$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa File: a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa (raw, json) Hash identifier: qqsA4RtmtPUxVp0Sc+IjQuqrg4p+yBF3Y1Mnr0nh9H0= Subject key identifier: 29:54:51:47:F1:C0:FF:13:16:65:72:53:9E:0D:9C:AB:DD:F1:11:A9 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584BA667A21AAD61BA6B7E589B40 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 27471 IP address blocks: 168.149.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a2:1a:ad:61:ba:6b:7e:58:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=1702f34f-9776-4f43-b084-36f23b1755c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:c4:bf:f5:0c:70:e9:87:8a:68:b0:da:27: 3d:a7:7d:c7:7f:28:bc:05:4a:8d:27:9c:da:85:4a: 8f:00:bf:4e:e9:14:d3:53:b2:c2:4d:a0:10:22:d4: 32:f8:34:e9:2a:e8:84:0d:a7:ae:4a:5d:e4:4b:ae: 5c:29:e8:70:c6:b2:54:ba:8c:24:c3:43:87:7b:b6: e0:fc:90:ca:6a:6e:5d:69:d4:e8:00:c7:3c:ae:76: 15:2c:11:ca:4a:01:8e:fa:e3:34:09:00:5d:5a:a8: 42:2d:6e:a0:22:34:e3:5b:b4:7d:9f:a0:5b:6c:20: 0a:bc:ab:7f:0f:1c:67:38:a8:0e:55:25:ae:6d:0b: 8c:2e:6b:33:f4:75:d2:3b:6e:1a:cb:15:74:eb:3d: a8:a9:31:08:ca:ae:e8:62:75:6b:e9:a1:fa:43:8c: 83:ad:3b:01:24:93:a8:1a:80:51:ce:f4:3b:13:97: 2e:f8:a7:f5:aa:be:fc:3c:38:f9:6e:58:82:9e:6f: 4c:d5:62:eb:30:fc:6f:a1:bd:0b:58:31:f4:36:36: 45:0f:00:30:be:0e:ed:4d:ce:f3:27:47:85:46:e3: 96:dd:2b:a3:50:6c:d5:65:2c:91:bd:1f:04:67:8e: 39:23:ad:21:71:4d:a7:44:8b:e4:dc:7d:d7:2f:57: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:54:51:47:F1:C0:FF:13:16:65:72:53:9E:0D:9C:AB:DD:F1:11:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 168.149.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:15:21:a9:e2:01:44:67:b2:41:25:97:c8:5a:70:85:dd:1a: a8:cf:5a:0e:18:d2:17:f5:f0:e9:2d:ce:07:75:9d:fa:06:aa: a8:ea:56:2f:11:c2:a9:48:8a:84:f6:e2:c4:0d:06:f5:02:ab: 2b:34:0b:f7:6f:77:88:b7:63:26:b6:70:f1:a3:96:de:be:20: b4:1c:a0:b1:e7:d4:53:7d:28:df:69:b2:8e:07:12:75:52:73: 3f:2c:8d:45:ce:b9:f7:6c:90:a3:b0:95:4b:27:a9:27:8c:f2: a8:4a:6b:65:90:98:c8:f1:6d:f4:50:98:88:1f:57:05:5d:d9: 5a:d9:8c:72:b6:b5:c5:75:dc:cb:68:d0:f0:9b:cc:38:96:63: 27:01:6c:f5:4a:9f:90:9b:94:ff:23:1f:9d:af:02:e2:f8:14: 94:f6:d2:cd:3b:03:7b:ff:ba:78:0e:ea:3e:94:a6:68:93:43: ea:6e:c9:60:28:e8:ed:71:51:a7:8f:79:12:d8:a5:b6:f1:2a: 6b:de:f3:10:3e:dc:04:86:59:33:2b:f5:80:da:89:fd:a6:e9: 2e:71:b0:13:82:ee:b1:f1:1c:c0:e9:27:5b:68:73:09:6a:4c: 8f:83:2d:bc:5e:c2:39:9a:21:46:62:92:88:aa:bb:e8:a7:6a: 77:2d:aa:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6IarWG6a35Ym0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MTcwMmYzNGYtOTc3Ni00ZjQzLWIwODQtMzZmMjNiMTc1NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka3Ev/UMcOmHimiw2ic9p33Hfyi8BUqNJ5za hUqPAL9O6RTTU7LCTaAQItQy+DTpKuiEDaeuSl3kS65cKehwxrJUuowkw0OHe7bg /JDKam5dadToAMc8rnYVLBHKSgGO+uM0CQBdWqhCLW6gIjTjW7R9n6BbbCAKvKt/ DxxnOKgOVSWubQuMLmsz9HXSO24ayxV06z2oqTEIyq7oYnVr6aH6Q4yDrTsBJJOo GoBRzvQ7E5cu+Kf1qr78PDj5bliCnm9M1WLrMPxvob0LWDH0NjZFDwAwvg7tTc7z J0eFRuOW3SujUGzVZSyRvR8EZ445I60hcU2nRIvk3H3XL1cgnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClUUUfxwP8TFmVyU54NnKvd8RGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYTkyMjllZTctYTE2ZS0z ZDNlLWI2ZGMtMjYxMDdiMTM0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQVIaniAURnskEll8hacIXdGqjPWg4Y0hf18Oktzgd1nfoGqqjqVi8R wqlIioT24sQNBvUCqys0C/dvd4i3Yya2cPGjlt6+ILQcoLHn1FN9KN9pso4HEnVS cz8sjUXOufdskKOwlUsnqSeM8qhKa2WQmMjxbfRQmIgfVwVd2VrZjHK2tcV13Mto 0PCbzDiWYycBbPVKn5CblP8jH52vAuL4FJT20s07A3v/ungO6j6UpmiTQ+puyWAo 6O1xUaePeRLYpbbxKmve8xA+3ASGWTMr9YDaif2m6S5xsBOC7rHxHMDpJ1tocwlq TI+DLbxewjmaIUZikoiqu+inanctqhg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:54 2025 by rpki-client