$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa File: 686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa (raw, json) Hash identifier: J47UteF/xV6vqGQnMn7lJArmBXuFrfcFf1jnD9TflRM= Subject key identifier: B5:99:09:43:43:CD:BF:2D:77:79:3E:B6:7B:57:38:AD:89:B7:2B:3D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B9222378962F2E3299C40 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 147.185.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:92:22:37:89:62:f2:e3:29:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=7ee63f2e-4eed-430d-b294-3605069e03ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:b1:14:db:2b:e8:39:be:68:1a:fb:36:36: 66:7e:0d:71:71:5f:03:21:9f:0f:67:52:61:3a:d8: 3e:fb:9e:56:27:ad:96:5d:9c:58:4b:04:ed:6a:fc: 83:6b:e2:ab:76:cf:9b:86:df:3d:23:51:26:22:79: fb:ec:52:4a:c1:0d:4d:5a:66:6b:9c:f0:c5:76:e4: 6b:c8:00:81:c6:06:db:7e:ba:a3:af:6c:ac:b2:0e: 27:8a:d5:23:5e:ca:ae:fb:d6:f5:a7:08:5e:1b:87: 11:de:6e:41:a5:41:64:8e:b9:38:bb:a4:ab:90:36: 39:ee:18:5f:95:80:e6:88:f4:16:5a:e9:95:bd:0e: b1:df:e5:53:47:f2:86:81:4d:57:68:29:6d:64:4f: 3b:4f:0c:c5:2b:7e:40:d1:71:50:69:07:17:bf:6d: 36:be:1c:74:b3:36:14:ed:61:55:52:07:d3:e7:2f: 15:a1:d3:95:6d:50:89:78:a9:66:d2:ea:bd:db:47: 5d:b6:75:8b:00:8b:66:98:05:56:88:53:99:1a:db: af:21:56:83:3e:e1:c5:0e:8b:60:d7:4d:d3:52:a9: d6:73:c3:8a:df:45:5e:3e:6c:26:fb:58:97:43:1f: 20:d2:b2:fe:bd:d7:e6:52:0e:77:77:4c:bf:e0:ad: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:09:43:43:CD:BF:2D:77:79:3E:B6:7B:57:38:AD:89:B7:2B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.185.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b1:fc:99:30:06:db:7c:7d:dc:b3:63:4b:a6:2a:02:8e:ee: fe:0f:64:bf:62:a2:ee:dc:1f:fc:10:a5:58:54:b4:20:2a:88: 12:c0:a8:13:5e:a1:04:4e:c9:08:10:9f:be:71:2a:d7:09:b2: 20:08:93:3b:49:eb:ae:6f:81:9c:15:5a:32:1b:94:9a:92:42: ab:37:9a:5b:17:7c:b9:ab:8f:31:d6:6e:b6:02:7f:ee:8a:87: a5:bd:4c:48:5c:33:94:ab:0f:33:64:c4:44:72:db:ab:5c:25: 31:87:bf:a7:42:4e:59:ae:9b:a9:ee:f6:3c:f0:c9:f9:a5:e9: 21:4f:c3:5c:0e:df:cd:7a:3d:1a:6f:53:b9:84:15:95:46:99: 2c:1a:b3:0c:d1:67:8d:e8:b0:bd:b4:20:4a:39:5b:53:96:06: 54:f4:32:5d:20:2f:59:1c:96:41:c8:43:de:59:f1:d3:4b:a4: 7f:b5:04:71:89:6d:eb:e0:f5:64:22:e1:a2:da:98:9a:9b:33: e0:5f:1b:18:28:24:83:96:84:53:c4:c3:03:a4:bf:3c:f1:0e: ba:9d:ea:d6:d1:6f:a8:de:48:b1:e7:46:db:d3:54:0b:37:a0: c4:5f:2d:6b:29:2b:6a:55:0b:54:12:53:46:59:fb:e1:03:87: f5:a6:3c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5IiN4li8uMpnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2VlNjNmMmUtNGVlZC00MzBkLWIyOTQtMzYwNTA2OWUwM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFWxFNsr6Dm+aBr7NjZmfg1xcV8DIZ8PZ1Jh Otg++55WJ62WXZxYSwTtavyDa+Krds+bht89I1EmInn77FJKwQ1NWmZrnPDFduRr yACBxgbbfrqjr2yssg4nitUjXsqu+9b1pwheG4cR3m5BpUFkjrk4u6SrkDY57hhf lYDmiPQWWumVvQ6x3+VTR/KGgU1XaCltZE87TwzFK35A0XFQaQcXv202vhx0szYU 7WFVUgfT5y8VodOVbVCJeKlm0uq920ddtnWLAItmmAVWiFOZGtuvIVaDPuHFDotg 103TUqnWc8OK30VePmwm+1iXQx8g0rL+vdfmUg53d0y/4K1CkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWZCUNDzb8td3k+tntXOK2Jtys9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjg2ZGJlOTgtODZkOS0z YjQ2LWIwMzEtNzRmYzU5YmY5ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7neMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGx/JkwBtt8fdyzY0umKgKO7v4PZL9iou7cH/wQpVhUtCAqiBLAqBNe oQROyQgQn75xKtcJsiAIkztJ665vgZwVWjIblJqSQqs3mlsXfLmrjzHWbrYCf+6K h6W9TEhcM5SrDzNkxERy26tcJTGHv6dCTlmum6nu9jzwyfml6SFPw1wO3816PRpv U7mEFZVGmSwaswzRZ43osL20IEo5W1OWBlT0Ml0gL1kclkHIQ95Z8dNLpH+1BHGJ bevg9WQi4aLamJqbM+BfGxgoJIOWhFPEwwOkvzzxDrqd6tbRb6jeSLHnRtvTVAs3 oMRfLWspK2pVC1QSU0ZZ++EDh/WmPIc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:33 2025 by rpki-client