$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa File: c539e820-1aba-30e3-8390-0ea813b57848.roa (raw, json) Hash identifier: YmTtyYmQVhaee/y14L5A5bCGADX0bo3F3hJMsXRswyY= Subject key identifier: F6:19:CA:CB:53:77:6E:E3:EA:0A:2D:3F:5D:B7:9A:81:E2:BF:BB:15 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584BC10AD8A676A66DE4AAE7BF80 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 400238 IP address blocks: 147.185.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:d8:a6:76:a6:6d:e4:aa:e7:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=1675f5dc-8cf7-4d88-a58f-c9f50b33a733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:81:44:b1:6c:2b:1b:20:29:99:54:5d:d7: 68:ab:85:fe:8d:51:65:0c:0b:5d:7f:b7:b9:b8:04: c4:1b:21:7e:0a:52:74:56:ba:43:74:47:3c:5c:aa: c6:bf:9b:21:01:0a:09:a7:52:92:58:c6:89:7c:eb: be:b9:19:07:35:82:bd:1c:79:35:5a:e5:cd:99:bd: df:56:0a:8d:c5:8f:16:bf:f5:a3:f2:fd:01:35:65: 78:e5:5b:53:c9:72:0e:ab:52:e8:1d:eb:20:0b:32: d7:87:2e:90:32:0d:87:0b:36:0f:cc:10:fa:08:bb: 96:ee:fb:a8:ee:0f:04:76:79:19:da:8a:04:9d:98: a8:8d:4c:4d:4b:b0:c5:61:b5:26:84:f8:ee:57:a0: f0:08:1f:47:7f:f2:a3:f6:fa:71:8c:a0:f5:ed:8d: da:25:30:a9:b3:d2:99:b3:b3:d7:48:84:60:07:38: f8:e5:b6:44:0d:d4:1e:d2:db:b8:0a:a4:41:8a:5d: 3e:28:f7:32:ab:7b:5b:44:bb:c9:5d:fd:c1:c1:7a: f8:52:32:8b:21:e8:47:8a:73:5a:98:b3:f3:88:9f: 2d:0e:d5:48:8f:dd:f6:c6:59:60:63:18:70:b0:c7: 33:22:d3:d6:94:65:c0:5e:98:5f:fa:84:67:d9:64: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:CA:CB:53:77:6E:E3:EA:0A:2D:3F:5D:B7:9A:81:E2:BF:BB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c539e820-1aba-30e3-8390-0ea813b57848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 147.185.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:73:54:cc:dd:70:96:a4:46:cb:5b:a0:58:73:59:76:3b:ed: 44:67:84:a3:a9:0b:83:5c:40:ab:e6:6a:c5:2d:00:91:df:af: 64:16:b2:d4:a7:18:c4:6c:14:22:d0:f6:1b:5d:91:36:e9:de: 08:86:8d:07:f1:56:92:dd:1c:82:54:83:e5:af:ea:d7:f1:31: a9:73:a2:19:b6:53:7b:79:21:29:e2:26:79:f8:ef:27:f6:7b: 12:96:2b:05:12:aa:81:61:05:d4:81:d6:e7:55:37:4e:7c:00: c3:e2:93:b0:a9:4d:8f:68:49:c6:dc:aa:ac:90:99:f9:18:8d: 5a:5b:7c:b3:2b:24:59:0c:e3:0d:fc:c0:4d:8b:50:84:cb:d1: 73:2a:e1:42:32:18:2d:8a:1d:e8:f4:b9:93:8a:60:cb:cb:80: c1:e5:04:0f:39:d6:f6:5d:d4:75:3f:89:9b:b6:32:56:8d:f4: e9:e0:2e:83:95:e2:6c:18:9e:53:8d:6b:e2:5c:df:b0:d4:d1: be:92:a9:2b:8e:9e:55:d2:14:0a:97:4c:b7:df:28:25:a2:cb: 51:c5:08:a6:44:30:a4:8e:fc:18:80:a3:ff:9f:10:4d:28:73: c1:6f:ae:48:44:b9:a9:c2:f1:c7:57:30:bf:ee:ed:a6:7a:57: c5:69:e0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtimdqZt5Krnv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTY3NWY1ZGMtOGNmNy00ZDg4LWE1OGYtYzlmNTBiMzNhNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2OBRLFsKxsgKZlUXddoq4X+jVFlDAtdf7e5 uATEGyF+ClJ0VrpDdEc8XKrGv5shAQoJp1KSWMaJfOu+uRkHNYK9HHk1WuXNmb3f VgqNxY8Wv/Wj8v0BNWV45VtTyXIOq1LoHesgCzLXhy6QMg2HCzYPzBD6CLuW7vuo 7g8EdnkZ2ooEnZiojUxNS7DFYbUmhPjuV6DwCB9Hf/Kj9vpxjKD17Y3aJTCps9KZ s7PXSIRgBzj45bZEDdQe0tu4CqRBil0+KPcyq3tbRLvJXf3BwXr4UjKLIehHinNa mLPziJ8tDtVIj932xllgYxhwsMczItPWlGXAXphf+oRn2WQgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYZystTd27j6gotP123moHiv7sVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYzUzOWU4MjAtMWFiYS0z MGUzLTgzOTAtMGVhODEzYjU3ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7nSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhzVMzdcJakRstboFhzWXY77URnhKOpC4NcQKvmasUtAJHfr2QWstSn GMRsFCLQ9htdkTbp3giGjQfxVpLdHIJUg+Wv6tfxMalzohm2U3t5ISniJnn47yf2 exKWKwUSqoFhBdSB1udVN058AMPik7CpTY9oScbcqqyQmfkYjVpbfLMrJFkM4w38 wE2LUITL0XMq4UIyGC2KHej0uZOKYMvLgMHlBA851vZd1HU/iZu2MlaN9OngLoOV 4mwYnlONa+Jc37DU0b6SqSuOnlXSFAqXTLffKCWiy1HFCKZEMKSO/BiAo/+fEE0o c8FvrkhEuanC8cdXML/u7aZ6V8Vp4MQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:15:55 2025 by rpki-client