$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/be94854a-dab9-3c33-834d-ed2509358f8e.roa File: be94854a-dab9-3c33-834d-ed2509358f8e.roa (raw, json) Hash identifier: ruYpKm2ou25LgoWT8hUpJPV8ON983XRg4NS1HTaR7sc= Subject key identifier: B7:C5:CC:5E:A1:D2:38:AF:61:62:1E:3B:C3:BD:7E:13:DE:20:77:6D Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B61446ED798A788D2173AE700 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/be94854a-dab9-3c33-834d-ed2509358f8e.roa Signing time: Wed 01 Oct 2025 18:39:00 +0000 ROA not before: Wed 01 Oct 2025 18:39:00 +0000 ROA not after: Tue 30 Dec 2025 19:39:00 +0000 asID: 5050 IP address blocks: 147.72.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:44:6e:d7:98:a7:88:d2:17:3a:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 1 18:39:00 2025 GMT Not After : Dec 30 19:39:00 2025 GMT Subject: CN=be8fe796-2185-4d14-a679-360a4a0a4d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:ff:d8:5c:38:30:ce:29:b9:75:f2:c3:3b: 81:6a:37:9e:28:98:14:35:eb:c2:ef:fd:75:78:7e: 04:00:0f:c9:69:c1:5e:23:c5:39:ad:0f:3f:6f:34: 8f:95:40:bb:1f:34:87:38:01:eb:de:dc:d9:82:e1: 81:41:dc:24:c9:eb:a3:cf:4a:81:4b:6c:e4:06:25: f1:06:90:f5:4b:5e:09:1b:b9:31:8f:d2:32:f1:61: 8c:4d:0b:b9:0b:33:70:d9:06:03:0b:8d:21:84:99: ee:ef:39:18:1a:60:45:4a:a3:2e:08:fb:45:95:db: 28:e1:62:31:79:b9:09:ec:e5:c2:2d:67:79:87:b8: ac:0f:24:6f:fa:4a:68:a3:6b:2d:39:f1:c0:22:a5: cd:6f:99:86:93:c0:52:82:bd:9e:45:c5:f3:b0:a1: 56:0c:6e:cf:8b:c0:64:62:d0:99:a5:20:3b:66:ab: c6:7b:70:92:a5:d9:2a:84:cd:e4:d8:f8:20:64:0f: 32:8f:75:76:1c:47:d1:7d:fd:fc:29:11:56:0b:c3: 64:90:13:09:60:c2:41:6b:44:2f:c9:f7:96:3f:dd: d5:5a:00:ac:8d:22:23:80:f2:04:81:5e:2d:3f:da: 36:5b:a0:f3:22:2a:a6:e5:23:81:8c:9f:04:41:a8: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:CC:5E:A1:D2:38:AF:61:62:1E:3B:C3:BD:7E:13:DE:20:77:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/be94854a-dab9-3c33-834d-ed2509358f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b9:a9:3c:29:c1:42:c0:69:30:20:77:38:13:7d:b5:f2:b8: b5:2c:3a:06:69:87:16:7b:88:28:8d:8e:b9:a5:f4:c1:0e:1b: 8e:16:f0:5c:44:c3:dd:05:18:1b:0e:61:64:05:34:32:b3:67: 74:3f:e5:85:65:93:1e:98:25:8c:62:da:df:6f:db:b9:58:f7: 16:4e:a7:71:a2:50:d6:f2:46:1d:d0:d2:16:f3:22:38:9b:a6: c7:24:c3:03:19:e0:57:93:6a:f2:01:a4:2d:99:20:c8:d2:c8: 51:3d:fe:b5:1c:a5:e4:71:af:0c:f6:ca:b9:7d:fa:c9:8a:0a: 46:a2:2a:1b:1c:17:9b:22:a3:53:fd:cb:e7:73:3a:de:25:7e: fe:4d:23:f2:45:0a:9d:32:82:eb:be:7d:a2:ac:4d:dd:dc:dd: 6a:e4:d0:32:20:35:60:b0:5e:35:d0:bc:18:3e:39:3a:0d:10: 45:02:9f:1d:eb:d7:2d:f8:43:0a:ee:fe:f8:51:04:bf:12:a7: 9f:2f:9d:1a:a6:df:00:ab:2b:40:ed:20:18:70:73:e3:5b:a1: c9:8a:72:d9:c4:7a:f7:b8:6b:8f:fa:ed:fd:39:67:39:6c:0c: 51:92:98:22:f8:17:04:25:f4:bf:39:12:28:c4:4c:0f:95:ae: 52:3f:89:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthRG7XmKeI0hc65wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAwMTE4MzkwMFoXDTI1MTIzMDE5MzkwMFowLzEtMCsGA1UEAxMk YmU4ZmU3OTYtMjE4NS00ZDE0LWE2NzktMzYwYTRhMGE0ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKn/2Fw4MM4puXXywzuBajeeKJgUNevC7/11 eH4EAA/JacFeI8U5rQ8/bzSPlUC7HzSHOAHr3tzZguGBQdwkyeujz0qBS2zkBiXx BpD1S14JG7kxj9Iy8WGMTQu5CzNw2QYDC40hhJnu7zkYGmBFSqMuCPtFldso4WIx ebkJ7OXCLWd5h7isDyRv+kpoo2stOfHAIqXNb5mGk8BSgr2eRcXzsKFWDG7Pi8Bk YtCZpSA7ZqvGe3CSpdkqhM3k2PggZA8yj3V2HEfRff38KRFWC8NkkBMJYMJBa0Qv yfeWP93VWgCsjSIjgPIEgV4tP9o2W6DzIiqm5SOBjJ8EQahzeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfFzF6h0jivYWIeO8O9fhPeIHdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvYmU5NDg1NGEtZGFiOS0z YzMzLTgzNGQtZWQyNTA5MzU4ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC5qTwpwULAaTAgdzgTfbXyuLUsOgZphxZ7iCiNjrml9MEOG44W8FxE w90FGBsOYWQFNDKzZ3Q/5YVlkx6YJYxi2t9v27lY9xZOp3GiUNbyRh3Q0hbzIjib psckwwMZ4FeTavIBpC2ZIMjSyFE9/rUcpeRxrwz2yrl9+smKCkaiKhscF5sio1P9 y+dzOt4lfv5NI/JFCp0yguu+faKsTd3c3Wrk0DIgNWCwXjXQvBg+OToNEEUCnx3r 1y34Qwru/vhRBL8Sp58vnRqm3wCrK0DtIBhwc+NbocmKctnEeve4a4/67f05Zzls DFGSmCL4FwQl9L85EijETA+VrlI/iVU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:21 2025 by rpki-client