$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa File: ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa (raw, json) Hash identifier: FCKAsxUES8Jv86vQczd+YY1sVX8wehBTLaGJmDYfUts= Subject key identifier: 69:12:D5:E1:70:E1:C5:F2:46:82:12:CD:6F:14:57:25:4A:6A:CC:1F Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584B1806C5E7642EDCC2014B93C0 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 18434 IP address blocks: 147.249.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c5:e7:64:2e:dc:c2:01:4b:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ae11d928-2937-4846-a213-1e3c7d2e1760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:32:7f:2c:bb:c2:d8:8a:ef:51:40:f6:2d: bd:2c:69:08:ca:be:b1:9a:d3:6b:e9:00:65:a1:24: 00:18:c3:83:c2:f3:3c:d1:a2:d4:e9:0f:68:5e:9f: e8:f5:68:6d:bf:e0:d6:36:d0:19:ed:a6:0d:1c:a9: 23:16:7b:fd:69:87:45:8b:c0:4c:e7:78:b7:be:fc: fc:ac:5b:21:e9:8d:cb:43:b5:4b:dd:8c:06:b5:48: e1:f8:6d:64:9f:a9:41:a3:93:cf:14:79:f0:03:3c: 1a:89:29:0f:69:76:20:6c:54:03:e6:9d:6a:29:ca: 25:9d:e4:2c:87:e0:de:20:62:42:c8:c1:37:42:cf: 12:0c:74:58:bd:c2:3c:4e:84:fb:24:73:c7:5c:dc: e9:25:c9:30:48:30:34:4c:cf:82:06:e2:8e:e9:76: b9:47:5d:e6:03:d7:89:17:9e:8f:e4:cd:6e:09:0e: da:4e:3f:cc:dc:95:0d:8b:cb:96:36:1b:56:20:a1: de:da:da:7f:40:05:87:b4:76:86:1d:e7:b1:79:e5: db:5c:56:fb:5c:52:b9:28:fc:d3:27:35:b9:f3:76: 95:c5:51:7a:d8:29:31:bb:db:1c:6a:67:af:3f:cf: 6b:00:12:7d:c8:93:49:a5:34:23:4f:bc:de:03:5e: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:12:D5:E1:70:E1:C5:F2:46:82:12:CD:6F:14:57:25:4A:6A:CC:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee4bd2f0-8042-3e68-ac88-9718ecf249a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ec:35:5c:48:8f:9f:33:4a:de:68:de:0d:1a:01:7d:60:3b: 7b:28:3c:8b:77:0f:75:3a:ce:3a:70:9b:09:1a:b7:e7:28:e9: e4:da:93:9b:1e:ee:cc:63:fd:3e:48:5e:da:27:25:b2:16:cb: c2:13:50:3f:4f:7a:13:be:35:a1:82:2b:88:61:56:29:ba:c0: 04:88:e5:bd:c8:78:c3:9f:5f:3e:1d:48:3b:c8:cf:69:85:90: 02:63:25:af:fa:42:43:9b:47:ca:3d:3a:2e:67:db:68:04:13: 43:30:07:ba:3b:5b:20:30:69:44:cd:c4:42:5c:ab:80:72:6f: 08:fa:36:36:a0:83:14:96:b5:49:ae:82:25:1b:23:0f:ff:ea: 15:57:7d:50:2c:55:71:fd:50:7f:9c:5c:d4:17:04:2e:8c:89: c5:1f:1a:ba:71:a6:c2:2f:76:ed:d0:46:26:7a:c9:a3:04:86: 9e:60:b3:94:57:c8:33:04:e6:22:29:72:1f:01:89:91:16:f2: 22:ec:e1:65:dd:eb:f3:3c:0f:01:11:c5:7a:ee:99:25:f2:56: cd:bc:d2:6f:df:6b:c3:04:8b:92:4d:90:b2:56:b5:23:e3:7d: c5:6e:56:15:0d:38:50:70:90:c7:57:ab:ed:34:1d:89:9e:dd: b2:67:22:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsXnZC7cwgFLk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWUxMWQ5MjgtMjkzNy00ODQ2LWEyMTMtMWUzYzdkMmUxNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIMyfyy7wtiK71FA9i29LGkIyr6xmtNr6QBl oSQAGMODwvM80aLU6Q9oXp/o9Whtv+DWNtAZ7aYNHKkjFnv9aYdFi8BM53i3vvz8 rFsh6Y3LQ7VL3YwGtUjh+G1kn6lBo5PPFHnwAzwaiSkPaXYgbFQD5p1qKcolneQs h+DeIGJCyME3Qs8SDHRYvcI8ToT7JHPHXNzpJckwSDA0TM+CBuKO6Xa5R13mA9eJ F56P5M1uCQ7aTj/M3JUNi8uWNhtWIKHe2tp/QAWHtHaGHeexeeXbXFb7XFK5KPzT JzW583aVxVF62Ckxu9scamevP89rABJ9yJNJpTQjT7zeA1574wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkS1eFw4cXyRoISzW8UVyVKaswfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZWU0YmQyZjAtODA0Mi0z ZTY4LWFjODgtOTcxOGVjZjI0OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/khMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/sNVxIj58zSt5o3g0aAX1gO3soPIt3D3U6zjpwmwkat+co6eTak5se 7sxj/T5IXtonJbIWy8ITUD9PehO+NaGCK4hhVim6wASI5b3IeMOfXz4dSDvIz2mF kAJjJa/6QkObR8o9Oi5n22gEE0MwB7o7WyAwaUTNxEJcq4Bybwj6NjaggxSWtUmu giUbIw//6hVXfVAsVXH9UH+cXNQXBC6MicUfGrpxpsIvdu3QRiZ6yaMEhp5gs5RX yDME5iIpch8BiZEW8iLs4WXd6/M8DwERxXrumSXyVs280m/fa8MEi5JNkLJWtSPj fcVuVhUNOFBwkMdXq+00HYme3bJnIsM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:18 2025 by rpki-client