$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json) Hash identifier: GQwlHvFpSVFCZjU4abRFKBXfF19sH2gMjlE0Uh/4JSw= Subject key identifier: BE:B9:60:6B:5C:A1:DC:C4:75:39:99:3F:A4:CF:14:25:37:D5:CF:EA Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584AF52132D1FA5784079E397C80 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 18434 IP address blocks: 147.249.0.0/24 maxlen: 24 147.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:32:d1:fa:57:84:07:9e:39:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a38dfd20-4e62-49b8-a881-6617a062afde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:ab:ad:72:0d:c4:03:db:6d:6d:cb:e6:72: 77:b1:a6:64:11:0e:55:58:6a:28:6e:fb:ab:e2:45: c0:a4:88:b5:23:a9:1a:c3:4e:a5:f5:c7:21:c6:85: 5d:62:48:dc:44:54:c0:5d:e5:8d:e7:e3:37:6d:b0: d4:a9:72:93:48:8b:91:b6:ba:97:a4:b4:99:02:7b: 63:89:55:b8:64:d9:08:bb:3f:79:1f:be:62:34:00: 53:2c:32:7d:b5:95:b6:4e:12:44:a9:f7:ba:57:18: 49:aa:39:15:51:06:68:65:0d:05:6e:57:53:20:e4: 7c:e6:2f:ec:d5:74:31:08:97:4b:5d:3c:f5:a4:3c: 57:4b:82:b0:6e:8f:7e:3c:49:20:b7:05:33:b4:41: 17:5f:c7:3a:61:c8:f2:58:ec:88:e8:71:7f:2b:23: 43:be:96:3e:1e:d8:aa:2a:dd:72:8c:df:a1:52:43: 68:75:c4:9c:18:ed:16:dd:d1:0a:1b:95:1d:ad:74: 56:e0:52:53:a6:bf:06:7b:29:e5:2a:38:3c:b4:82: 2a:0c:bc:9a:ef:89:4c:d4:7f:49:15:6e:32:f5:57: 4c:69:cb:f0:4c:b0:c3:af:b0:87:30:13:70:4c:aa: 3c:f3:69:99:bb:37:7b:43:51:0d:9f:19:a1:32:f3: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B9:60:6B:5C:A1:DC:C4:75:39:99:3F:A4:CF:14:25:37:D5:CF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ef:12:9c:cb:93:1d:2f:61:04:5f:c6:87:da:ae:67:57:dc: 19:25:5b:e1:7d:c0:f4:cd:99:4c:49:d4:51:17:e5:5d:60:59: 34:1a:1a:2d:3c:49:d4:a0:6d:71:08:55:6d:a0:30:4f:9a:49: c5:9b:11:0e:df:b4:23:bd:c5:80:b5:67:a3:1d:7d:c3:6e:09: d0:49:e2:cf:15:98:ad:d8:d6:71:26:7e:06:1e:25:85:d1:c6: cf:77:2d:5c:d4:56:45:d1:04:3f:3d:ed:46:cc:f6:d1:18:de: d2:77:2d:22:5e:68:1c:61:68:70:5d:10:df:fc:c7:60:17:a0: cb:8b:56:bf:fb:31:58:cf:42:f1:df:a9:6d:3b:38:f0:8b:24: 34:82:b9:f5:b6:ad:d8:78:d2:8f:f0:97:5b:12:61:63:59:ee: c5:de:7a:c2:59:94:66:7c:ff:3f:68:62:9a:bd:56:22:71:55: 31:ae:03:fd:f6:a1:9a:31:69:37:06:f2:96:1c:49:98:42:dc: de:d1:a1:2c:67:3d:34:f1:eb:96:30:1d:41:46:80:e2:58:d0: 66:fb:aa:74:2f:34:0c:49:b7:da:62:68:7b:a5:0d:51:35:27: fd:b0:98:6d:59:b3:09:d3:74:5c:3a:74:a2:5d:05:1c:bc:17: fa:35:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITLR+leEB545fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTM4ZGZkMjAtNGU2Mi00OWI4LWE4ODEtNjYxN2EwNjJhZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3arrXINxAPbbW3L5nJ3saZkEQ5VWGoobvur 4kXApIi1I6kaw06l9cchxoVdYkjcRFTAXeWN5+M3bbDUqXKTSIuRtrqXpLSZAntj iVW4ZNkIuz95H75iNABTLDJ9tZW2ThJEqfe6VxhJqjkVUQZoZQ0FbldTIOR85i/s 1XQxCJdLXTz1pDxXS4Kwbo9+PEkgtwUztEEXX8c6YcjyWOyI6HF/KyNDvpY+Htiq Kt1yjN+hUkNodcScGO0W3dEKG5UdrXRW4FJTpr8GeynlKjg8tIIqDLya74lM1H9J FW4y9VdMacvwTLDDr7CHMBNwTKo882mZuzd7Q1ENnxmhMvM2qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL65YGtcodzEdTmZP6TPFCU31c/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTdjMWI3NGItNjhmZi0z OGNhLWE3YmMtZjI4MDE3NjdlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk/kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbvEpzLkx0vYQRfxofarmdX3BklW+F9wPTNmUxJ1FEX5V1gWTQaGi08 SdSgbXEIVW2gME+aScWbEQ7ftCO9xYC1Z6MdfcNuCdBJ4s8VmK3Y1nEmfgYeJYXR xs93LVzUVkXRBD897UbM9tEY3tJ3LSJeaBxhaHBdEN/8x2AXoMuLVr/7MVjPQvHf qW07OPCLJDSCufW2rdh40o/wl1sSYWNZ7sXeesJZlGZ8/z9oYpq9ViJxVTGuA/32 oZoxaTcG8pYcSZhC3N7RoSxnPTTx65YwHUFGgOJY0Gb7qnQvNAxJt9piaHulDVE1 J/2wmG1ZswnTdFw6dKJdBRy8F/o1U5Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:30:25 2025 by rpki-client