$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json) Hash identifier: 19QYoO/CgDEP84HXl95vSUhJKhxUrMnTfLJk3hER7Co= Subject key identifier: 29:BD:0E:81:61:06:54:A0:66:9E:B8:81:30:63:EA:94:C2:8C:74:ED Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584BB45D1166C9FAA74CF8B58480 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30165 IP address blocks: 147.253.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:11:66:c9:fa:a7:4c:f8:b5:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=af5e6e2e-5e35-4f1a-bb25-7c2508e8d421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:50:3d:54:c2:34:a4:a7:4f:25:dc:01:9d: 7a:a7:b3:e0:57:fe:fa:11:3b:8b:83:dd:f0:53:7e: 72:db:f6:95:07:f1:1a:67:cf:da:84:ad:16:f7:da: 87:79:10:31:4f:34:7e:f1:90:11:23:d4:44:28:d7: 23:d4:f9:78:70:7a:f7:72:91:09:50:d4:3d:42:87: f5:f9:58:50:52:fc:c5:a9:49:7a:7d:40:0a:29:c5: ca:89:6b:bf:cc:95:8b:d1:98:ad:e2:ae:80:f8:7a: e6:58:7e:e2:a1:2f:98:e7:80:dd:1a:67:e9:38:a1: 94:94:b7:33:2f:e7:3c:61:c7:60:e6:d2:dd:c5:46: 24:d5:75:54:63:8e:eb:fc:ee:f4:c1:ef:be:36:84: 5f:27:b6:c5:38:5b:8c:ed:3c:13:a2:e0:d8:cf:ce: 56:57:34:6f:08:5b:fc:61:fc:1c:73:6f:41:fc:6a: 5e:bc:f9:3d:95:fb:4a:8c:0c:95:8f:8c:5e:d2:0c: c9:a9:e1:23:31:cd:10:a0:c5:90:8a:1b:25:b3:0a: c5:d0:70:f5:89:a2:05:56:aa:01:ed:1a:2d:6e:8a: 0c:bc:e5:ba:8a:40:ad:00:fb:d0:be:df:9f:3b:65: 93:98:97:f8:15:37:89:85:a6:a0:7a:6e:7b:5d:66: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:0E:81:61:06:54:A0:66:9E:B8:81:30:63:EA:94:C2:8C:74:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv4: 147.253.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ee:f4:52:db:2a:fc:a9:c5:a6:ff:b6:ae:49:91:2a:18:a4: cc:5a:82:b5:5a:ac:df:9f:f4:00:e7:a0:49:0c:02:38:d6:ea: 2d:e7:db:39:a3:43:7c:97:3c:4c:5f:c4:46:37:25:ed:7b:57: 9c:9d:b0:34:a0:0c:96:03:34:a1:e3:c6:bf:69:77:50:6b:26: b7:d8:c1:98:61:32:0c:f3:aa:ab:3e:8e:09:47:fa:05:be:2e: 71:f8:be:74:f5:71:2d:0d:87:2f:2c:12:f8:28:e3:fa:14:3c: 71:5a:f7:93:75:0f:53:5a:89:75:46:6f:1c:d6:ac:de:92:f0: 3d:02:ea:4f:f8:c6:1c:03:1e:d4:96:a1:9a:92:73:e4:7e:75: f5:63:25:09:05:cb:02:7a:9b:03:bc:48:bd:6e:14:19:6b:30: e1:c7:8c:1b:ef:e7:48:77:14:e4:43:ce:76:b5:93:01:85:5d: c6:76:a9:35:5b:61:1d:6e:da:a9:29:d1:84:44:c2:2f:81:52: 19:6e:a5:fd:e3:62:fb:61:c7:f8:c7:0a:d4:ae:d3:d8:02:f9: 7f:ac:03:6d:44:60:ec:48:15:85:23:89:35:03:a6:a0:c7:a8: c0:2d:2d:68:a3:a0:2a:0f:a6:2c:5e:66:78:95:2d:a6:e7:33: 4c:fa:46:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRFmyfqnTPi1hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWY1ZTZlMmUtNWUzNS00ZjFhLWJiMjUtN2MyNTA4ZThkNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7dQPVTCNKSnTyXcAZ16p7PgV/76ETuLg93w U35y2/aVB/EaZ8/ahK0W99qHeRAxTzR+8ZARI9REKNcj1Pl4cHr3cpEJUNQ9Qof1 +VhQUvzFqUl6fUAKKcXKiWu/zJWL0Zit4q6A+HrmWH7ioS+Y54DdGmfpOKGUlLcz L+c8Ycdg5tLdxUYk1XVUY47r/O70we++NoRfJ7bFOFuM7TwTouDYz85WVzRvCFv8 Yfwcc29B/GpevPk9lftKjAyVj4xe0gzJqeEjMc0QoMWQihslswrF0HD1iaIFVqoB 7RotbooMvOW6ikCtAPvQvt+fO2WTmJf4FTeJhaagem57XWZSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm9DoFhBlSgZp64gTBj6pTCjHTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvOTFkNTU2NDItMGM0Ny0z OWU2LTlmMDEtYjNkYjYwNzhlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFk/3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXu9FLbKvypxab/tq5JkSoYpMxagrVarN+f9ADnoEkMAjjW6i3n2zmj Q3yXPExfxEY3Je17V5ydsDSgDJYDNKHjxr9pd1BrJrfYwZhhMgzzqqs+jglH+gW+ LnH4vnT1cS0Nhy8sEvgo4/oUPHFa95N1D1NaiXVGbxzWrN6S8D0C6k/4xhwDHtSW oZqSc+R+dfVjJQkFywJ6mwO8SL1uFBlrMOHHjBvv50h3FORDzna1kwGFXcZ2qTVb YR1u2qkp0YREwi+BUhlupf3jYvthx/jHCtSu09gC+X+sA21EYOxIFYUjiTUDpqDH qMAtLWijoCoPpixeZniVLabnM0z6Rtg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:14 2025 by rpki-client