$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c15955c5-c199-3958-ba47-0cc1531f36a5.roa File: c15955c5-c199-3958-ba47-0cc1531f36a5.roa (raw, json) Hash identifier: YAicedCblwrAPWAHcWSYnYAL4E8vWyAol++yCgSNbHE= Subject key identifier: 1F:95:FE:D7:9A:9B:FC:43:83:9C:E8:5A:EA:55:A2:9D:4E:13:76:E4 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584A9A66345B1AC1F4CF6371D000 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c15955c5-c199-3958-ba47-0cc1531f36a5.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 5050 IP address blocks: 147.73.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:34:5b:1a:c1:f4:cf:63:71:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=c0d0fb28-319a-48d9-b602-65b87e823cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:ac:87:36:c8:43:53:d8:cb:c6:13:35:14: 26:cb:90:7e:85:c4:2c:53:4b:fe:6c:33:c0:ec:52: 5b:7f:20:99:c1:84:4d:e2:ce:ce:dc:7c:07:a1:c6: 96:bf:55:1d:1a:b6:af:8b:a1:54:8f:7f:65:56:5a: 5f:b4:f5:bb:8c:4a:35:a9:1b:be:cd:75:1c:cb:3a: d2:15:7f:e0:69:2a:0d:2b:0c:2f:53:48:f8:a1:a7: bd:12:a0:1b:2c:75:ea:48:1e:5b:ca:7b:eb:17:14: 90:44:c0:58:ac:e3:6f:16:b7:42:41:05:55:5c:69: dd:47:c8:9a:fe:c5:2a:25:c9:30:5f:72:59:60:c2: 05:b1:3f:c0:59:f6:ef:8c:da:68:17:e0:c2:c2:2a: b3:b1:77:15:44:73:fc:7d:f3:35:74:e1:dc:6f:c5: 02:f7:74:07:d0:d5:2c:fb:4f:37:f6:30:5a:91:7c: 95:43:c7:fb:f7:a8:bc:36:1d:3d:48:f4:ba:05:1e: f7:62:24:45:5e:ad:56:bf:2c:c9:a0:14:dd:8f:32: 36:f0:30:39:0c:cb:fb:2f:99:5a:fa:7a:a7:79:7d: 1b:0c:78:fc:b0:64:dc:a0:af:70:c8:d5:b3:df:21: dd:3d:8c:d2:5e:a3:fa:7a:72:1f:f9:15:09:7a:ec: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:FE:D7:9A:9B:FC:43:83:9C:E8:5A:EA:55:A2:9D:4E:13:76:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c15955c5-c199-3958-ba47-0cc1531f36a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4f:e1:e6:ec:94:a9:71:8b:39:bd:92:ce:b2:29:f3:f0:dd: f4:84:49:87:36:bd:fb:0c:29:62:c4:50:a9:97:b1:0d:c4:94: 40:fb:95:ed:38:3e:f9:97:ba:ed:28:a3:00:bb:19:0c:c2:47: 3c:60:6f:f1:3c:88:92:43:8b:69:32:f8:f6:b6:cb:5c:b4:a4: f7:aa:5e:38:68:39:4e:d4:56:6d:e2:1f:c8:68:f1:f5:72:fa: c2:39:ec:d2:3d:ab:68:b1:26:43:d0:91:bb:49:55:5e:23:f9: f3:a7:d3:4c:c9:d6:ec:0b:ec:bd:79:45:c8:8b:cb:2c:3e:c9: d1:97:05:fb:98:01:73:76:60:f7:4d:b8:c9:7a:9c:ef:30:17: f5:28:5e:9c:8d:62:d9:9b:3f:90:00:45:59:8d:5e:31:13:5e: 6f:46:ba:14:07:da:e0:2f:44:24:4c:1f:d4:f4:7a:06:18:44: c4:54:1d:d0:9f:97:e6:53:57:de:c2:0c:3b:86:d8:46:fe:2e: 0e:13:68:43:95:e9:16:8a:cc:c3:5d:f9:d7:36:f5:98:b0:be: 26:be:51:76:be:e9:a1:15:0a:b0:c1:5c:ec:33:c2:df:9d:06: 87:08:72:21:81:40:cf:ec:51:a3:ab:78:7e:27:74:06:28:1f: 2a:a5:cd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjRbGsH0z2Nx0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YzBkMGZiMjgtMzE5YS00OGQ5LWI2MDItNjViODdlODIzY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovCshzbIQ1PYy8YTNRQmy5B+hcQsU0v+bDPA 7FJbfyCZwYRN4s7O3HwHocaWv1UdGravi6FUj39lVlpftPW7jEo1qRu+zXUcyzrS FX/gaSoNKwwvU0j4oae9EqAbLHXqSB5bynvrFxSQRMBYrONvFrdCQQVVXGndR8ia /sUqJckwX3JZYMIFsT/AWfbvjNpoF+DCwiqzsXcVRHP8ffM1dOHcb8UC93QH0NUs +0839jBakXyVQ8f796i8Nh09SPS6BR73YiRFXq1WvyzJoBTdjzI28DA5DMv7L5la +nqneX0bDHj8sGTcoK9wyNWz3yHdPYzSXqP6enIf+RUJeuzsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+V/team/xDg5zoWupVop1OE3bkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvYzE1OTU1YzUtYzE5OS0z OTU4LWJhNDctMGNjMTUzMWYzNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVP4ebslKlxizm9ks6yKfPw3fSESYc2vfsMKWLEUKmXsQ3ElED7le04 PvmXuu0oowC7GQzCRzxgb/E8iJJDi2ky+Pa2y1y0pPeqXjhoOU7UVm3iH8ho8fVy +sI57NI9q2ixJkPQkbtJVV4j+fOn00zJ1uwL7L15RciLyyw+ydGXBfuYAXN2YPdN uMl6nO8wF/UoXpyNYtmbP5AARVmNXjETXm9GuhQH2uAvRCRMH9T0egYYRMRUHdCf l+ZTV97CDDuG2Eb+Lg4TaEOV6RaKzMNd+dc29Ziwvia+UXa+6aEVCrDBXOwzwt+d BocIciGBQM/sUaOreH4ndAYoHyqlzaA= -----END CERTIFICATE-----Generated at Sun Jul 27 11:56:13 2025 by rpki-client