$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa File: cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json) Hash identifier: uBdbkYAmuanuC4ZnIVufKbOPq+STp40xiG2PUnmCVA0= Subject key identifier: F2:01:67:C2:27:BF:6E:30:D1:69:AB:91:A1:E3:04:7E:C2:7B:6A:6D Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Certificate serial: 010D0C9F4328584B84E7705A87089DD58C7D2700 Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 147.160.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:70:5a:87:08:9d:d5:8c:7d:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=bbd607a4-4383-4ec6-bde7-f9c8799c4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:19:08:55:e8:8f:4f:7e:67:eb:4c:f8:1a: ba:76:85:a5:bd:0c:41:ea:5b:7d:b9:b3:a9:50:77: 59:6f:ef:21:fd:fc:33:40:a6:e4:ec:6f:be:20:aa: c6:d3:ea:1f:93:da:f6:84:92:d3:e8:40:35:44:83: 0b:1f:cd:d7:41:d5:db:58:62:51:bb:b8:b4:a6:9a: 26:1f:5f:41:7b:8c:32:14:70:ec:8e:67:18:13:db: 49:ac:61:68:f5:45:6f:81:75:06:4e:22:ff:00:a1: b8:13:d0:e2:dd:90:6b:25:c3:62:46:62:26:49:d1: 08:49:f3:c0:70:77:63:04:4b:11:2a:47:21:fd:62: 0f:c7:92:f1:ef:3b:8a:9c:63:1d:df:05:b5:e4:71: 34:45:60:22:f1:51:53:7a:40:2e:69:c8:1e:79:4a: 60:be:14:ba:58:86:47:86:7f:35:4e:40:b6:95:4c: b8:ad:56:ed:8f:12:36:22:97:e1:03:f1:23:96:4b: 1c:b6:5c:9f:e8:f8:4f:cf:e9:b3:fb:de:90:5d:58: f4:c6:78:f4:00:e8:2c:b3:ae:27:c7:cf:ec:36:da: 2b:a5:54:b1:a0:90:aa:14:12:20:28:5f:9c:2f:15: f9:84:af:33:89:9a:78:98:cf:d6:41:25:10:1c:13: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:67:C2:27:BF:6E:30:D1:69:AB:91:A1:E3:04:7E:C2:7B:6A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl X509v3 Authority Key Identifier: keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer sbgp-ipAddrBlock: critical IPv4: 147.160.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ec:e0:59:58:3e:18:ba:4d:31:5a:ca:7f:b3:af:52:c8:de: 6e:63:b7:41:e6:1e:fe:52:61:86:52:bb:a6:71:49:18:cb:cd: 24:43:fa:04:53:b0:65:72:4e:ee:b0:6e:47:0f:26:12:ee:99: f3:da:2f:fd:53:f3:c5:89:ba:91:fb:4a:08:8c:22:ce:e1:5d: ed:63:fa:93:c3:08:d6:e7:da:01:4f:45:8e:64:ee:33:ae:23: e9:9a:b0:fc:07:9a:88:7d:dc:1b:72:e6:91:b2:0f:6b:a4:8f: a4:68:aa:77:71:ca:03:4e:42:00:22:8b:74:81:d5:f6:fc:e9: f1:55:d4:c7:9b:82:a2:2c:7a:20:3f:f9:03:d9:f4:16:3d:33: f1:62:22:28:f8:f2:f8:6b:fa:c4:e8:36:63:f7:3d:ba:bf:78: 50:6f:b3:2c:9d:c7:59:66:3d:ad:4d:9d:39:4d:d9:ad:dd:75: a0:e8:26:cd:db:0a:24:1a:ce:ef:0d:b9:fb:ef:d2:b5:c9:8a: 49:78:b7:ca:ae:8c:b1:39:59:c2:42:cd:cd:95:41:97:b3:06: 73:b9:3a:80:1e:c9:48:d4:a6:69:29:8b:71:51:71:85:59:77: 44:4c:81:7b:b7:9f:22:52:54:12:be:12:91:87:7f:53:31:25: 62:a4:2f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Bahwid1Yx9JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky MmU2MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YmJkNjA3YTQtNDM4My00ZWM2LWJkZTctZjljODc5OWM0MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCUZCFXoj09+Z+tM+Bq6doWlvQxB6lt9ubOp UHdZb+8h/fwzQKbk7G++IKrG0+ofk9r2hJLT6EA1RIMLH83XQdXbWGJRu7i0ppom H19Be4wyFHDsjmcYE9tJrGFo9UVvgXUGTiL/AKG4E9Di3ZBrJcNiRmImSdEISfPA cHdjBEsRKkch/WIPx5Lx7zuKnGMd3wW15HE0RWAi8VFTekAuacgeeUpgvhS6WIZH hn81TkC2lUy4rVbtjxI2IpfhA/Ejlksctlyf6PhPz+mz+96QXVj0xnj0AOgss64n x8/sNtorpVSxoJCqFBIgKF+cLxX5hK8ziZp4mM/WQSUQHBPedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIBZ8Inv24w0WmrkaHjBH7Ce2ptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4 OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvY2Y4ZmU1MmYtNTdhMi0z YmM3LWIyNTEtZDc3MjIxOGE4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5 MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3s4FlYPhi6TTFayn+zr1LI3m5jt0HmHv5SYYZSu6ZxSRjLzSRD+gRT sGVyTu6wbkcPJhLumfPaL/1T88WJupH7SgiMIs7hXe1j+pPDCNbn2gFPRY5k7jOu I+masPwHmoh93Bty5pGyD2ukj6RoqndxygNOQgAii3SB1fb86fFV1MebgqIseiA/ +QPZ9BY9M/FiIij48vhr+sToNmP3Pbq/eFBvsyydx1lmPa1NnTlN2a3ddaDoJs3b CiQazu8Nufvv0rXJikl4t8qujLE5WcJCzc2VQZezBnO5OoAeyUjUpmkpi3FRcYVZ d0RMgXu3nyJSVBK+EpGHf1MxJWKkL6k= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:16 2025 by rpki-client