$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa File: cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json) Hash identifier: 49P41VIYumsbAPeOvc+ll+vwgb1NEiLIqERANcxyc0A= Subject key identifier: B6:F6:0C:06:C2:16:E4:55:77:9A:2C:6A:CB:93:BD:33:FE:8D:47:AC Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Certificate serial: 010D0C9F4328584AA42B79A579B77063CBC9E900 Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 147.160.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:79:a5:79:b7:70:63:cb:c9:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=621d43b3-fec4-4cbc-b33b-1d670acc6faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:38:36:38:18:e6:2e:cd:c7:6a:44:2e:eb:cf: 96:d8:e4:01:19:6f:26:a2:8f:97:f3:3b:22:f8:61: 0c:e2:f9:8f:26:9e:7b:99:44:06:7a:37:b9:c1:b6: b1:20:1f:66:9c:e0:d9:0b:d7:5f:be:4c:37:5e:d2: be:1e:b1:0c:be:71:37:52:4a:78:66:e4:d9:d8:dc: b1:40:db:0a:1f:35:9f:3f:01:34:e5:75:d0:16:e7: 90:98:05:2e:66:ba:47:3f:21:37:03:4e:fc:6b:2a: e9:0b:76:64:1d:39:e3:d9:73:5a:ff:05:69:64:95: b1:46:92:74:71:cc:e6:68:24:1d:c8:8a:64:64:17: c5:b4:08:33:84:a2:36:ce:c1:90:61:90:a8:74:e7: 47:d6:7b:bb:60:36:84:69:17:ef:07:7a:dd:a6:73: ae:2e:10:30:4b:74:e8:ad:43:1e:21:fa:b9:1e:5f: 8e:5a:78:1d:fa:89:a2:fb:d7:17:df:70:18:fc:93: 1e:99:d0:e1:51:44:ba:7a:2a:e9:f2:36:89:41:36: e8:bb:69:1e:4a:d9:e4:ba:27:f3:e9:bf:dd:2d:d4: 5e:06:1c:80:ec:8f:93:54:f0:71:2a:f2:7d:e9:77: da:ca:7f:ef:bc:b1:a2:b2:ba:a3:23:5d:b8:8d:da: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F6:0C:06:C2:16:E4:55:77:9A:2C:6A:CB:93:BD:33:FE:8D:47:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl X509v3 Authority Key Identifier: keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer sbgp-ipAddrBlock: critical IPv4: 147.160.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:de:9a:9c:ee:1b:11:2a:3e:fd:c2:d8:30:5b:cd:ca:ca:a8: d3:70:3a:46:8e:f6:81:cf:8a:3d:0e:30:d8:c1:d4:c7:c7:6b: e6:f5:6a:ad:12:85:68:5e:32:93:4c:71:ae:52:c0:61:b5:d9: b9:aa:98:de:69:9d:1b:6d:5a:97:01:96:fc:cf:96:02:5d:2c: 15:ac:41:50:6c:1c:74:14:9b:c1:b1:14:ec:07:9c:59:17:20: c7:1b:e3:c4:ca:10:71:46:90:7b:d6:80:6d:63:57:fb:ae:d7: 55:e3:e3:88:07:86:30:ae:90:2d:12:cf:c5:a7:27:a5:61:cf: 87:76:71:6a:ae:11:46:7f:ec:3f:b8:62:e6:9a:17:2a:ec:6b: 3d:38:30:8b:4f:ce:d2:b3:03:1d:88:ac:03:38:9e:47:dc:7e: 57:d0:b9:9d:35:54:f1:89:a0:79:85:21:a8:e1:93:8c:3f:e2: 78:5b:fd:de:d1:bc:a4:ae:21:0d:19:e0:d3:ab:47:82:38:e9: 48:49:45:c2:03:7f:eb:c1:4f:84:e5:e3:4e:82:55:26:d5:95: e9:1c:c4:06:85:94:db:c2:74:00:a1:82:7a:a4:69:4f:f8:b0: e5:b5:7f:cc:0a:eb:0a:55:ea:97:84:f0:b5:c5:50:04:f2:e6: 19:a7:c8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3mlebdwY8vJ6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky MmU2MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NjIxZDQzYjMtZmVjNC00Y2JjLWIzM2ItMWQ2NzBhY2M2ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDg2OBjmLs3HakQu68+W2OQBGW8moo+X8zsi +GEM4vmPJp57mUQGeje5wbaxIB9mnODZC9dfvkw3XtK+HrEMvnE3Ukp4ZuTZ2Nyx QNsKHzWfPwE05XXQFueQmAUuZrpHPyE3A078ayrpC3ZkHTnj2XNa/wVpZJWxRpJ0 cczmaCQdyIpkZBfFtAgzhKI2zsGQYZCodOdH1nu7YDaEaRfvB3rdpnOuLhAwS3To rUMeIfq5Hl+OWngd+omi+9cX33AY/JMemdDhUUS6eirp8jaJQTbou2keStnkuifz 6b/dLdReBhyA7I+TVPBxKvJ96Xfayn/vvLGisrqjI124jdrsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb2DAbCFuRVd5osasuTvTP+jUesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4 OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvY2Y4ZmU1MmYtNTdhMi0z YmM3LWIyNTEtZDc3MjIxOGE4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5 MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7empzuGxEqPv3C2DBbzcrKqNNwOkaO9oHPij0OMNjB1MfHa+b1aq0S hWheMpNMca5SwGG12bmqmN5pnRttWpcBlvzPlgJdLBWsQVBsHHQUm8GxFOwHnFkX IMcb48TKEHFGkHvWgG1jV/uu11Xj44gHhjCukC0Sz8WnJ6Vhz4d2cWquEUZ/7D+4 YuaaFyrsaz04MItPztKzAx2IrAM4nkfcflfQuZ01VPGJoHmFIajhk4w/4nhb/d7R vKSuIQ0Z4NOrR4I46UhJRcIDf+vBT4Tl406CVSbVlekcxAaFlNvCdAChgnqkaU/4 sOW1f8wK6wpV6peE8LXFUATy5hmnyCw= -----END CERTIFICATE-----Generated at Mon Aug 4 22:18:38 2025 by rpki-client