$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa File: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (raw, json) Hash identifier: JusBu+A06sCB+UdM66I0uQXYPEEO2JxusRhhRxM28T4= Subject key identifier: E6:4D:0D:05:72:FB:3F:8E:11:C7:A8:D8:66:7C:51:42:00:3F:2F:6B Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584A58CB08662FCDCE92E1DED180 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 394321 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:08:66:2f:cd:ce:92:e1:de:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=f99b27b7-e131-4698-9997-68f1891ed7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:67:f0:84:67:04:e3:28:b6:f0:60:ae:44: 5c:95:e1:4b:4c:ab:39:e0:5f:c4:96:d2:22:7a:26: 46:2e:ab:3c:2d:15:25:7b:8d:d8:d3:99:3d:e8:39: ab:f6:5f:1c:e0:2c:7c:af:c7:08:f6:30:a3:66:be: 0e:5d:9a:f0:2a:f5:8c:28:7b:99:8b:47:c3:3d:b7: 42:5b:99:aa:17:09:26:4a:a9:80:b2:16:f1:6c:9a: 6c:4c:9f:f7:cd:3b:ea:41:42:aa:05:80:34:8a:c6: f3:49:bd:ad:23:ce:da:ed:3d:27:b8:66:a5:1b:ab: 27:88:90:c8:35:bb:3f:cb:4b:d5:5f:d8:6a:1d:5a: 46:e3:e1:78:a3:44:5b:3a:68:bb:05:70:88:3b:f2: a6:3f:d4:14:6f:b2:10:ea:23:90:ce:ad:a1:79:5b: a7:ab:63:50:7c:9f:93:f1:93:16:d6:39:3d:74:44: 08:f6:cc:00:fb:25:4f:05:65:9b:29:66:5e:66:02: ca:b9:36:21:6c:db:48:fa:37:60:6b:3e:04:7e:ad: 7a:ae:9a:13:35:ab:0f:bd:5c:0c:c7:cb:72:ab:21: 3d:31:30:af:0e:af:b6:db:1a:8a:f8:c4:96:2e:c1: b9:d4:17:29:dc:4d:55:6a:ed:63:d0:da:a9:92:47: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:0D:05:72:FB:3F:8E:11:C7:A8:D8:66:7C:51:42:00:3F:2F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f7:c5:34:84:77:2a:62:20:3c:d2:25:05:77:7f:85:06:6e: 8a:f7:c5:6c:61:8c:07:c6:af:ba:e2:da:cf:34:5f:42:3a:30: 0c:ba:f8:bb:0f:51:a9:7d:02:31:72:aa:23:68:62:a7:b2:c1: 78:38:d2:c7:1d:b2:25:ac:c0:28:f1:9a:f0:16:7a:21:49:77: 02:89:2e:db:1f:43:a6:9f:38:d2:6e:3a:f7:02:8f:14:19:00: f3:e1:7a:c2:e9:d3:f4:1b:20:2c:17:99:57:57:e1:91:a4:35: 36:c4:44:54:4d:f5:a5:7d:c7:8e:38:55:91:71:2a:61:ea:ec: fe:28:b3:7e:27:40:75:d5:e2:1a:d9:5a:7d:56:d5:1b:60:5a: f8:13:78:1a:7f:d9:75:fc:d0:9c:36:1d:9f:ae:28:da:f7:ac: b6:72:f7:ff:3f:08:41:0d:9c:1d:2a:81:31:51:04:11:ee:c0: 71:0a:dc:d0:52:1b:c7:cb:58:ba:af:67:5c:fe:0d:45:a1:30: cd:d3:91:63:11:2d:be:08:69:10:fe:9a:2d:e8:4e:83:d5:25: e1:6c:18:ff:a5:b4:5e:b8:cb:4d:87:e5:f0:f3:f0:66:7d:39: 19:ae:1c:ac:26:90:da:36:35:7c:6f:31:12:6c:95:c9:dd:30: 54:5a:4a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywhmL83OkuHe0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk Zjk5YjI3YjctZTEzMS00Njk4LTk5OTctNjhmMTg5MWVkN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIhn8IRnBOMotvBgrkRcleFLTKs54F/EltIi eiZGLqs8LRUle43Y05k96Dmr9l8c4Cx8r8cI9jCjZr4OXZrwKvWMKHuZi0fDPbdC W5mqFwkmSqmAshbxbJpsTJ/3zTvqQUKqBYA0isbzSb2tI87a7T0nuGalG6sniJDI Nbs/y0vVX9hqHVpG4+F4o0RbOmi7BXCIO/KmP9QUb7IQ6iOQzq2heVunq2NQfJ+T 8ZMW1jk9dEQI9swA+yVPBWWbKWZeZgLKuTYhbNtI+jdgaz4Efq16rpoTNasPvVwM x8tyqyE9MTCvDq+22xqK+MSWLsG51Bcp3E1Vau1j0NqpkkdXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZNDQVy+z+OEceo2GZ8UUIAPy9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvZDliZDA2OGYtYTY1NS0z NTZiLWFlNTMtNWFkNzZiYThiZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/3xTSEdypiIDzSJQV3f4UGbor3xWxhjAfGr7ri2s80X0I6MAy6+LsP Ual9AjFyqiNoYqeywXg40scdsiWswCjxmvAWeiFJdwKJLtsfQ6afONJuOvcCjxQZ APPhesLp0/QbICwXmVdX4ZGkNTbERFRN9aV9x444VZFxKmHq7P4os34nQHXV4hrZ Wn1W1RtgWvgTeBp/2XX80Jw2HZ+uKNr3rLZy9/8/CEENnB0qgTFRBBHuwHEK3NBS G8fLWLqvZ1z+DUWhMM3TkWMRLb4IaRD+mi3oToPVJeFsGP+ltF64y02H5fDz8GZ9 ORmuHKwmkNo2NXxvMRJslcndMFRaSg8= -----END CERTIFICATE-----Generated at Tue Jul 1 02:17:26 2025 by rpki-client