$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2c35500-16eb-3c9e-a60c-d4492edb3c9f.roa File: c2c35500-16eb-3c9e-a60c-d4492edb3c9f.roa (raw, json) Hash identifier: 8RUIxTKmNohKvljDXWx3USpzPYL/VOFGeRjOsPSCMr0= Subject key identifier: 9A:A5:C1:47:45:E1:C8:4D:B7:EB:25:3B:4A:92:34:C4:D4:5F:6A:2F Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584AFC1C0F1FC13D819576A2F7E0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2c35500-16eb-3c9e-a60c-d4492edb3c9f.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 5050 IP address blocks: 147.73.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0f:1f:c1:3d:81:95:76:a2:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f7838d22-2fa7-47ac-9de9-85dd8194a9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:67:2e:fb:9b:0c:e5:00:53:ee:30:ef:59: bf:0e:f9:76:52:ca:97:ff:74:c7:5a:66:57:6c:9b: b1:b8:97:43:b1:8e:7a:61:91:6e:87:14:81:45:ab: a4:a5:be:12:81:90:db:08:a2:cc:c9:bc:00:44:45: ce:1e:56:97:36:5e:38:0a:f6:a8:1f:05:ad:c1:23: ff:b0:b4:52:6b:d8:df:6e:68:49:8b:ab:50:78:7a: 48:14:c4:97:ec:73:d4:46:ec:45:bd:49:6f:80:42: cf:37:a2:62:1f:78:96:1f:5d:af:61:a5:5e:24:56: 75:4d:3f:d7:f8:17:5c:5b:0c:1b:5b:0f:71:36:85: 8e:88:26:fb:23:64:f3:87:e3:aa:33:4c:1a:03:19: a4:17:be:10:0d:f0:15:ef:f5:90:2c:59:c8:fc:90: 2a:b1:f1:76:4e:47:c5:87:0f:9d:5a:59:d6:1c:c2: d8:18:8c:c7:80:b5:10:2b:77:a2:da:91:b2:5c:b7: 60:47:0a:5e:f9:c3:86:c6:95:f4:7c:39:a4:b4:f5: 86:e1:46:a5:c4:23:20:eb:fb:02:50:a9:62:d2:02: fa:01:54:f0:26:38:bf:ff:d3:95:26:0b:51:1d:94: fe:26:e3:c1:41:f7:c5:0b:2b:ec:6d:6d:60:e4:22: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:C1:47:45:E1:C8:4D:B7:EB:25:3B:4A:92:34:C4:D4:5F:6A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2c35500-16eb-3c9e-a60c-d4492edb3c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0b:76:eb:12:c8:8c:45:61:b4:64:a0:be:02:53:1b:26:d3: 9c:c1:d3:be:fd:2e:38:13:e9:3f:b9:af:d6:c3:0a:71:65:b3: 26:ce:0c:02:29:2e:4a:b2:00:fc:f0:3d:a7:7a:c9:32:bb:7f: 4a:82:79:0f:a5:e0:c0:99:c1:dc:b3:3d:4e:e3:07:a4:5d:3e: 8f:ea:28:d0:6a:71:31:5a:2d:9f:50:d2:b5:42:12:29:3a:12: b2:21:77:79:e3:03:f9:d3:df:58:25:dd:f8:b0:e2:e0:27:7d: 28:58:f7:74:63:c9:51:71:fe:ed:0e:29:b0:f6:e6:be:7a:7f: 2f:21:bd:0d:7f:de:66:04:ed:60:84:de:a5:30:13:30:00:a2: 99:19:e0:8c:19:06:02:af:45:93:88:d5:60:70:c1:d8:17:02: a6:b6:b5:6d:2f:ae:2d:a8:61:8c:b1:5b:50:06:01:6e:da:34: 6e:aa:df:c7:f8:20:df:8c:f1:ee:a6:d6:04:7b:66:15:3e:9a: 4d:8d:d1:09:40:23:48:aa:28:5e:e0:39:1e:cc:db:78:2d:7b: 48:33:84:d6:e3:e0:16:29:ec:1a:52:e2:80:71:33:ff:cb:46: 03:73:fe:08:d2:5c:39:f4:fb:70:c2:be:08:91:f7:3d:61:60: a6:8e:3f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HA8fwT2BlXai9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk Zjc4MzhkMjItMmZhNy00N2FjLTlkZTktODVkZDgxOTRhOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA059nLvubDOUAU+4w71m/Dvl2UsqX/3THWmZX bJuxuJdDsY56YZFuhxSBRaukpb4SgZDbCKLMybwAREXOHlaXNl44CvaoHwWtwSP/ sLRSa9jfbmhJi6tQeHpIFMSX7HPURuxFvUlvgELPN6JiH3iWH12vYaVeJFZ1TT/X +BdcWwwbWw9xNoWOiCb7I2Tzh+OqM0waAxmkF74QDfAV7/WQLFnI/JAqsfF2TkfF hw+dWlnWHMLYGIzHgLUQK3ei2pGyXLdgRwpe+cOGxpX0fDmktPWG4UalxCMg6/sC UKli0gL6AVTwJji//9OVJgtRHZT+JuPBQffFCyvsbW1g5CLqpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqlwUdF4chNt+slO0qSNMTUX2ovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvYzJjMzU1MDAtMTZlYi0z YzllLWE2MGMtZDQ0OTJlZGIzYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk0kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoLdusSyIxFYbRkoL4CUxsm05zB0779LjgT6T+5r9bDCnFlsybODAIp LkqyAPzwPad6yTK7f0qCeQ+l4MCZwdyzPU7jB6RdPo/qKNBqcTFaLZ9Q0rVCEik6 ErIhd3njA/nT31gl3fiw4uAnfShY93RjyVFx/u0OKbD25r56fy8hvQ1/3mYE7WCE 3qUwEzAAopkZ4IwZBgKvRZOI1WBwwdgXAqa2tW0vri2oYYyxW1AGAW7aNG6q38f4 IN+M8e6m1gR7ZhU+mk2N0QlAI0iqKF7gOR7M23gte0gzhNbj4BYp7BpS4oBxM//L RgNz/gjSXDn0+3DCvgiR9z1hYKaOPwo= -----END CERTIFICATE-----Generated at Wed Sep 10 15:14:47 2025 by rpki-client