$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa File: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (raw, json) Hash identifier: 7BGLvCsZLQSbU+y2y7Yfz6qIwzjbZvoyWjTjsGG3eJ4= Subject key identifier: 68:8E:B6:54:11:FD:BB:D6:71:2C:B0:E1:7E:B4:4A:D8:9E:84:AC:86 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584AD23BAA1280C9A876B20E3AC0 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 193.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:aa:12:80:c9:a8:76:b2:0e:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=29a8a6a7-c55a-4826-9d55-3fe0f9ebeb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:d8:e2:bc:16:fd:33:6c:82:08:df:a1:23: ff:db:d3:fd:7c:dd:a4:98:62:51:37:ee:9a:50:45: 00:7a:9b:53:11:ee:2f:2b:a2:9f:2a:60:44:1e:ce: d9:ea:4e:f2:1d:de:55:35:6f:44:b1:70:05:ce:ae: ba:38:69:a4:c8:80:3c:51:99:c1:55:0f:42:98:4f: ce:b3:85:ae:bb:ee:f4:9f:5f:45:2e:ea:e1:78:0f: 6e:0e:82:eb:b8:61:6f:ff:50:18:b6:aa:84:27:ce: f5:00:56:8b:52:ee:3b:c3:12:47:67:ae:11:59:2f: 62:ca:3a:2d:32:d8:4e:74:bd:97:f4:5a:3f:93:2c: 40:2f:36:7a:7d:18:6c:65:2c:62:c6:4e:89:14:b1: a5:e6:03:33:2a:aa:c3:19:aa:69:ec:61:69:2c:16: 5a:95:2d:48:4a:4d:e3:c2:1a:23:79:47:e0:3b:bb: 56:15:c5:30:92:64:ac:92:61:7b:1a:a1:7b:eb:19: c3:bf:07:aa:6c:ab:66:f0:91:d6:67:78:62:07:83: 7e:56:f0:fa:56:c1:80:bd:aa:f2:88:bd:4b:a1:8d: 81:3f:ed:5f:62:5c:4a:a0:ed:71:7a:b6:81:8f:79: 98:cf:85:79:1e:5f:37:6f:94:d3:dd:50:df:f3:e5: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:B6:54:11:FD:BB:D6:71:2C:B0:E1:7E:B4:4A:D8:9E:84:AC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/d73a5915-ee1f-33f2-8b70-f050ef95069f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:73:ad:89:4d:91:ed:2c:8b:86:fe:10:11:64:6a:f5:5c:b2: 05:c4:e2:50:6c:c1:3b:e3:20:66:26:57:57:04:65:6f:53:58: ee:48:c2:90:c6:46:00:43:67:c4:3c:eb:e1:51:f7:37:02:fd: 1e:14:10:1e:2b:80:23:46:80:43:c6:38:e1:e9:4b:06:6f:bc: c3:04:65:3a:8b:a0:9c:76:71:5b:6d:72:62:3b:63:3e:c5:f3: f7:ce:c6:37:88:3f:98:ef:f2:d4:1f:af:4e:87:db:32:16:38: cf:e1:0c:67:13:85:9d:42:43:92:d4:6b:62:2b:33:99:67:14: df:c2:33:3e:33:96:9b:ea:57:9a:0f:b9:33:46:14:8a:10:19: e8:b5:af:5e:a8:70:69:f8:4c:2e:83:f3:16:2e:cd:f2:79:72: ef:40:62:1b:2e:ff:6a:31:7d:34:7a:c3:aa:a6:0b:f9:89:1e: 0c:58:c6:76:32:53:cd:ca:75:16:1c:25:81:af:2a:b2:9c:15: 9b:61:53:b7:7c:59:86:0c:f1:a2:66:76:6d:a7:db:73:92:9e: f0:f2:81:1d:d3:90:78:54:ad:02:53:9a:69:f8:09:03:55:5f: cb:79:dd:e5:bc:6e:bf:13:69:43:8a:01:57:42:06:54:1d:5c: 6a:77:65:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6oSgMmodrIOOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjlhOGE2YTctYzU1YS00ODI2LTlkNTUtM2ZlMGY5ZWJlYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGDY4rwW/TNsggjfoSP/29P9fN2kmGJRN+6a UEUAeptTEe4vK6KfKmBEHs7Z6k7yHd5VNW9EsXAFzq66OGmkyIA8UZnBVQ9CmE/O s4Wuu+70n19FLurheA9uDoLruGFv/1AYtqqEJ871AFaLUu47wxJHZ64RWS9iyjot MthOdL2X9Fo/kyxALzZ6fRhsZSxixk6JFLGl5gMzKqrDGapp7GFpLBZalS1ISk3j whojeUfgO7tWFcUwkmSskmF7GqF76xnDvweqbKtm8JHWZ3hiB4N+VvD6VsGAvary iL1LoY2BP+1fYlxKoO1xeraBj3mYz4V5Hl83b5TT3VDf8+Xx6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiOtlQR/bvWcSyw4X60StiehKyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvZDczYTU5MTUtZWUxZi0z M2YyLThiNzAtZjA1MGVmOTUwNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABzrYlNke0si4b+EBFkavVcsgXE4lBswTvjIGYmV1cEZW9TWO5IwpDG RgBDZ8Q86+FR9zcC/R4UEB4rgCNGgEPGOOHpSwZvvMMEZTqLoJx2cVttcmI7Yz7F 8/fOxjeIP5jv8tQfr06H2zIWOM/hDGcThZ1CQ5LUa2IrM5lnFN/CMz4zlpvqV5oP uTNGFIoQGei1r16ocGn4TC6D8xYuzfJ5cu9AYhsu/2oxfTR6w6qmC/mJHgxYxnYy U83KdRYcJYGvKrKcFZthU7d8WYYM8aJmdm2n23OSnvDygR3TkHhUrQJTmmn4CQNV X8t53eW8br8TaUOKAVdCBlQdXGp3ZSU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:23 2025 by rpki-client