$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa File: 958db347-b590-339b-ac95-b832c056324d.roa (raw, json) Hash identifier: 2bvLHfy2DEPvW3Rqyp1UxnywnWJ/iHkRPnJk5nSz090= Subject key identifier: 32:3F:EC:7E:91:4F:5B:28:ED:88:AE:56:1A:98:94:B1:5E:82:DA:E3 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B0CDC0B6EAC701E2C6EE74C80 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 27604 IP address blocks: 147.72.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0b:6e:ac:70:1e:2c:6e:e7:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=6f0691ed-b000-4399-a692-9599ff501515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:1b:80:0e:91:38:98:ba:b5:f9:e4:e1:cd: cf:67:78:7e:65:c9:39:87:01:ab:1e:a5:21:a0:e0: 50:be:1f:ea:e3:d4:f4:90:f9:b5:b5:58:dd:5f:ef: ab:7d:13:f8:a5:a2:af:72:57:7e:2b:6e:dc:d3:56: d6:6d:44:09:2b:da:8f:b4:b3:98:fa:c4:e9:e7:00: 4d:fa:5c:2b:bc:78:15:f6:9d:ba:47:2e:7a:5c:65: 6b:03:1f:70:eb:14:dd:f4:c5:97:a0:9b:03:84:ea: 8d:f5:71:5f:d9:ea:59:c3:ab:2f:e2:7e:0a:29:75: 1e:7d:8c:35:e2:19:2b:ab:cf:64:2f:2a:cf:02:ae: 7d:5b:18:e1:a7:54:24:1d:f3:4f:b8:0f:55:c3:9c: 9d:b2:32:85:71:d5:31:2d:a3:38:cc:39:4d:ef:cc: 48:43:b3:60:26:3a:8f:37:9d:96:bc:0d:74:75:4c: dc:6e:38:be:4e:1d:16:62:b7:1b:be:54:fc:9a:ba: 6a:1c:f5:b0:47:18:3d:22:12:e9:c1:db:49:2c:d8: 32:db:76:68:80:aa:70:aa:90:e0:60:6a:be:24:da: 4d:f4:7e:ed:90:39:4c:72:4c:1f:1f:60:d8:1f:20: 19:2b:19:14:7b:0e:eb:1c:06:f4:2c:64:e1:90:08: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3F:EC:7E:91:4F:5B:28:ED:88:AE:56:1A:98:94:B1:5E:82:DA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/958db347-b590-339b-ac95-b832c056324d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d4:ca:7a:7a:a6:0b:14:40:bb:7f:47:25:0a:b6:5a:7c:20: ea:91:37:78:c2:d6:73:11:5b:43:d2:a9:07:64:d6:e3:7e:f4: d7:3b:61:39:20:23:cd:bc:28:39:8b:07:3e:9c:6c:1e:2d:a8: 10:67:e2:64:64:7e:4f:ec:5e:fb:1c:68:ab:1d:fd:36:3b:58: 47:ae:25:62:1b:87:bc:00:49:6e:16:57:89:a6:48:fa:e1:8a: f1:4d:bb:c1:5f:d2:7c:ed:ff:3a:2d:29:4e:54:8d:36:54:0e: 41:c5:b6:e6:73:83:c9:6d:67:af:6a:17:5d:6e:3d:5f:60:24: 15:fc:b8:26:15:cc:ed:db:c3:bb:26:77:38:3c:e9:ac:10:f8: 95:42:54:76:22:5a:c4:02:b5:9c:73:51:19:24:41:9c:9e:a7: 7c:f6:d4:42:4b:4b:3c:6b:a4:a8:6c:df:de:27:8a:ae:f0:13: 8d:35:e6:78:33:07:ff:99:b5:67:68:fc:90:f8:f4:25:09:ac: d4:49:4b:8e:f5:0d:45:bf:27:f7:9f:88:dd:b9:6d:68:11:14: f3:c1:56:a3:47:12:3e:a7:ad:5c:c7:fb:e5:5d:a7:87:da:91: fc:b8:f7:cd:68:2e:c0:36:5f:52:eb:79:f2:41:b9:67:dc:0d: b3:df:7a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AturHAeLG7nTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NmYwNjkxZWQtYjAwMC00Mzk5LWE2OTItOTU5OWZmNTAxNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMcbgA6ROJi6tfnk4c3PZ3h+Zck5hwGrHqUh oOBQvh/q49T0kPm1tVjdX++rfRP4paKvcld+K27c01bWbUQJK9qPtLOY+sTp5wBN +lwrvHgV9p26Ry56XGVrAx9w6xTd9MWXoJsDhOqN9XFf2epZw6sv4n4KKXUefYw1 4hkrq89kLyrPAq59Wxjhp1QkHfNPuA9Vw5ydsjKFcdUxLaM4zDlN78xIQ7NgJjqP N52WvA10dUzcbji+Th0WYrcbvlT8mrpqHPWwRxg9IhLpwdtJLNgy23ZogKpwqpDg YGq+JNpN9H7tkDlMckwfH2DYHyAZKxkUew7rHAb0LGThkAiWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI/7H6RT1so7YiuVhqYlLFegtrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvOTU4ZGIzNDctYjU5MC0z MzliLWFjOTUtYjgzMmMwNTYzMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk0j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfUynp6pgsUQLt/RyUKtlp8IOqRN3jC1nMRW0PSqQdk1uN+9Nc7YTkg I828KDmLBz6cbB4tqBBn4mRkfk/sXvscaKsd/TY7WEeuJWIbh7wASW4WV4mmSPrh ivFNu8Ff0nzt/zotKU5UjTZUDkHFtuZzg8ltZ69qF11uPV9gJBX8uCYVzO3bw7sm dzg86awQ+JVCVHYiWsQCtZxzURkkQZyep3z21EJLSzxrpKhs394niq7wE4015ngz B/+ZtWdo/JD49CUJrNRJS471DUW/J/efiN25bWgRFPPBVqNHEj6nrVzH++Vdp4fa kfy4981oLsA2X1LrefJBuWfcDbPfeiE= -----END CERTIFICATE-----Generated at Wed Sep 10 15:16:47 2025 by rpki-client