$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa File: 0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa (raw, json) Hash identifier: WdxNcJszzEhCWCp7GQ1F0BVaBhCLiy+ulg3YFdCjQ08= Subject key identifier: 66:C6:43:21:49:8E:29:02:02:F6:E6:21:E6:95:12:50:E0:3E:E0:55 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584AD9364F00692B311AFFCB9280 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 23467 IP address blocks: 162.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4f:00:69:2b:31:1a:ff:cb:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=d0abda1a-250c-499d-b678-617fee1395fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:79:f9:1c:c0:8b:90:87:a0:14:0e:4b:27: c5:3f:15:7d:a3:ad:3b:7c:99:06:5a:39:f9:24:e0: 97:c0:10:7a:c5:20:bc:f5:f0:46:fe:78:ac:fe:58: cc:0e:43:df:89:28:b5:e6:4e:76:6c:1b:b4:40:45: d4:6e:76:e4:e1:c4:e0:05:35:85:fb:45:f7:2a:3e: a5:c1:2b:83:c7:f4:71:19:af:c9:18:7d:f0:20:4c: 7e:68:d1:29:d4:c4:39:b0:18:8f:10:c9:12:33:e2: fe:84:86:f6:21:95:0a:7d:73:6e:d6:7f:6f:c6:90: 82:c9:f9:3a:c3:d5:0e:65:60:0d:5c:d7:42:05:7a: f8:f2:24:90:5a:c7:52:93:1f:10:fa:0f:b9:22:4f: dc:ef:a4:34:ad:7c:8b:19:08:fb:ce:02:c6:e2:f2: aa:89:ba:ed:05:6d:3c:86:52:f3:b9:f7:fd:87:29: 0f:08:07:66:22:65:00:2e:09:64:4f:d2:c1:f3:05: f1:75:8d:a1:0e:83:e1:e8:24:55:a3:2e:83:2c:4d: e7:22:a3:de:94:e6:fb:c6:27:91:e1:a4:a4:96:27: 75:b8:d1:d1:ed:87:5c:a5:78:b0:2f:71:f3:53:0c: 5f:fd:47:c9:ff:9d:c2:d8:6d:df:8f:d2:82:63:2c: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C6:43:21:49:8E:29:02:02:F6:E6:21:E6:95:12:50:E0:3E:E0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/0746b4f7-76f5-35d6-baaa-3c5785188ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b6:61:49:82:33:37:14:ef:6f:54:52:f2:96:3c:ab:bd:68: b8:30:0b:86:b1:6a:13:57:b8:79:da:e5:f4:e8:fd:b3:fe:32: 89:05:3e:fb:f9:28:80:52:97:01:48:1f:ee:58:45:45:f7:91: 54:4b:3f:2c:39:94:5f:bc:c7:f0:ff:a6:54:60:0e:6e:05:18: ee:7d:9d:f3:d8:bd:51:67:61:fd:e0:29:29:e1:74:24:a7:a0: 3c:10:bc:cd:cb:39:17:65:da:3a:25:9c:27:09:04:12:cf:19: ec:5d:f7:d1:fd:18:df:13:64:31:99:44:5a:49:1a:1f:ef:77: c7:68:c0:a2:b8:dc:ba:2c:f5:64:74:b6:4b:f3:45:37:07:af: ba:0a:fe:f3:79:cd:f5:47:f5:0f:6a:06:d8:be:fe:d6:88:fd: 89:cd:35:37:6c:09:1c:0e:81:c5:9c:94:b9:d2:aa:a9:a5:37: e3:b5:19:99:92:32:d6:7d:50:41:c4:8b:a7:89:73:9d:f5:c3: 85:ba:bc:81:6f:57:3f:27:09:8e:dd:88:96:be:54:63:96:93: 20:61:4a:70:83:31:02:06:b6:8d:b9:9a:99:9a:83:42:b9:34: 74:a8:65:53:0c:18:29:95:3a:1a:58:80:09:31:2a:29:ce:44: d8:e3:53:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNk8AaSsxGv/LkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDBhYmRhMWEtMjUwYy00OTlkLWI2NzgtNjE3ZmVlMTM5NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8V5+RzAi5CHoBQOSyfFPxV9o607fJkGWjn5 JOCXwBB6xSC89fBG/nis/ljMDkPfiSi15k52bBu0QEXUbnbk4cTgBTWF+0X3Kj6l wSuDx/RxGa/JGH3wIEx+aNEp1MQ5sBiPEMkSM+L+hIb2IZUKfXNu1n9vxpCCyfk6 w9UOZWANXNdCBXr48iSQWsdSkx8Q+g+5Ik/c76Q0rXyLGQj7zgLG4vKqibrtBW08 hlLzuff9hykPCAdmImUALglkT9LB8wXxdY2hDoPh6CRVoy6DLE3nIqPelOb7xieR 4aSklid1uNHR7YdcpXiwL3HzUwxf/UfJ/53C2G3fj9KCYyy9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbGQyFJjikCAvbmIeaVElDgPuBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDc0NmI0ZjctNzZmNS0z NWQ2LWJhYWEtM2M1Nzg1MTg4ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy2YUmCMzcU729UUvKWPKu9aLgwC4axahNXuHna5fTo/bP+MokFPvv5 KIBSlwFIH+5YRUX3kVRLPyw5lF+8x/D/plRgDm4FGO59nfPYvVFnYf3gKSnhdCSn oDwQvM3LORdl2jolnCcJBBLPGexd99H9GN8TZDGZRFpJGh/vd8dowKK43Los9WR0 tkvzRTcHr7oK/vN5zfVH9Q9qBti+/taI/YnNNTdsCRwOgcWclLnSqqmlN+O1GZmS MtZ9UEHEi6eJc531w4W6vIFvVz8nCY7diJa+VGOWkyBhSnCDMQIGto25mpmag0K5 NHSoZVMMGCmVOhpYgAkxKinORNjjU0U= -----END CERTIFICATE-----Generated at Sat Aug 23 19:55:28 2025 by rpki-client