$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa File: 248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa (raw, json) Hash identifier: kqw+OKfrR9PXNkuu2lPZjl7ZcpzocYVDO0HfJ8M8wtc= Subject key identifier: 93:DA:C6:B5:51:74:51:B6:C9:5B:70:6E:9A:0B:61:CD:1F:A8:B4:39 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A89A61461107F098B3D0A8D40 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16433 IP address blocks: 147.160.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:14:61:10:7f:09:8b:3d:0a:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=adf9ea5e-5a14-4937-9578-86fdc1488d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:17:77:c6:0b:2e:46:22:05:3c:5d:92:d1: 2d:b6:20:d6:5f:a5:83:4b:9e:11:b9:8b:3d:c2:86: 82:c0:57:38:8f:10:df:5b:52:c4:e1:f0:b9:db:3d: 24:ce:c1:2d:42:68:d4:bd:2d:89:14:1b:25:43:47: 33:0f:10:be:ba:0a:06:48:cb:2c:b3:e1:9b:55:44: 99:ea:09:5c:9a:d8:1e:8b:18:50:43:ed:59:9e:5f: ef:59:a4:b7:cc:6a:65:2b:1b:d7:6c:37:10:83:cb: db:32:40:37:d0:ec:d9:1b:7c:9d:c1:c1:db:96:52: 24:db:27:18:3e:ed:5d:d6:92:8b:fa:c2:71:88:26: d3:6c:c8:bd:a9:dc:18:11:03:64:71:66:1f:b8:da: ee:11:c1:fd:95:37:c0:b9:ad:c1:51:04:ab:b8:80: b9:d7:ff:57:50:14:d8:a3:d1:d6:23:3c:2c:31:d9: 6c:11:d0:88:08:ca:5d:e5:0b:cc:1c:60:bc:9f:f5: ba:1d:67:1a:17:cd:18:8a:a7:39:f2:23:27:a1:f5: cb:1f:e0:75:a2:71:d7:60:02:0a:d3:06:fc:9b:14: 06:27:97:58:af:e7:17:ab:97:64:f7:39:4d:57:e3: 37:e5:a8:8a:9b:df:9b:fe:bf:73:6b:bb:3c:2e:90: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:C6:B5:51:74:51:B6:C9:5B:70:6E:9A:0B:61:CD:1F:A8:B4:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/248ba07f-c147-3cdd-a4f7-d3ba5eb8adc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.160.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:32:87:6b:59:1f:c3:08:3c:e4:d4:e1:12:39:72:35:e1:b1: 7f:89:68:a8:83:35:52:b2:cb:39:19:68:35:f3:0a:2c:4d:24: f0:cc:36:e6:53:93:7d:7b:60:fc:ce:90:ac:aa:8c:34:f9:7b: 66:5b:6a:2b:a5:af:b6:ee:07:f4:0b:c9:99:0d:4e:1a:f1:e6: d8:59:59:fa:67:59:d0:7d:61:0b:67:78:51:4f:2c:02:d5:7d: b1:d1:c3:a6:bf:e4:96:32:e6:6c:c4:18:ec:27:26:47:eb:a5: e2:83:94:54:af:ae:d8:22:a9:00:61:03:a5:16:5b:db:7e:42: 98:41:fc:79:3f:11:34:ac:2e:cc:53:01:31:f4:f4:b0:c7:1c: 05:c1:00:a6:4b:f3:37:32:ba:3a:d1:7c:06:df:35:76:92:36: cc:7f:2c:f3:4c:c3:77:75:22:68:5f:92:b7:c5:ca:ac:1f:b3: 7d:0e:3d:ee:c7:75:2d:30:ea:36:d1:fb:88:47:32:a5:73:bc: 5a:2e:31:bc:90:98:fa:c5:53:a3:6b:80:26:8b:8a:d0:84:ec: fb:f2:01:36:18:70:b3:70:c1:94:c5:bd:77:c9:29:d2:0c:67: 15:e5:81:39:bd:9f:6c:45:7f:b7:53:15:9c:d7:d6:67:b4:ad: 5b:cd:74:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphRhEH8Jiz0KjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk YWRmOWVhNWUtNWExNC00OTM3LTk1NzgtODZmZGMxNDg4ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNoXd8YLLkYiBTxdktEttiDWX6WDS54RuYs9 woaCwFc4jxDfW1LE4fC52z0kzsEtQmjUvS2JFBslQ0czDxC+ugoGSMsss+GbVUSZ 6glcmtgeixhQQ+1Znl/vWaS3zGplKxvXbDcQg8vbMkA30OzZG3ydwcHbllIk2ycY Pu1d1pKL+sJxiCbTbMi9qdwYEQNkcWYfuNruEcH9lTfAua3BUQSruIC51/9XUBTY o9HWIzwsMdlsEdCICMpd5QvMHGC8n/W6HWcaF80Yiqc58iMnofXLH+B1onHXYAIK 0wb8mxQGJ5dYr+cXq5dk9zlNV+M35aiKm9+b/r9za7s8LpBIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPaxrVRdFG2yVtwbpoLYc0fqLQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjQ4YmEwN2YtYzE0Ny0z Y2RkLWE0ZjctZDNiYTVlYjhhZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk6CIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIyh2tZH8MIPOTU4RI5cjXhsX+JaKiDNVKyyzkZaDXzCixNJPDMNuZT k317YPzOkKyqjDT5e2Zbaiulr7buB/QLyZkNThrx5thZWfpnWdB9YQtneFFPLALV fbHRw6a/5JYy5mzEGOwnJkfrpeKDlFSvrtgiqQBhA6UWW9t+QphB/Hk/ETSsLsxT ATH09LDHHAXBAKZL8zcyujrRfAbfNXaSNsx/LPNMw3d1ImhfkrfFyqwfs30OPe7H dS0w6jbR+4hHMqVzvFouMbyQmPrFU6NrgCaLitCE7PvyATYYcLNwwZTFvXfJKdIM ZxXlgTm9n2xFf7dTFZzX1me0rVvNdDI= -----END CERTIFICATE-----Generated at Mon Aug 4 18:20:43 2025 by rpki-client