$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa File: ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa (raw, json) Hash identifier: 0gnw5cOdS3+tAUk5bQxLPewhid+P/upfEKTiZO+HHPo= Subject key identifier: 31:69:1D:B1:04:20:2D:9A:FA:4F:90:E7:65:38:81:26:E6:5D:C4:AA Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584ADECBAC2F339972583C374540 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 36374 IP address blocks: 147.185.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ac:2f:33:99:72:58:3c:37:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=facab303-267f-4c14-b0e9-501cec844074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:25:7f:fe:25:c9:cb:54:4b:30:67:49:5c: 13:03:0c:c5:ff:68:ee:a7:d8:08:9c:5f:6e:88:cd: 32:f4:72:b1:20:da:4c:f8:45:53:d4:76:79:9e:fc: 69:be:2d:2d:0a:7b:02:91:fa:ff:9a:b5:21:67:5a: f6:48:d4:f0:c6:9f:ea:ea:e2:64:44:5c:f1:07:41: a6:6f:6f:04:87:5d:f0:cd:3f:dc:8f:4d:b2:c0:76: 58:1b:af:72:80:b1:64:bf:2a:b3:28:b8:95:31:0c: 2f:8a:89:14:1e:db:4b:5a:e3:87:4c:ca:2b:82:72: 90:22:9a:01:95:e9:1b:57:ca:c0:5d:67:7d:03:62: c5:b7:41:04:6c:8b:14:40:90:ad:71:91:af:6b:5a: 1b:ac:53:85:38:85:7d:ad:67:0e:28:83:f1:e8:0e: 91:6d:35:de:1c:f1:a2:d7:e2:79:f3:78:0c:33:23: b1:b2:23:12:4b:d7:59:79:b6:5f:0b:bb:d8:ef:88: 3d:ea:77:f0:6d:8f:70:f1:c8:cd:dc:cc:85:4b:70: 71:99:b1:32:8e:5f:86:6f:3f:76:36:73:7d:ed:82: bd:62:dd:8d:18:09:f5:16:22:63:e2:79:6d:3b:81: 0c:5e:1c:13:27:a4:49:be:fa:a7:d0:c8:f7:06:46: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:69:1D:B1:04:20:2D:9A:FA:4F:90:E7:65:38:81:26:E6:5D:C4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/ef0d832d-d7a2-3d8f-8177-db51c86acb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 147.185.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:17:16:10:ca:06:8a:6d:a5:a5:f6:1e:bb:66:90:c7:e8:2c: 88:6d:ba:bd:70:c8:1c:88:15:82:f8:bb:81:e4:4b:34:38:53: ac:d3:51:a9:17:dd:bd:75:48:af:34:ec:07:e8:53:d2:41:2e: 2f:c4:f7:1d:da:3d:32:92:34:4a:55:23:29:26:af:0c:a4:b8: bc:14:9a:26:71:61:c1:b3:17:45:ea:9f:ed:23:c1:66:f7:c2: db:04:7d:df:af:d9:ce:83:8d:69:24:98:d8:76:5e:6b:f2:cc: dc:f9:7b:0b:05:f0:0f:6c:06:e9:e4:39:2c:b0:60:71:c4:89: 3c:8e:e7:72:06:ce:1a:29:6f:8d:85:0c:8a:60:90:3f:d6:c7: ae:0c:88:9c:29:cb:4f:f0:23:fa:d4:fc:17:a4:3d:3f:96:c0: d3:b4:06:7f:64:95:c7:8e:21:fe:9e:f1:09:6e:0a:ac:f2:b4: 4a:00:10:58:c3:c4:6c:6a:b5:88:fe:eb:25:d8:27:a8:be:6e: d7:a2:f9:c3:d2:20:51:0f:fb:b6:a6:b0:1d:a2:02:bb:b7:f8: 3d:12:e9:ee:98:c1:37:e4:20:bf:b6:1e:52:f6:8f:27:53:3f: 69:a0:c5:80:98:b9:a1:8e:77:50:7c:26:27:d3:fb:70:23:15: b9:33:75:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6wvM5lyWDw3RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmFjYWIzMDMtMjY3Zi00YzE0LWIwZTktNTAxY2VjODQ0MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdolf/4lyctUSzBnSVwTAwzF/2jup9gInF9u iM0y9HKxINpM+EVT1HZ5nvxpvi0tCnsCkfr/mrUhZ1r2SNTwxp/q6uJkRFzxB0Gm b28Eh13wzT/cj02ywHZYG69ygLFkvyqzKLiVMQwviokUHttLWuOHTMorgnKQIpoB lekbV8rAXWd9A2LFt0EEbIsUQJCtcZGva1obrFOFOIV9rWcOKIPx6A6RbTXeHPGi 1+J583gMMyOxsiMSS9dZebZfC7vY74g96nfwbY9w8cjN3MyFS3BxmbEyjl+Gbz92 NnN97YK9Yt2NGAn1FiJj4nltO4EMXhwTJ6RJvvqn0Mj3BkbTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFpHbEEIC2a+k+Q52U4gSbmXcSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvZWYwZDgzMmQtZDdhMi0z ZDhmLTgxNzctZGI1MWM4NmFjYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk7lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEXFhDKBoptpaX2HrtmkMfoLIhtur1wyByIFYL4u4HkSzQ4U6zTUakX 3b11SK807AfoU9JBLi/E9x3aPTKSNEpVIykmrwykuLwUmiZxYcGzF0Xqn+0jwWb3 wtsEfd+v2c6DjWkkmNh2XmvyzNz5ewsF8A9sBunkOSywYHHEiTyO53IGzhopb42F DIpgkD/Wx64MiJwpy0/wI/rU/BekPT+WwNO0Bn9klceOIf6e8QluCqzytEoAEFjD xGxqtYj+6yXYJ6i+btei+cPSIFEP+7amsB2iAru3+D0S6e6YwTfkIL+2HlL2jydT P2mgxYCYuaGOd1B8JifT+3AjFbkzdTo= -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:08 2025 by rpki-client