$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa File: 0adc78b7-6150-3134-bada-2174e4b6dc6e.roa (raw, json) Hash identifier: PmVvpQmlg55Qds+/VnkasNbcELWmIfyr82YYwCMnGps= Subject key identifier: 4A:F0:96:89:84:61:D6:C7:AB:84:2A:6E:12:95:99:F5:7B:79:DA:BD Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584BBE402648FF6456D9DBD71260 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 5050 IP address blocks: 147.73.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:26:48:ff:64:56:d9:db:d7:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=b2d7956e-cea6-48eb-83b7-0eb8a48f2a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:a5:d4:7f:89:fc:f6:f3:26:a7:3c:ee:04: 42:d4:94:e3:a3:62:d1:dd:46:61:70:03:01:51:47: ad:a5:a9:54:df:22:b9:17:5b:a7:c7:22:b7:a4:ec: 2b:fe:f1:e7:e2:10:ed:d1:05:81:f6:d9:ec:a4:1c: 43:82:53:c0:89:bb:05:9c:6e:96:fb:18:a3:d5:e4: 47:f2:50:b6:bf:8f:c1:7c:6e:7b:d8:bb:13:e1:85: 60:55:ca:63:ff:ce:40:80:2d:a0:48:65:3e:50:ba: dd:e5:fe:4d:5c:56:78:52:62:06:92:31:2f:34:81: bc:5b:20:ce:50:65:cd:9a:38:d1:cf:b0:fe:76:19: 72:64:df:b4:3e:56:37:0b:a7:d9:76:ae:19:39:0d: 99:0c:7b:2d:b2:69:4d:2b:49:54:b7:d3:45:0c:db: 4c:66:cc:98:98:11:0b:b5:a4:90:28:ff:84:be:05: 4e:30:ee:6e:d8:1a:64:73:b2:6f:ef:9d:00:eb:0e: a7:82:44:32:65:02:36:b3:31:a2:e6:fa:fe:5b:e2: 19:53:f9:86:c6:4e:f2:63:f3:0f:02:67:ea:83:03: 89:0d:4b:ce:b0:3c:04:19:9e:49:5c:4e:fa:a9:7e: 1d:56:c2:98:ae:d2:6e:dc:14:c3:a4:05:32:0b:0c: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:96:89:84:61:D6:C7:AB:84:2A:6E:12:95:99:F5:7B:79:DA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e1:f2:c4:6d:55:09:f9:97:c8:46:fa:01:5f:9e:0a:92:9b: b2:f2:9c:84:38:e8:61:a3:a6:d4:8c:62:d3:09:f1:4f:06:89: 46:eb:35:d5:34:b9:95:cf:b5:b1:7e:bf:9b:6e:99:c7:c1:9c: 4f:8c:15:65:63:09:50:20:84:31:67:45:b6:c3:8e:18:5e:4b: 80:fd:51:19:c7:ec:f6:c2:23:b1:fb:92:31:24:7f:5e:1e:ba: db:21:d9:39:9f:8c:77:15:90:f3:ce:6f:24:ac:77:c5:f2:a9: 7b:a7:2d:16:04:bb:ab:d0:35:ed:ff:9e:a2:61:f6:e3:9f:1a: c9:e3:63:aa:8e:e7:e8:16:7b:00:38:ed:53:9f:8a:e9:b2:96: 20:2f:18:c1:a6:f0:25:25:6d:03:f5:a4:68:66:88:51:0c:a2: 0d:70:b3:45:8e:b1:98:0d:22:91:3e:e9:98:13:aa:96:31:cc: 79:0a:4b:a4:f1:08:61:b6:ee:b0:a6:9e:c9:6f:35:17:d7:d6: bd:50:12:db:28:74:e8:21:4d:02:b4:4a:46:26:de:cb:94:8e: 9a:ea:b4:98:4c:e5:a9:4f:c9:86:16:41:23:9c:b5:de:28:02: 79:c1:96:cc:0b:e4:68:41:77:a7:f9:6a:10:db:8d:db:91:5f: 44:3a:2e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCZI/2RW2dvXEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjJkNzk1NmUtY2VhNi00OGViLTgzYjctMGViOGE0OGYyYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnail1H+J/PbzJqc87gRC1JTjo2LR3UZhcAMB UUetpalU3yK5F1unxyK3pOwr/vHn4hDt0QWB9tnspBxDglPAibsFnG6W+xij1eRH 8lC2v4/BfG572LsT4YVgVcpj/85AgC2gSGU+ULrd5f5NXFZ4UmIGkjEvNIG8WyDO UGXNmjjRz7D+dhlyZN+0PlY3C6fZdq4ZOQ2ZDHstsmlNK0lUt9NFDNtMZsyYmBEL taSQKP+EvgVOMO5u2Bpkc7Jv750A6w6ngkQyZQI2szGi5vr+W+IZU/mGxk7yY/MP AmfqgwOJDUvOsDwEGZ5JXE76qX4dVsKYrtJu3BTDpAUyCwxPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErwlomEYdbHq4QqbhKVmfV7edq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMGFkYzc4YjctNjE1MC0z MTM0LWJhZGEtMjE3NGU0YjZkYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/h8sRtVQn5l8hG+gFfngqSm7LynIQ46GGjptSMYtMJ8U8GiUbrNdU0 uZXPtbF+v5tumcfBnE+MFWVjCVAghDFnRbbDjhheS4D9URnH7PbCI7H7kjEkf14e utsh2TmfjHcVkPPObySsd8XyqXunLRYEu6vQNe3/nqJh9uOfGsnjY6qO5+gWewA4 7VOfiumyliAvGMGm8CUlbQP1pGhmiFEMog1ws0WOsZgNIpE+6ZgTqpYxzHkKS6Tx CGG27rCmnslvNRfX1r1QEtsodOghTQK0SkYm3suUjprqtJhM5alPyYYWQSOctd4o AnnBlswL5GhBd6f5ahDbjduRX0Q6Lis= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:53 2025 by rpki-client