$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa File: bbbf91b9-718d-3adc-8f53-92010dd213b9.roa (raw, json) Hash identifier: oTLAxskwjq5cXMrlGLJKWBqXnvirodUS1PiLHIqU6MY= Subject key identifier: 7F:0B:1B:29:EF:77:C3:62:D4:39:6D:44:61:EE:E5:CE:96:8A:43:DD Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584AC9DB96312074AE012E2BF700 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 397423 IP address blocks: 147.124.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:96:31:20:74:ae:01:2e:2b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=17f42161-bfcf-41af-b69a-7c524a566705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:2e:2d:0a:dd:5d:1a:8e:7e:16:a9:3b:bb: c3:56:84:d0:cf:29:a5:0a:a8:7f:cc:f8:ff:ea:8f: 4d:f7:f0:b4:6d:12:46:90:a5:a2:b5:7e:7f:63:7b: e1:f3:9f:56:55:78:e9:79:37:aa:d0:f1:b3:3f:f6: e2:d9:82:70:c1:3a:98:12:ff:3b:eb:b1:8d:06:7f: d5:5a:60:3b:ac:f0:81:f6:b6:f2:48:f2:4c:2f:4d: d0:18:31:95:74:67:af:bc:22:3b:5d:9c:85:16:be: 43:a7:bb:f9:13:7b:d5:b5:28:67:3a:34:aa:1f:d3: 95:52:b6:f3:b1:df:76:d0:2e:e6:89:ba:a3:a7:bd: cf:a6:82:ca:bc:3a:da:0f:56:32:55:c9:3e:dd:42: b7:9c:bd:69:94:da:c2:b5:62:03:47:57:e4:b2:22: 8f:50:7f:a8:75:5b:b6:ee:d4:63:72:60:22:7b:e3: 06:c9:ab:e2:f6:10:e9:e4:8b:65:02:4d:f0:4f:b4: 61:5f:e8:2f:6f:83:29:9c:18:44:05:09:70:a8:77: 9d:d4:55:b9:56:87:13:54:0b:a5:0f:0f:d0:34:15: 15:59:ab:2e:4a:ff:6b:19:2b:f3:73:df:2d:03:cf: dc:ae:aa:ea:46:60:3d:8c:73:1b:53:a3:cd:de:16: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0B:1B:29:EF:77:C3:62:D4:39:6D:44:61:EE:E5:CE:96:8A:43:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 147.124.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:a8:9a:dc:4b:1d:7c:99:b7:61:0e:f9:b4:4f:4b:21:ee:54: e5:fa:35:75:b1:45:5f:49:26:9b:67:ca:a5:0b:be:26:72:f3: bd:ac:15:85:db:4c:f2:38:b6:4a:d2:2c:81:70:a1:a1:42:bc: 5a:1c:2a:90:55:6f:ea:2b:8f:3f:3b:7b:64:3b:dd:37:6d:bb: 94:c4:e4:fa:22:59:64:cc:40:14:4d:d3:b2:9b:86:6b:9c:2b: 7f:d8:73:d5:09:01:01:30:05:37:26:10:ef:06:2c:c2:c0:0a: 13:fe:5c:22:71:fe:4c:57:25:21:1e:73:53:bf:98:43:ce:78: 07:c0:b7:91:96:70:00:72:42:9c:8e:82:85:66:be:f7:df:3b: a0:9b:3a:34:34:37:91:74:cc:8a:69:d7:54:6e:88:03:1f:da: ad:35:a6:09:87:62:e3:cc:86:d7:6e:6b:13:62:94:fb:bd:d2: 31:66:c5:50:07:fb:6b:4b:6d:32:6c:27:2c:ba:a0:25:9c:51: 81:e2:35:d7:ea:ff:8e:74:76:b6:3a:fb:d7:79:1e:98:e6:04: c3:27:06:92:9d:c2:72:f1:2a:3d:50:b6:b5:a1:f0:f1:e0:a3: 1c:8b:59:e0:75:b3:48:44:d3:39:2a:a9:11:0a:a5:9a:20:d0: 86:75:d6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25YxIHSuAS4r9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MTdmNDIxNjEtYmZjZi00MWFmLWI2OWEtN2M1MjRhNTY2NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVsuLQrdXRqOfhapO7vDVoTQzymlCqh/zPj/ 6o9N9/C0bRJGkKWitX5/Y3vh859WVXjpeTeq0PGzP/bi2YJwwTqYEv8767GNBn/V WmA7rPCB9rbySPJML03QGDGVdGevvCI7XZyFFr5Dp7v5E3vVtShnOjSqH9OVUrbz sd920C7mibqjp73PpoLKvDraD1YyVck+3UK3nL1plNrCtWIDR1fksiKPUH+odVu2 7tRjcmAie+MGyavi9hDp5ItlAk3wT7RhX+gvb4MpnBhEBQlwqHed1FW5VocTVAul Dw/QNBUVWasuSv9rGSvzc98tA8/crqrqRmA9jHMbU6PN3ha2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8LGynvd8Ni1DltRGHu5c6WikPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYmJiZjkxYjktNzE4ZC0z YWRjLThmNTMtOTIwMTBkZDIxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKomtxLHXyZt2EO+bRPSyHuVOX6NXWxRV9JJptnyqULviZy872sFYXb TPI4tkrSLIFwoaFCvFocKpBVb+orjz87e2Q73Tdtu5TE5PoiWWTMQBRN07Kbhmuc K3/Yc9UJAQEwBTcmEO8GLMLAChP+XCJx/kxXJSEec1O/mEPOeAfAt5GWcAByQpyO goVmvvffO6CbOjQ0N5F0zIpp11RuiAMf2q01pgmHYuPMhtduaxNilPu90jFmxVAH +2tLbTJsJyy6oCWcUYHiNdfq/450drY6+9d5HpjmBMMnBpKdwnLxKj1QtrWh8PHg oxyLWeB1s0hE0zkqqREKpZog0IZ11kw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:28 2025 by rpki-client