$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa File: 23d19562-52d9-3fab-90df-dd0af2be83d4.roa (raw, json) Hash identifier: TYiK4Cq7ku9ssLgeQutml+MN6EYT4zw9f9WMW1vMnB4= Subject key identifier: C8:43:CA:3D:D4:58:52:BB:D2:C8:77:4E:7E:18:D5:2D:E7:84:60:11 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584B4081B2CED137A87270A5F780 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 18434 IP address blocks: 147.249.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b2:ce:d1:37:a8:72:70:a5:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b01c24fa-eaa3-4f25-a8cc-229d760d835c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:39:c8:9e:2b:78:11:37:fd:b0:01:3b:70: 90:59:15:32:07:f7:f7:74:cb:8b:dd:07:cd:f0:4a: 0d:5b:72:89:b7:45:4a:25:f9:f5:26:7d:d1:06:03: ad:74:8c:ac:cc:01:39:ac:68:a4:a6:07:90:ec:3a: 0e:ba:66:61:da:72:b7:ae:9f:bc:8c:20:2f:3c:c5: aa:48:88:93:01:f6:36:f4:cf:5c:d1:9e:e9:bf:bc: 81:db:f6:78:ae:56:f7:f4:7c:4f:92:00:df:58:c6: d2:76:06:a9:23:8f:90:9b:d6:fc:74:2c:fe:de:9f: 67:f0:76:df:93:20:2d:34:66:7b:18:69:c0:7a:cf: 8b:dd:d8:08:76:13:c4:8b:e6:b4:f2:3b:ef:1b:38: de:d6:f4:89:e7:7c:8b:46:1e:f0:85:77:e7:45:ab: 59:a4:ad:99:5d:09:6c:a7:75:28:5f:22:fd:35:6f: 11:24:80:17:99:cc:4b:6e:69:e4:87:c6:a4:4e:9a: 64:19:d2:2f:a5:40:a4:fe:6f:8c:0b:90:df:5b:b3: 7d:a1:6e:ed:19:28:45:dd:32:7b:e0:ef:f6:dd:8b: 54:dd:86:47:90:66:59:15:1e:58:61:2f:e2:01:67: 98:ef:91:ee:13:27:b5:cd:de:d7:09:fe:bc:9a:8f: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:43:CA:3D:D4:58:52:BB:D2:C8:77:4E:7E:18:D5:2D:E7:84:60:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/23d19562-52d9-3fab-90df-dd0af2be83d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:12:fb:8a:38:3b:77:a9:f6:11:e6:74:37:1e:21:9b:ff:13: 95:c7:f2:60:a6:4e:66:43:6a:9d:6f:46:3c:d4:da:79:ea:fe: 0d:22:b7:8c:0c:10:10:fa:c2:b1:50:9e:52:d2:0c:39:2d:81: 58:3b:41:7c:40:bf:b9:19:7f:d8:08:1b:f3:1a:a9:75:62:b5: 3d:e7:f0:91:63:8a:72:72:d3:9e:be:5b:dc:3e:f7:42:9a:ae: 9b:dc:09:fb:92:fc:b9:07:25:74:13:40:63:35:e7:72:be:98: 6c:55:0c:32:6a:84:be:20:46:23:56:5b:e9:fb:1b:7c:91:be: 6a:19:7a:2e:74:56:d0:69:35:33:06:9d:91:fe:c1:6c:77:94: dd:36:8b:ae:cc:c3:dc:aa:72:7f:2c:36:67:7f:a7:88:ce:49: 30:1d:5d:e8:b4:2f:40:87:56:dc:74:44:15:c0:6d:8a:dc:4e: 3c:97:75:68:04:d2:ef:3b:3b:59:a0:5f:ac:f3:d6:49:11:e2: dc:96:4d:3d:35:42:0f:c5:35:9a:ca:76:85:68:12:9f:0b:c2: 03:16:f7:1e:2f:0c:c2:ef:c2:35:3c:09:52:9b:ee:4a:fe:d7: 7b:3c:b6:8b:5f:11:4d:88:99:25:15:60:ff:a5:2e:fc:4d:f5: 15:38:57:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbLO0TeocnCl94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjAxYzI0ZmEtZWFhMy00ZjI1LWE4Y2MtMjI5ZDc2MGQ4MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL85yJ4reBE3/bABO3CQWRUyB/f3dMuL3QfN 8EoNW3KJt0VKJfn1Jn3RBgOtdIyszAE5rGikpgeQ7DoOumZh2nK3rp+8jCAvPMWq SIiTAfY29M9c0Z7pv7yB2/Z4rlb39HxPkgDfWMbSdgapI4+Qm9b8dCz+3p9n8Hbf kyAtNGZ7GGnAes+L3dgIdhPEi+a08jvvGzje1vSJ53yLRh7whXfnRatZpK2ZXQls p3UoXyL9NW8RJIAXmcxLbmnkh8akTppkGdIvpUCk/m+MC5DfW7N9oW7tGShF3TJ7 4O/23YtU3YZHkGZZFR5YYS/iAWeY75HuEye1zd7XCf68mo/IHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhDyj3UWFK70sh3Tn4Y1S3nhGARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMjNkMTk1NjItNTJkOS0z ZmFiLTkwZGYtZGQwYWYyYmU4M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0S+4o4O3ep9hHmdDceIZv/E5XH8mCmTmZDap1vRjzU2nnq/g0it4wM EBD6wrFQnlLSDDktgVg7QXxAv7kZf9gIG/MaqXVitT3n8JFjinJy056+W9w+90Ka rpvcCfuS/LkHJXQTQGM153K+mGxVDDJqhL4gRiNWW+n7G3yRvmoZei50VtBpNTMG nZH+wWx3lN02i67Mw9yqcn8sNmd/p4jOSTAdXei0L0CHVtx0RBXAbYrcTjyXdWgE 0u87O1mgX6zz1kkR4tyWTT01Qg/FNZrKdoVoEp8LwgMW9x4vDMLvwjU8CVKb7kr+ 13s8totfEU2ImSUVYP+lLvxN9RU4V+E= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:10 2025 by rpki-client