$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa File: febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa (raw, json) Hash identifier: CaWujOdkRcgtTvEGTdMdiSCj1Bav4WAvy4akerJNEWg= Subject key identifier: 11:87:3F:6F:DA:BB:07:E7:DA:FC:97:0A:D2:74:DB:98:3B:C8:6C:70 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AADF0FBA66D375F48B8531F80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 158.247.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fb:a6:6d:37:5f:48:b8:53:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=30eee82f-d7bf-4f06-aa15-20d1d64e9f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:82:d1:79:27:12:30:d0:85:fd:4d:a0:0f: 77:1e:4b:f8:2b:f0:30:65:e7:fd:f6:42:10:46:e6: 6b:4f:12:ed:bd:5b:29:3a:7d:1d:06:11:d8:a3:5c: 79:77:f2:dd:db:8e:bc:8b:04:b6:5c:57:e7:dc:f9: 4a:ef:22:09:a5:48:5f:b4:e8:b7:91:75:53:5f:f8: 99:ac:c2:be:a5:79:38:08:e6:c6:0f:8f:4e:2e:7d: ee:ea:96:47:28:02:81:a3:15:85:0a:0c:6e:dd:2b: 51:dd:84:ce:24:1d:28:59:25:03:ad:51:9a:af:89: 50:91:04:4a:25:52:1a:59:f9:64:dd:93:f5:43:f0: ce:37:06:d8:de:ac:3f:c4:7b:b0:e6:76:cc:98:47: 8e:20:98:3c:bf:3e:d8:45:dd:28:ed:a5:af:5b:ee: f0:0a:3b:d2:7e:b0:08:dc:24:7b:81:3d:35:cc:74: a7:24:bc:18:ba:50:f9:5a:4a:00:57:bc:72:76:6e: 5b:64:25:f5:da:f7:82:f7:2f:bc:93:57:97:ef:9f: 57:8c:2c:3f:72:99:b0:7b:18:66:9d:41:48:69:b3: 79:0c:8d:2d:a4:49:60:83:47:c2:71:25:0b:19:1c: 4d:d3:1c:7c:63:d5:36:61:10:27:2e:39:a9:fd:64: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:3F:6F:DA:BB:07:E7:DA:FC:97:0A:D2:74:DB:98:3B:C8:6C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 158.247.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c2:53:ae:ca:cd:82:c8:b1:73:4e:71:d4:3d:e8:63:fc:e8: 0c:30:9b:94:6e:b9:ec:6d:a6:3b:82:4d:33:34:cf:26:a3:54: 47:a5:40:0b:49:1a:e3:00:4f:f1:c3:63:b5:f9:03:61:af:2a: 74:0f:c2:c1:72:ee:fa:e6:3f:1f:3c:c5:00:ee:e7:10:c5:90: 3f:72:3c:3a:27:6e:95:b0:75:d5:8a:ab:2d:48:50:11:96:8e: de:cc:7b:59:3a:cd:bc:75:3e:35:b9:14:40:d7:e4:0f:a3:e4: 65:a7:f0:ed:ed:07:4b:68:aa:eb:d4:da:9c:c1:52:2c:a0:ce: 6f:61:ef:c0:86:e7:a5:8b:56:28:30:ac:d0:74:6d:a6:81:d1: e3:69:a1:54:79:5f:dc:96:07:60:43:6c:61:5f:b6:10:ce:48: 0f:66:14:e5:a7:f5:df:90:27:f3:3a:12:b4:16:14:42:5f:2a: c9:9a:a7:57:94:0c:c0:73:fe:97:a9:26:08:99:4a:da:9a:3e: 73:ea:73:05:c6:fc:4c:52:7d:59:96:9f:7e:46:1a:20:45:50: 4c:c7:18:62:4e:64:f9:d7:d9:63:2f:7b:8a:ae:42:ae:42:fe: 5c:c1:75:2f:f5:80:3d:93:58:5b:37:37:6b:5d:cd:ae:02:f0: ba:99:25:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8PumbTdfSLhTH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MzBlZWU4MmYtZDdiZi00ZjA2LWFhMTUtMjBkMWQ2NGU5ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol2C0XknEjDQhf1NoA93Hkv4K/AwZef99kIQ RuZrTxLtvVspOn0dBhHYo1x5d/Ld2468iwS2XFfn3PlK7yIJpUhftOi3kXVTX/iZ rMK+pXk4CObGD49OLn3u6pZHKAKBoxWFCgxu3StR3YTOJB0oWSUDrVGar4lQkQRK JVIaWflk3ZP1Q/DONwbY3qw/xHuw5nbMmEeOIJg8vz7YRd0o7aWvW+7wCjvSfrAI 3CR7gT01zHSnJLwYulD5WkoAV7xydm5bZCX12veC9y+8k1eX759XjCw/cpmwexhm nUFIabN5DI0tpElgg0fCcSULGRxN0xx8Y9U2YRAnLjmp/WSi3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGHP2/auwfn2vyXCtJ025g7yGxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZmViZWZiYmMtMGU5OS0z ZTI3LTgwODUtNDg1N2JmMmY4ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATCU67KzYLIsXNOcdQ96GP86Awwm5RuuextpjuCTTM0zyajVEelQAtJ GuMAT/HDY7X5A2GvKnQPwsFy7vrmPx88xQDu5xDFkD9yPDonbpWwddWKqy1IUBGW jt7Me1k6zbx1PjW5FEDX5A+j5GWn8O3tB0toquvU2pzBUiygzm9h78CG56WLVigw rNB0baaB0eNpoVR5X9yWB2BDbGFfthDOSA9mFOWn9d+QJ/M6ErQWFEJfKsmap1eU DMBz/pepJgiZStqaPnPqcwXG/ExSfVmWn35GGiBFUEzHGGJOZPnX2WMve4quQq5C /lzBdS/1gD2TWFs3N2tdza4C8LqZJfA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:22 2025 by rpki-client