$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa File: 7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa (raw, json) Hash identifier: VLhhkNS0q0phdKAMaAwDwXLltjbaTgMJEAvgc3eA4dY= Subject key identifier: 5A:D2:3B:F9:FB:A6:F3:5B:EF:ED:84:11:4F:7B:85:27:2F:B8:C7:2C Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584A58CB08789B9F8C50BE80A800 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:08:78:9b:9f:8c:50:be:80:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=42c5633d-c1e7-4dbd-aeb1-9ab97261c64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:a1:f1:20:61:d4:d9:6e:90:2d:8c:77:94: 1b:1d:39:a3:7b:83:9f:29:8d:61:b6:6b:57:4a:d2: e6:ff:61:59:e7:4c:49:0a:6b:0a:8c:8d:3d:0c:89: fd:c9:ff:f1:6e:c6:22:a6:88:dc:37:b1:52:7b:97: 86:a0:f8:0c:02:90:a1:57:7a:5d:1d:ac:f9:71:7b: 29:44:70:b7:26:a4:7f:12:4c:c4:53:85:65:c5:0c: af:87:0d:d5:b0:0b:47:e9:8f:8b:c2:52:e3:13:6f: f8:23:36:4e:61:64:13:83:17:18:8a:36:0e:27:a4: 8a:97:72:3c:38:a3:24:66:be:ab:69:e3:92:48:6e: 40:a9:15:b2:c5:d2:fe:54:11:60:b6:13:1a:51:73: 36:48:36:05:15:30:6f:92:a2:00:4d:b6:7a:de:f8: d5:90:ab:49:7d:2b:bc:3d:e3:b5:27:aa:f7:55:76: 19:02:db:e2:3f:c8:08:76:78:33:6f:6a:45:2a:fc: 98:6f:e5:c8:c2:ee:6c:7c:30:65:50:b6:a3:2a:f9: c8:b3:b7:00:8e:e3:5e:d6:6c:c2:a1:91:00:ff:92: a1:17:ef:77:7c:77:4e:a3:b6:8d:00:a3:80:16:ee: 1d:49:7e:89:14:0f:16:3f:f0:9f:f8:c0:ca:6c:72: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D2:3B:F9:FB:A6:F3:5B:EF:ED:84:11:4F:7B:85:27:2F:B8:C7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8b:8f:ca:7c:15:61:01:d9:fb:74:6b:23:1a:3c:99:e1:6c: b9:f6:ff:88:91:7a:3e:ad:4b:25:c4:37:c5:97:4c:69:a5:f6: 44:8b:80:93:4b:9d:a9:b7:d2:74:d1:d6:cd:e9:40:77:7c:20: 7b:94:f3:6c:59:69:14:77:9b:d2:14:62:c8:8a:00:aa:99:77: 3c:5d:92:c2:6f:7e:1a:3c:96:31:ee:63:15:b5:e9:8a:ff:e7: 47:b8:2f:d8:49:a8:6f:72:7e:e1:32:ec:7f:1d:b3:28:48:af: f3:67:94:82:c7:d4:a3:cd:98:0b:9f:60:d5:ee:0d:95:0b:5c: ff:bf:6d:b0:00:5f:28:3c:bf:8a:fb:b0:02:f1:1b:9a:fe:dd: 58:3e:0f:24:6d:78:85:65:68:b6:88:27:66:f0:82:52:5d:02: 7b:cd:ad:57:20:3c:6e:09:ab:bc:ab:06:55:6d:90:b2:9d:36: c7:8f:4d:e7:5d:c0:49:ec:32:6b:de:3a:e2:84:9c:a9:3d:fb: 80:7c:5e:29:60:32:f5:02:ae:92:14:b2:46:b7:9d:ea:22:1c: d7:b8:4f:5e:2b:61:f6:a9:ab:de:57:e8:2a:9b:f9:8a:af:51: ca:66:17:f1:4f:d1:9a:6f:34:dc:d1:13:91:8c:60:3b:26:d4: 3d:f3:ce:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywh4m5+MUL6AqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk NDJjNTYzM2QtYzFlNy00ZGJkLWFlYjEtOWFiOTcyNjFjNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqh8SBh1NlukC2Md5QbHTmje4OfKY1htmtX StLm/2FZ50xJCmsKjI09DIn9yf/xbsYipojcN7FSe5eGoPgMApChV3pdHaz5cXsp RHC3JqR/EkzEU4VlxQyvhw3VsAtH6Y+LwlLjE2/4IzZOYWQTgxcYijYOJ6SKl3I8 OKMkZr6raeOSSG5AqRWyxdL+VBFgthMaUXM2SDYFFTBvkqIATbZ63vjVkKtJfSu8 PeO1J6r3VXYZAtviP8gIdngzb2pFKvyYb+XIwu5sfDBlULajKvnIs7cAjuNe1mzC oZEA/5KhF+93fHdOo7aNAKOAFu4dSX6JFA8WP/Cf+MDKbHK+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrSO/n7pvNb7+2EEU97hScvuMcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvN2UyZjdiMGQtMzYyOS0z MmZmLWJlZjctOGY1M2U2OTEzMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuLj8p8FWEB2ft0ayMaPJnhbLn2/4iRej6tSyXEN8WXTGml9kSLgJNL nam30nTR1s3pQHd8IHuU82xZaRR3m9IUYsiKAKqZdzxdksJvfho8ljHuYxW16Yr/ 50e4L9hJqG9yfuEy7H8dsyhIr/NnlILH1KPNmAufYNXuDZULXP+/bbAAXyg8v4r7 sALxG5r+3Vg+DyRteIVlaLaIJ2bwglJdAnvNrVcgPG4Jq7yrBlVtkLKdNsePTedd wEnsMmveOuKEnKk9+4B8XilgMvUCrpIUska3neoiHNe4T14rYfapq95X6Cqb+Yqv UcpmF/FP0ZpvNNzRE5GMYDsm1D3zzgA= -----END CERTIFICATE-----Generated at Mon Jun 30 15:55:24 2025 by rpki-client