ZDRkOTIxOGQ5LzRjZmNiYTc0LTExNTctNDRlNi1hMWU5LTdmNGQ0ZDky MThkOS5jcmwwHwYDVR0jBBgwFoAUixjVHmui11k4EFvO+3nel/likX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80Y2ZjYmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRk NGQ5MjE4ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoveZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHezYm3ZbX7Cg+l5LEg70fP/VblQI5sCgYancjxBf7DwKTLfNpM9VWps hNnwWHpan4IFMA3NMdA6V11fPpAGBHoGlsL3tjgK5e8mpuf64OY7G6Dhs+7ZfWJo olbCw5CRBBX4t63hJ+os4gKvYbhssySKm7lkVvHPTrO5wL7pl/M2lIbrzhQilJPY C/8cGX6PGlsrdOnOtekzBneYxcxQiGnilkdA1cSVe5M+tHshJ7m1amrIDIO2M9l/ 1sHA/iqyy0zglA/ZC2EIRkryCuzZ7dJ7u4ni0Ly8fNnSiHozcpbNj5dFdDuMUk92 9y0kUnrNzGRzx7FlW++SAT7cluMnvCY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:43 2025 by rpki-client