$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/adb92342-2bae-3a0c-b60a-b00c523697e5.roa File: adb92342-2bae-3a0c-b60a-b00c523697e5.roa (raw, json) Hash identifier: m5H19nud7OUuu0Feq01CmMUBzGlRDnmif8+fdi0Chvo= Subject key identifier: 11:8A:49:BC:00:5A:D5:9F:E1:42:0D:4F:1A:2E:3E:F3:A5:50:13:97 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584B0A1169BC18AA54C452AFFE80 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/adb92342-2bae-3a0c-b60a-b00c523697e5.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 18434 IP address blocks: 147.249.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:69:bc:18:aa:54:c4:52:af:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=58c9c851-a8e1-442b-910b-4989c880c925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:73:aa:f9:14:b4:70:fc:33:08:23:9f:02: 78:b2:63:d7:18:eb:b0:95:ef:8e:bd:95:f1:f4:27: dd:20:9c:16:cd:23:48:d9:c8:c1:ed:03:f3:51:21: 98:e4:43:27:9d:b7:30:d7:60:0b:ee:d0:9d:61:52: 35:7a:f6:67:98:99:6b:4d:51:13:d0:b9:61:a0:9d: e3:69:6d:63:dc:64:f0:da:84:17:1a:05:5d:9e:05: 9a:a3:d0:71:48:9e:40:f2:a1:1e:ac:0e:04:76:c8: 10:e6:27:61:07:0b:3d:4f:cf:d9:07:4c:83:37:10: ec:6b:34:d2:b9:22:84:e5:81:01:49:80:a0:0c:0c: 03:a4:bf:6a:0f:d9:f3:2e:c5:01:b2:f9:6a:44:9b: 96:1d:1e:4c:56:e3:2f:44:0b:1b:68:f8:e6:4d:9b: fc:e0:04:2e:29:d0:4c:73:42:bc:1e:da:83:e5:8a: fb:42:90:da:c9:c4:04:61:7a:ac:6f:fa:8a:62:49: bf:d2:45:34:06:0d:69:95:be:19:fd:b5:43:c0:5e: 45:ac:74:66:97:be:36:7f:03:36:48:2a:95:f9:8f: 9a:e7:fb:ff:33:26:cc:8c:02:ba:20:39:c5:a6:5e: c2:fa:e6:52:1b:f1:50:52:4c:e6:e2:e7:66:94:c9: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:49:BC:00:5A:D5:9F:E1:42:0D:4F:1A:2E:3E:F3:A5:50:13:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/adb92342-2bae-3a0c-b60a-b00c523697e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:09:b2:aa:38:6b:ba:c3:d2:01:27:b0:7a:0b:56:74:5a:c0: 00:97:ef:a8:dc:d1:ff:5a:b4:fa:64:bf:e4:0a:f5:c9:f9:72: 25:96:d3:b7:66:3f:ee:5e:53:ce:5c:2e:55:c2:22:81:b4:2d: 49:54:00:12:1e:18:87:89:78:2e:3f:87:8a:02:6f:0e:b8:ed: ba:e5:fb:fe:7e:bd:f4:3c:fb:d7:d1:9c:64:34:b0:f5:94:82: a6:42:52:83:bc:b9:58:d0:80:05:b5:55:22:0c:92:ac:a5:d8: a0:95:95:70:7f:a4:09:95:3c:7c:a6:3e:b4:6a:65:57:df:91: c6:14:19:2c:cf:5e:0a:c2:fc:dc:4c:a0:a4:9a:ca:ee:7c:ce: ed:4e:d3:33:27:bc:ed:be:39:ad:f4:3b:8e:da:72:b8:44:81: f3:9b:7a:d6:41:a2:10:94:f2:14:6f:0c:cc:28:17:c3:33:c4: aa:82:8d:3d:0a:88:ce:3a:86:1c:c5:8c:d5:6c:c5:2d:e3:6a: d0:06:bf:1c:ba:54:12:95:36:20:f8:fb:68:9e:59:7a:11:39: 2d:1f:86:65:96:8f:1a:50:5a:fa:4a:f2:af:98:cc:67:68:ff: d1:53:92:b7:1c:d3:c3:7c:4a:f6:2f:af:3f:5e:97:50:c3:5f: 50:ec:fc:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWm8GKpUxFKv/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NThjOWM4NTEtYThlMS00NDJiLTkxMGItNDk4OWM4ODBjOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiZzqvkUtHD8MwgjnwJ4smPXGOuwle+OvZXx 9CfdIJwWzSNI2cjB7QPzUSGY5EMnnbcw12AL7tCdYVI1evZnmJlrTVET0LlhoJ3j aW1j3GTw2oQXGgVdngWao9BxSJ5A8qEerA4EdsgQ5idhBws9T8/ZB0yDNxDsazTS uSKE5YEBSYCgDAwDpL9qD9nzLsUBsvlqRJuWHR5MVuMvRAsbaPjmTZv84AQuKdBM c0K8HtqD5Yr7QpDaycQEYXqsb/qKYkm/0kU0Bg1plb4Z/bVDwF5FrHRml742fwM2 SCqV+Y+a5/v/MybMjAK6IDnFpl7C+uZSG/FQUkzm4udmlMncYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGKSbwAWtWf4UINTxouPvOlUBOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYWRiOTIzNDItMmJhZS0z YTBjLWI2MGEtYjAwYzUyMzY5N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Jsqo4a7rD0gEnsHoLVnRawACX76jc0f9atPpkv+QK9cn5ciWW07dm P+5eU85cLlXCIoG0LUlUABIeGIeJeC4/h4oCbw647brl+/5+vfQ8+9fRnGQ0sPWU gqZCUoO8uVjQgAW1VSIMkqyl2KCVlXB/pAmVPHymPrRqZVffkcYUGSzPXgrC/NxM oKSayu58zu1O0zMnvO2+Oa30O47acrhEgfObetZBohCU8hRvDMwoF8MzxKqCjT0K iM46hhzFjNVsxS3jatAGvxy6VBKVNiD4+2ieWXoROS0fhmWWjxpQWvpK8q+YzGdo /9FTkrcc08N8SvYvrz9el1DDX1Ds/Ds= -----END CERTIFICATE-----Generated at Tue Nov 11 19:42:09 2025 by rpki-client