$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccc72de-5be0-3172-9f53-26242bbd4b4e.roa File: bccc72de-5be0-3172-9f53-26242bbd4b4e.roa (raw, json) Hash identifier: FuLKu9DNqDEu0ROwwVFAiCbLbrDa1mJsMaQ5d2pi8ZA= Subject key identifier: 47:87:F9:35:B5:E6:C9:7C:39:31:2D:99:01:F3:1D:C0:7B:EB:72:96 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6BC7552EDF6440302E17BD66 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccc72de-5be0-3172-9f53-26242bbd4b4e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 397630 IP address blocks: 147.53.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:55:2e:df:64:40:30:2e:17:bd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=60e5e961-4902-44a9-a629-631954419d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:8a:55:45:16:3c:4b:db:83:82:34:e5:56: c9:07:ba:94:ca:b7:1f:2d:20:f5:d7:b2:b4:e5:ce: 02:3b:f0:a6:d2:f9:f9:6c:e0:2b:70:6a:b1:61:a8: e4:d0:84:fd:10:7f:5d:ad:06:8c:0f:e5:50:8d:6e: 0d:f1:05:61:b9:78:cb:6a:9b:2f:94:ab:6b:6d:d8: 95:d1:76:17:d7:04:d4:c2:8f:91:eb:fe:ae:7a:34: 9d:74:01:82:0a:1b:26:4f:94:2c:cb:f4:e4:03:08: eb:9d:cd:86:94:c8:b8:61:24:b2:7a:c5:00:c0:11: bb:78:ad:1c:2d:47:9a:14:e7:c0:9c:6f:4e:a7:84: ab:46:f5:74:9b:c9:d4:26:dd:e2:28:5e:98:d4:2c: 4c:03:e1:71:00:c5:0e:b6:e6:27:98:9e:a6:d6:66: 1e:05:6d:21:4c:9e:82:2f:8f:d5:04:d3:79:c6:35: 8f:b7:01:2c:c1:d0:1f:c5:81:78:16:bf:20:02:7e: 95:2a:e8:d3:8a:fc:6d:1f:a8:b7:69:b5:e8:3f:ea: 43:56:4b:0e:57:62:7d:2d:e1:70:30:72:67:5f:e0: d1:29:98:c5:56:2c:20:64:9f:a0:04:e2:b0:a1:e5: b7:99:30:7d:e7:46:6a:fc:33:8e:d4:92:45:2d:7e: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:87:F9:35:B5:E6:C9:7C:39:31:2D:99:01:F3:1D:C0:7B:EB:72:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bccc72de-5be0-3172-9f53-26242bbd4b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b1:26:ff:23:72:ca:e7:8e:4b:32:b5:a8:bf:6f:f5:5e:f1: cc:20:d2:64:0f:05:b8:e9:fc:48:5c:5c:5e:b3:94:42:e0:7a: f5:ea:67:13:7c:98:92:3d:f0:46:17:2f:4b:33:f6:70:23:12: 3c:e7:d6:4d:e4:4d:bb:8f:fc:5f:04:f3:1c:50:13:cb:ea:49: ea:bc:5f:04:83:a2:b6:d8:a6:0d:bb:3d:43:42:a1:b8:2d:92: 8a:11:0a:e2:12:01:f6:38:82:48:e9:94:eb:0c:05:82:26:3d: 34:f2:d9:1a:6f:02:c6:59:1f:30:51:e5:60:25:80:bc:85:92: 34:bf:a2:3f:ed:ba:b1:60:70:54:22:c9:50:3b:0d:d8:aa:a6: 5d:a3:1d:67:32:9e:08:1c:23:e2:1a:64:77:d0:84:34:63:ec: 25:12:e0:f7:27:cd:8c:97:fe:f5:ec:60:03:5f:cc:d7:e3:ad: 96:3f:31:4b:1c:a8:4b:f1:8a:53:27:45:26:dd:b8:00:14:f7: 6b:f9:8e:ee:72:fc:a1:08:f8:0e:77:b6:34:f8:33:93:10:f0: b2:1a:27:76:e3:fa:da:83:9a:af:cb:7f:66:2f:40:cb:5e:6c: 6a:79:95:d0:bd:80:f3:30:c8:22:bc:d2:0e:00:9d:fe:42:b3: 8f:6f:23:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1Uu32RAMC4XvWYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjBlNWU5NjEtNDkwMi00NGE5LWE2MjktNjMxOTU0NDE5ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KeKVUUWPEvbg4I05VbJB7qUyrcfLSD117K0 5c4CO/Cm0vn5bOArcGqxYajk0IT9EH9drQaMD+VQjW4N8QVhuXjLapsvlKtrbdiV 0XYX1wTUwo+R6/6uejSddAGCChsmT5Qsy/TkAwjrnc2GlMi4YSSyesUAwBG7eK0c LUeaFOfAnG9Op4SrRvV0m8nUJt3iKF6Y1CxMA+FxAMUOtuYnmJ6m1mYeBW0hTJ6C L4/VBNN5xjWPtwEswdAfxYF4Fr8gAn6VKujTivxtH6i3abXoP+pDVksOV2J9LeFw MHJnX+DRKZjFViwgZJ+gBOKwoeW3mTB950Zq/DOO1JJFLX7H8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeH+TW15sl8OTEtmQHzHcB763KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmNjYzcyZGUtNWJlMC0z MTcyLTlmNTMtMjYyNDJiYmQ0YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmxJv8jcsrnjksytai/b/Ve8cwg0mQPBbjp/EhcXF6zlELgevXqZxN8 mJI98EYXL0sz9nAjEjzn1k3kTbuP/F8E8xxQE8vqSeq8XwSDorbYpg27PUNCobgt kooRCuISAfY4gkjplOsMBYImPTTy2RpvAsZZHzBR5WAlgLyFkjS/oj/turFgcFQi yVA7Ddiqpl2jHWcynggcI+IaZHfQhDRj7CUS4PcnzYyX/vXsYANfzNfjrZY/MUsc qEvxilMnRSbduAAU92v5ju5y/KEI+A53tjT4M5MQ8LIaJ3bj+tqDmq/Lf2YvQMte bGp5ldC9gPMwyCK80g4Anf5Cs49vIyU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:08 2025 by rpki-client