$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa File: cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json) Hash identifier: r6JDBC6FnVGHlftzSdkoj4u67S/lJUcj68EvL5Sdp2A= Subject key identifier: 96:42:E8:28:33:AC:71:CE:94:97:C1:66:7A:EE:E3:27:11:D9:67:85 Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F4328584A6DBB44AC6399B39170901D80 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 23539 IP address blocks: 147.185.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:44:ac:63:99:b3:91:70:90:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=22f3b0e5-811d-439e-934f-99a60b9f4db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:f9:0c:97:09:ad:cd:41:20:70:14:c5:ee: cf:e5:5f:15:50:27:d4:2f:e3:a8:3d:3b:07:78:83: f7:cf:86:88:66:94:15:28:59:9f:1e:12:8d:86:6e: 6a:11:cd:f2:5b:8f:94:d3:21:83:e1:d9:63:ad:ba: ea:7f:ef:f4:62:7c:a5:c4:75:95:2d:b3:ab:e6:60: 36:c7:ea:70:38:d3:04:0f:c5:13:d0:96:9f:bd:c0: 2b:42:8d:3c:76:e1:ba:d4:81:63:6e:84:3c:b1:b9: 02:92:08:f8:26:75:d2:ae:16:fd:0e:af:b1:40:c5: c2:bc:bf:0c:5c:bf:4f:cc:27:52:f4:6a:59:b1:5c: 5d:00:02:b5:d3:af:07:eb:0e:24:23:25:97:12:65: 4a:f8:96:66:d4:4f:ef:fe:3e:9e:0a:04:8f:1d:bd: 5b:ea:48:a8:13:c3:e1:8c:a2:75:d9:ef:7e:e5:ad: 42:85:4a:e4:61:f8:d1:7e:ca:3f:af:36:81:d8:35: 57:bc:d0:4b:28:2e:ce:f4:37:2b:68:8a:57:09:52: 8b:c6:e5:f5:a1:e9:5d:15:ba:fa:3b:84:2a:68:43: 71:c6:c0:31:ce:e8:30:0b:40:ff:1a:4f:1b:60:6e: bc:a1:9b:fb:f2:8c:42:09:3b:df:87:dc:6d:cc:9a: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:E8:28:33:AC:71:CE:94:97:C1:66:7A:EE:E3:27:11:D9:67:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 147.185.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5a:b0:aa:6a:d0:8e:a1:cc:05:a9:92:c6:b5:6e:8e:6d:41: 0f:d5:98:8c:0f:a3:6f:1b:8b:5a:ce:d1:95:a0:4f:04:fc:e2: 4e:f4:92:0c:69:12:b2:31:f8:ed:40:67:25:7a:6e:23:17:18: 6e:33:38:f2:ce:43:b0:b4:90:24:e3:9a:7f:a2:da:68:6b:6b: fe:6e:6f:e9:95:d4:30:a8:fd:aa:dd:7f:52:70:20:1d:c1:2a: 89:19:9f:61:f9:13:aa:f4:94:3d:03:d9:db:10:f3:26:f9:90: e2:22:c7:42:75:1f:2d:c9:95:18:28:12:72:e4:af:ef:db:d3: 96:f4:6f:30:37:35:54:1f:5a:f5:d5:a1:83:71:fc:88:b4:2d: 6d:29:cf:11:01:64:d3:4e:d8:7b:54:22:47:8d:11:14:da:34: fb:09:06:17:f1:44:e2:4a:02:4c:57:af:00:28:b2:7b:b5:83: 2c:2e:c5:02:36:b3:ea:34:9e:2b:90:00:62:8b:dc:5f:b9:bb: 81:f6:68:14:9f:95:78:ab:72:7e:78:0f:ac:4d:a2:a1:3f:13: 6d:27:0f:50:9f:2d:d8:c9:b6:1c:26:6c:38:e9:71:c7:8e:c9: 1f:0a:9f:82:d3:3f:62:ed:5f:ae:99:d5:ab:36:23:65:5b:1d: 1d:cf:02:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0SsY5mzkXCQHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MjJmM2IwZTUtODExZC00MzllLTkzNGYtOTlhNjBiOWY0ZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyn5DJcJrc1BIHAUxe7P5V8VUCfUL+OoPTsH eIP3z4aIZpQVKFmfHhKNhm5qEc3yW4+U0yGD4dljrbrqf+/0YnylxHWVLbOr5mA2 x+pwONMED8UT0JafvcArQo08duG61IFjboQ8sbkCkgj4JnXSrhb9Dq+xQMXCvL8M XL9PzCdS9GpZsVxdAAK1068H6w4kIyWXEmVK+JZm1E/v/j6eCgSPHb1b6kioE8Ph jKJ12e9+5a1ChUrkYfjRfso/rzaB2DVXvNBLKC7O9DcraIpXCVKLxuX1oeldFbr6 O4QqaENxxsAxzugwC0D/Gk8bYG68oZv78oxCCTvfh9xtzJpHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZC6CgzrHHOlJfBZnru4ycR2WeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvY2RjNTU1NTktOGNhMC0z MmFlLTkyNzktZGYzM2NmOWVmNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFasKpq0I6hzAWpksa1bo5tQQ/VmIwPo28bi1rO0ZWgTwT84k70kgxp ErIx+O1AZyV6biMXGG4zOPLOQ7C0kCTjmn+i2mhra/5ub+mV1DCo/ardf1JwIB3B KokZn2H5E6r0lD0D2dsQ8yb5kOIix0J1Hy3JlRgoEnLkr+/b05b0bzA3NVQfWvXV oYNx/Ii0LW0pzxEBZNNO2HtUIkeNERTaNPsJBhfxROJKAkxXrwAosnu1gywuxQI2 s+o0niuQAGKL3F+5u4H2aBSflXircn54D6xNoqE/E20nD1CfLdjJthwmbDjpcceO yR8Kn4LTP2LtX66Z1as2I2VbHR3PAuY= -----END CERTIFICATE-----Generated at Wed Jul 9 23:10:47 2025 by rpki-client