$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa File: ca233fea-c265-3736-9f5f-ff863e476586.roa (raw, json) Hash identifier: E4NYS+V8Wd28iC5D2Nan5P3hPs6dgLPvHteiat7K4HM= Subject key identifier: 87:55:B7:9C:8A:10:A5:6A:F3:F5:45:63:18:6B:C2:70:5C:D9:DA:22 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584AE03115F5D3E55725C31B9740 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 400238 IP address blocks: 147.185.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:15:f5:d3:e5:57:25:c3:1b:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=0b5d9f31-35c8-4761-aff8-ef6969f3577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:de:82:32:94:eb:00:b8:45:84:ed:60:6d: 09:06:85:9a:80:50:0e:09:f5:57:b9:7a:3b:57:2e: 6e:d8:82:9a:d4:de:e3:42:80:65:af:44:02:43:ba: 76:b9:93:b6:69:98:4f:b8:94:88:81:b3:9f:44:7a: 33:c2:30:f9:60:b9:07:70:36:3a:ac:e0:fb:8b:77: e3:57:dd:06:2b:13:99:77:57:c0:d0:38:e8:97:57: 69:d0:2f:cb:c6:3b:87:bc:bf:9c:0d:7d:84:ac:ac: c3:11:d7:2b:5d:c6:3b:f9:0e:88:63:37:ab:d7:d4: a1:14:b8:d6:8e:4e:0e:39:74:82:13:7d:ca:02:f4: 46:10:f6:9e:d3:92:fc:d3:af:17:1a:81:23:01:89: 86:98:64:22:84:4f:c9:a8:1a:63:37:87:4c:d2:ba: 47:ca:5e:20:61:51:41:58:47:68:43:e4:29:b1:53: ed:7c:14:29:8c:39:5c:58:9b:58:63:89:73:37:19: 1d:b4:02:fe:e9:5c:cd:3e:5c:46:24:4e:74:c8:d5: a4:c7:ad:f5:9b:6f:bb:43:81:3d:38:70:f5:ae:ab: 97:51:02:f4:0a:6d:0f:cd:cc:09:9c:0c:65:aa:12: b2:6a:dc:92:11:42:4a:ee:84:e2:52:c2:a0:0a:9f: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:B7:9C:8A:10:A5:6A:F3:F5:45:63:18:6B:C2:70:5C:D9:DA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/ca233fea-c265-3736-9f5f-ff863e476586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 147.185.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c0:da:ae:23:08:34:51:93:d8:1b:ba:7c:55:be:71:b6:db: 22:c2:6b:01:63:ef:c0:18:7d:7f:60:1e:7e:b1:76:d4:9b:4c: fa:58:d2:ba:ba:0c:4e:64:7b:02:af:bf:cc:8e:21:89:02:4c: 4d:2a:7b:ff:79:f1:7a:6a:c9:69:75:46:66:b1:da:48:54:dc: 96:9d:fd:10:0a:7b:60:80:ab:ef:08:33:b3:2d:4b:37:fc:28: 61:3c:66:a1:59:b1:43:17:64:9e:fa:d3:ed:1d:40:24:fc:e0: f4:1b:09:f0:12:a8:40:2d:32:22:0f:e8:13:da:0c:5f:fd:16: 19:22:3f:d8:eb:17:a1:26:09:c7:48:77:9c:76:dc:70:ac:21: 15:f6:5d:a5:ab:e6:91:f9:a8:5e:21:3f:f7:f7:77:1f:17:aa: ac:c1:7e:4f:1b:e7:61:cf:67:93:ea:7a:58:96:d3:92:2b:c3: 28:4a:a2:8a:cc:a9:b8:83:e6:36:01:ea:45:0d:6d:49:67:7e: a7:f8:b8:00:5e:38:6c:fd:bc:07:d6:13:00:d4:9c:72:c3:94: 03:43:09:1b:45:9d:b7:7a:79:05:99:64:7e:cf:c1:59:18:2e: c3:74:84:87:90:56:f6:0f:46:a3:43:5d:d7:c8:c7:0c:5b:3b: b3:9a:45:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRX10+VXJcMbl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MGI1ZDlmMzEtMzVjOC00NzYxLWFmZjgtZWY2OTY5ZjM1NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zregjKU6wC4RYTtYG0JBoWagFAOCfVXuXo7 Vy5u2IKa1N7jQoBlr0QCQ7p2uZO2aZhPuJSIgbOfRHozwjD5YLkHcDY6rOD7i3fj V90GKxOZd1fA0Djol1dp0C/LxjuHvL+cDX2ErKzDEdcrXcY7+Q6IYzer19ShFLjW jk4OOXSCE33KAvRGEPae05L8068XGoEjAYmGmGQihE/JqBpjN4dM0rpHyl4gYVFB WEdoQ+QpsVPtfBQpjDlcWJtYY4lzNxkdtAL+6VzNPlxGJE50yNWkx631m2+7Q4E9 OHD1rquXUQL0Cm0PzcwJnAxlqhKyatySEUJK7oTiUsKgCp8ZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdVt5yKEKVq8/VFYxhrwnBc2doiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvY2EyMzNmZWEtYzI2NS0z NzM2LTlmNWYtZmY4NjNlNDc2NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnA2q4jCDRRk9gbunxVvnG22yLCawFj78AYfX9gHn6xdtSbTPpY0rq6 DE5kewKvv8yOIYkCTE0qe/958XpqyWl1Rmax2khU3Jad/RAKe2CAq+8IM7MtSzf8 KGE8ZqFZsUMXZJ760+0dQCT84PQbCfASqEAtMiIP6BPaDF/9FhkiP9jrF6EmCcdI d5x23HCsIRX2XaWr5pH5qF4hP/f3dx8XqqzBfk8b52HPZ5PqeliW05IrwyhKoorM qbiD5jYB6kUNbUlnfqf4uABeOGz9vAfWEwDUnHLDlANDCRtFnbd6eQWZZH7PwVkY LsN0hIeQVvYPRqNDXdfIxwxbO7OaRaA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:03:23 2025 by rpki-client