$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: I75Kuc+68e6Hd8fCIGIjW4N4GsOOjsB8Utxc1QfTLWU= Subject key identifier: CA:7F:A9:35:48:E1:C0:8B:6C:41:49:AC:99:1C:0C:1D:AA:3B:16:69 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584B4081B2E0251D56234C985280 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b2:e0:25:1d:56:23:4c:98:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=31bb0907-c71e-4df0-8246-5e6a2c668c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:28:d4:3a:1c:18:52:b2:e1:b8:33:e8:fa: c5:55:a6:1c:15:7e:9c:17:3d:70:d9:38:42:38:74: a2:82:f5:f0:aa:44:23:73:87:36:b0:bd:59:c1:a0: ec:8b:39:5c:5f:cc:38:22:73:eb:e9:a1:1c:a3:22: af:39:bd:8d:1b:a5:fa:b3:e8:23:49:68:8e:ec:5f: 22:15:cd:74:ed:7e:43:a2:f6:14:29:17:cc:da:7f: 10:29:c8:bd:d8:81:32:69:61:ed:95:c2:52:40:81: 4a:34:42:65:07:99:da:f1:86:0a:51:48:22:d2:d9: 86:c6:f5:10:e6:06:8f:1b:d2:6e:53:59:cc:30:04: 70:fd:ea:a3:80:83:27:c8:c0:64:91:fe:a9:2f:32: bc:b7:b5:9e:5d:a3:44:8e:69:6b:f3:66:12:aa:78: e3:47:7f:9d:51:3f:02:6a:69:7c:4d:59:78:c8:09: b6:6d:4e:f6:b8:0c:06:f9:6b:81:48:a0:c2:82:0e: b9:11:7a:98:ad:b9:02:4a:f1:a8:d1:98:55:b7:44: 13:c2:41:2a:8d:42:5a:92:80:a1:8e:27:be:63:ec: 4a:51:35:84:cd:d4:2d:ab:17:f9:46:26:df:03:81: cb:e4:a3:32:58:f5:d9:5a:cb:fd:33:43:77:0e:8d: d0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:A9:35:48:E1:C0:8B:6C:41:49:AC:99:1C:0C:1D:AA:3B:16:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:74:9b:4a:81:1f:9f:eb:d8:4b:7a:19:f3:f7:ce:ca:89: e1:e5:3a:ed:2c:b2:de:35:69:96:98:e6:f5:d8:f9:bd:03:e6: 42:74:e7:fb:10:e3:44:4f:45:ce:02:45:63:35:a0:53:68:17: fe:92:ce:01:bb:9d:01:6d:1e:80:b0:5c:fe:03:6a:0e:b6:1e: 87:f0:ff:a0:ab:60:6f:5f:1c:07:df:21:07:84:bd:d6:da:5f: 9f:f0:24:e2:9e:44:2d:33:6c:d6:b3:18:a7:70:70:a6:7e:c5: be:06:e8:64:bb:00:9f:f6:53:5b:04:cf:ab:71:57:e2:f1:54: 54:e1:cf:5a:14:e3:ff:6b:06:04:11:ed:bc:4e:04:f6:98:2d: 65:d0:6c:68:8b:32:2b:df:98:bf:3c:88:14:b0:48:25:f8:c1: c5:98:54:d2:64:1b:31:a2:d9:c3:f8:ae:db:01:5d:ce:99:3c: 20:f5:2b:9b:d2:6a:50:d9:0d:f2:4b:54:e9:d6:7a:fa:b1:df: cf:21:ba:79:93:b4:6b:08:e9:44:b6:c9:bb:38:31:6b:5a:af: 70:42:62:15:1d:58:fe:0b:b1:d5:01:60:b3:3b:e4:8b:a9:a1: 11:0c:31:45:ad:01:da:29:f9:aa:6f:0b:b7:a2:e4:e3:d3:83: 9c:6b:94:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbLgJR1WI0yYUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MzFiYjA5MDctYzcxZS00ZGYwLTgyNDYtNWU2YTJjNjY4YzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOAo1DocGFKy4bgz6PrFVaYcFX6cFz1w2ThC OHSigvXwqkQjc4c2sL1ZwaDsizlcX8w4InPr6aEcoyKvOb2NG6X6s+gjSWiO7F8i Fc107X5DovYUKRfM2n8QKci92IEyaWHtlcJSQIFKNEJlB5na8YYKUUgi0tmGxvUQ 5gaPG9JuU1nMMARw/eqjgIMnyMBkkf6pLzK8t7WeXaNEjmlr82YSqnjjR3+dUT8C aml8TVl4yAm2bU72uAwG+WuBSKDCgg65EXqYrbkCSvGo0ZhVt0QTwkEqjUJakoCh jie+Y+xKUTWEzdQtqxf5RibfA4HL5KMyWPXZWsv9M0N3Do3QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp/qTVI4cCLbEFJrJkcDB2qOxZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9JdJtKgR+f69hLehnz987KieHlOu0sst41aZaY5vXY+b0D5kJ05/sQ 40RPRc4CRWM1oFNoF/6SzgG7nQFtHoCwXP4Dag62Hofw/6CrYG9fHAffIQeEvdba X5/wJOKeRC0zbNazGKdwcKZ+xb4G6GS7AJ/2U1sEz6txV+LxVFThz1oU4/9rBgQR 7bxOBPaYLWXQbGiLMivfmL88iBSwSCX4wcWYVNJkGzGi2cP4rtsBXc6ZPCD1K5vS alDZDfJLVOnWevqx388hunmTtGsI6US2ybs4MWtar3BCYhUdWP4LsdUBYLM75Iup oREMMUWtAdop+apvC7ei5OPTg5xrlOc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:16 2025 by rpki-client