$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa File: 42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json) Hash identifier: 98GHlvQhRwZCO23J7G825DID7j52N0S9a4UW/iJTMxE= Subject key identifier: 61:1D:C6:C2:2F:15:2C:17:94:D6:A0:72:1A:0E:CD:6F:C3:2D:C8:9E Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584BBE402D009503F54DF0AEFE00 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 5050 IP address blocks: 147.73.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2d:00:95:03:f5:4d:f0:ae:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=b358f2e8-91cc-4e3b-a107-8ee7cff72249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:2f:6d:a1:c1:d2:76:38:86:e6:53:61:30: d8:f9:dd:86:6e:9c:2e:04:f1:96:ab:d0:b4:f5:67: d4:6b:45:95:77:19:cd:6d:89:98:a5:f9:be:d5:04: b1:a7:c5:13:cd:20:42:85:cf:11:83:03:36:ad:2d: 0f:98:71:5f:4c:14:18:c5:ba:44:4b:a0:28:b8:ad: 7e:89:e0:87:be:60:ed:9c:5b:34:30:06:d3:31:60: 6d:53:1c:d8:4b:9f:78:d3:29:15:68:07:f5:7f:80: 61:3c:63:13:81:7f:1a:4b:b0:97:75:23:79:2e:15: bd:e9:33:10:51:ad:7a:1c:4f:fc:17:81:a1:a6:0e: 31:a9:97:6a:f0:90:dc:2d:25:3d:b0:82:c8:5c:b3: 0d:63:90:f4:36:11:ff:79:22:d1:0f:2a:2e:d6:e6: 94:2e:ae:ae:06:d3:fa:d0:f3:9f:69:3b:69:e5:54: dd:18:7d:14:1b:53:10:61:65:3e:2f:a4:82:9b:04: 37:40:d5:80:78:ed:2e:b3:6a:77:13:75:38:0b:56: 6b:dd:f4:b3:41:32:63:83:f3:5f:e5:43:9d:80:14: fb:7a:b3:d8:ee:eb:a8:b2:c3:36:0d:a9:48:7e:c7: 39:57:4a:71:56:f1:a5:e6:c1:a7:7e:0e:12:09:26: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1D:C6:C2:2F:15:2C:17:94:D6:A0:72:1A:0E:CD:6F:C3:2D:C8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a3:33:4e:c8:40:ae:2d:12:07:83:f8:8a:b5:79:c9:05:47: b8:2a:b1:5b:a6:9c:b7:2c:e5:0e:f2:85:a9:f7:26:c2:26:4d: 78:92:90:a5:fe:20:1b:36:74:6a:38:a1:9c:79:19:41:89:e0: 91:0a:8c:81:bc:cc:c5:7e:1f:62:db:98:22:0c:a0:76:39:f9: 1f:60:d3:e1:d4:aa:24:55:94:ee:d4:7d:5b:92:85:91:2b:b5: 51:ce:17:a5:0c:91:fc:f3:91:55:46:d0:13:6b:40:96:cc:7a: bd:c1:7f:0d:8f:58:f7:a1:be:69:30:7d:03:24:13:77:56:ec: 41:ef:1d:61:79:e3:94:56:ca:b6:11:f5:64:06:5e:89:83:59: 95:54:ca:27:dd:36:e9:b7:f3:14:66:ff:0d:35:89:f8:40:37: 76:c9:3f:f3:1b:8b:62:f4:25:e1:7c:af:d1:9f:05:bc:fd:68: 48:02:c0:58:14:cf:c2:dd:42:85:08:3d:b2:0f:19:57:1b:7f: 3f:0b:ce:0a:4f:f5:de:4e:4d:3c:eb:d1:72:99:b8:a1:51:f7: 1c:b8:c1:44:64:27:97:1b:56:bf:f7:8c:34:fa:37:c0:98:4b: 53:55:5c:85:53:97:98:ac:c9:fc:9d:a1:38:27:ce:ad:c0:25: 89:4d:1b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC0AlQP1TfCu/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjM1OGYyZTgtOTFjYy00ZTNiLWExMDctOGVlN2NmZjcyMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEYvbaHB0nY4huZTYTDY+d2GbpwuBPGWq9C0 9WfUa0WVdxnNbYmYpfm+1QSxp8UTzSBChc8RgwM2rS0PmHFfTBQYxbpES6AouK1+ ieCHvmDtnFs0MAbTMWBtUxzYS5940ykVaAf1f4BhPGMTgX8aS7CXdSN5LhW96TMQ Ua16HE/8F4Ghpg4xqZdq8JDcLSU9sILIXLMNY5D0NhH/eSLRDyou1uaULq6uBtP6 0POfaTtp5VTdGH0UG1MQYWU+L6SCmwQ3QNWAeO0us2p3E3U4C1Zr3fSzQTJjg/Nf 5UOdgBT7erPY7uuossM2DalIfsc5V0pxVvGl5sGnfg4SCSa1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEdxsIvFSwXlNagchoOzW/DLcieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNDIzNzc4MDYtNGE3Ny0z MDk4LThmZDQtYzZiOGU0Mzg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqjM07IQK4tEgeD+Iq1eckFR7gqsVumnLcs5Q7yhan3JsImTXiSkKX+ IBs2dGo4oZx5GUGJ4JEKjIG8zMV+H2LbmCIMoHY5+R9g0+HUqiRVlO7UfVuShZEr tVHOF6UMkfzzkVVG0BNrQJbMer3Bfw2PWPehvmkwfQMkE3dW7EHvHWF545RWyrYR 9WQGXomDWZVUyifdNum38xRm/w01ifhAN3bJP/Mbi2L0JeF8r9GfBbz9aEgCwFgU z8LdQoUIPbIPGVcbfz8LzgpP9d5OTTzr0XKZuKFR9xy4wURkJ5cbVr/3jDT6N8CY S1NVXIVTl5isyfydoTgnzq3AJYlNG78= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:28 2025 by rpki-client