$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa File: 12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa (raw, json) Hash identifier: 5+lhvkvASO/qxvwheyOs0Fp8/NRmNTVWomoBELD91EE= Subject key identifier: 53:62:11:23:8A:8B:D5:27:34:B0:25:C3:D5:5C:F2:DD:BC:36:68:C7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6BC754E4155BCE0E9F731680 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397630 IP address blocks: 147.53.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:54:e4:15:5b:ce:0e:9f:73:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=66cda7fa-edd6-493a-9c98-ce3c6e8db2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:ad:65:81:95:e3:c8:4c:cb:dd:3d:5f:f4: f2:06:44:c0:92:8e:b4:9b:98:c8:2d:9f:48:2a:20: 7a:b2:fb:e8:58:78:ba:18:cf:65:8d:ab:e9:f2:6d: 68:9c:1f:b6:7f:ae:63:4f:41:f8:b9:d6:f3:c2:96: 77:1a:99:99:f6:f0:13:2e:b6:57:3d:af:00:30:22: d0:0d:3c:57:e3:87:86:75:6f:f9:6e:a8:3b:90:2d: a0:08:c6:cf:b4:40:00:25:df:5e:02:df:5a:2d:16: 12:02:e1:2f:5f:05:fe:08:1d:df:bf:fb:38:32:fc: 49:75:3d:0f:63:59:8f:82:58:80:a8:a1:1c:09:b4: 92:d6:24:34:f4:47:2a:4b:b3:f8:ff:d0:04:85:40: 2e:26:fb:a2:4b:4a:86:c9:9e:36:64:a6:27:8e:d1: 40:7f:e5:fa:a2:69:79:ea:54:fd:1b:45:67:66:48: ab:10:1d:83:74:25:14:32:70:26:b3:af:3a:a9:1d: 5a:0e:40:4f:7b:e1:b2:1a:87:18:64:44:8c:a1:d9: a6:84:09:b2:3a:70:7e:9d:3c:5c:b8:86:75:7b:8f: 97:d8:0f:c6:c9:a5:c7:43:8c:20:4e:00:ae:0d:5c: ac:bc:90:44:8c:41:fe:27:f6:a6:a4:8b:32:63:75: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:62:11:23:8A:8B:D5:27:34:B0:25:C3:D5:5C:F2:DD:BC:36:68:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/12ad7e22-1bd4-30a0-be79-a3dcd1c56904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:b5:6a:cb:cc:14:6b:37:09:09:09:30:f8:4e:44:22:b4:0e: 93:0a:ad:1b:6d:98:e5:3a:f5:92:5f:ca:9a:6a:3e:3a:85:95: 5d:55:73:9d:c9:de:ed:27:7e:eb:c6:a4:f8:f7:57:9a:33:2c: ae:8f:bf:a0:1b:fa:d1:de:ef:5a:c2:85:cb:7e:50:c2:45:56: c1:89:94:ec:a6:b6:17:cc:3f:3b:ce:8a:83:b8:fe:30:2b:e9: 31:a8:6e:df:8e:ec:95:15:eb:42:6d:3a:55:37:d0:fc:a5:e2: 7b:7d:75:7e:42:35:1e:48:29:62:f8:a5:1a:da:a1:b5:4b:7b: 96:ac:9a:0e:5b:75:cd:3c:dd:c1:f1:69:89:66:22:34:c0:66: c1:c2:08:a6:11:63:b7:e2:32:a3:c9:72:d7:0d:27:ad:21:cd: 24:5c:a2:de:7e:ff:4a:e6:d3:52:f6:55:3c:36:61:06:64:2e: 9d:5f:6b:92:10:73:e8:1f:83:f6:8e:78:79:e9:ee:21:a4:ac: 30:18:d0:40:f3:52:42:22:8b:21:93:62:f2:c2:e3:50:e5:a4: c6:8c:5a:8a:3c:4a:d2:9b:1d:3c:ad:50:91:c8:a6:fa:82:1a: 08:37:8d:78:95:10:45:af:3f:57:ac:a6:51:55:73:92:29:4c: 21:d8:0d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1TkFVvODp9zFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjZjZGE3ZmEtZWRkNi00OTNhLTljOTgtY2UzYzZlOGRiMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5itZYGV48hMy909X/TyBkTAko60m5jILZ9I KiB6svvoWHi6GM9ljavp8m1onB+2f65jT0H4udbzwpZ3GpmZ9vATLrZXPa8AMCLQ DTxX44eGdW/5bqg7kC2gCMbPtEAAJd9eAt9aLRYSAuEvXwX+CB3fv/s4MvxJdT0P Y1mPgliAqKEcCbSS1iQ09EcqS7P4/9AEhUAuJvuiS0qGyZ42ZKYnjtFAf+X6oml5 6lT9G0VnZkirEB2DdCUUMnAms686qR1aDkBPe+GyGocYZESModmmhAmyOnB+nTxc uIZ1e4+X2A/GyaXHQ4wgTgCuDVysvJBEjEH+J/ampIsyY3WV7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNiESOKi9UnNLAlw9Vc8t28NmjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTJhZDdlMjItMWJkNC0z MGEwLWJlNzktYTNkY2QxYzU2OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM61asvMFGs3CQkJMPhORCK0DpMKrRttmOU69ZJfyppqPjqFlV1Vc53J 3u0nfuvGpPj3V5ozLK6Pv6Ab+tHe71rChct+UMJFVsGJlOymthfMPzvOioO4/jAr 6TGobt+O7JUV60JtOlU30Pyl4nt9dX5CNR5IKWL4pRraobVLe5asmg5bdc083cHx aYlmIjTAZsHCCKYRY7fiMqPJctcNJ60hzSRcot5+/0rm01L2VTw2YQZkLp1fa5IQ c+gfg/aOeHnp7iGkrDAY0EDzUkIiiyGTYvLC41DlpMaMWoo8StKbHTytUJHIpvqC Ggg3jXiVEEWvP1esplFVc5IpTCHYDd8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:42 2025 by rpki-client