$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa File: a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa (raw, json) Hash identifier: 6jjdlk8wTM+yCxKqV25CTJWO49cL3zjYLO7HW9y3fic= Subject key identifier: 69:CC:4B:E2:F7:30:E6:31:03:6F:20:7D:73:61:E1:CC:25:B5:A0:CE Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584AC5AB861DEDEF9373603D4AF0 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 27471 IP address blocks: 168.149.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:86:1d:ed:ef:93:73:60:3d:4a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=16691aa9-7250-4ad2-9706-26a34a31e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ee:f8:d6:2b:9a:c6:84:70:db:9f:b3:7d:8f: 5c:c1:05:dc:d6:69:32:ad:54:52:83:e1:0b:30:0b: bb:06:bb:e7:33:5d:f8:d2:bd:94:24:01:d2:27:d5: 00:95:ae:23:08:1b:dc:1c:2e:b9:82:46:14:cc:ed: bc:6f:bc:41:7e:33:20:70:48:6d:cb:b6:59:9f:98: f3:20:14:c6:fc:b3:e7:ff:a9:f2:ae:6f:db:62:ff: c7:db:2c:0a:dd:6d:52:e1:91:1d:12:23:8f:a1:97: ea:72:6b:59:40:23:6a:88:fd:01:64:05:29:d8:8b: b7:39:0a:81:1a:db:b6:3d:f4:3c:7e:9b:04:9f:9a: be:bd:60:37:fc:8b:d8:c8:fb:39:16:05:ad:fc:2d: 87:9e:5b:3b:5e:26:73:00:03:7d:d1:f6:89:08:f4: 68:66:32:6a:06:02:e6:c5:40:13:65:1c:36:c3:8a: 67:39:39:bb:7e:2d:62:51:8a:1d:3a:f6:8c:5d:8f: 56:00:ca:39:61:28:cc:fe:d8:da:8e:75:65:44:b9: 60:d5:72:5a:e7:46:3e:32:a1:b4:b7:38:02:4e:c5: 53:9f:39:1b:38:cf:f3:e9:b3:8f:b3:1b:fb:a0:49: 31:48:01:87:e1:a1:24:00:1b:c7:0b:3a:69:55:df: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CC:4B:E2:F7:30:E6:31:03:6F:20:7D:73:61:E1:CC:25:B5:A0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 168.149.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e1:4c:a7:f6:6b:08:3c:58:22:96:ec:b7:47:45:f9:e0:3a: 10:fc:df:dd:0b:4d:a0:95:9b:4e:28:c7:a6:5c:c6:b0:8b:60: 5e:0a:58:c8:e8:37:7c:a1:a1:2a:a1:e0:a3:f1:8c:a1:ea:73: ab:14:66:2a:07:36:c1:49:ca:70:a0:21:c2:be:cd:39:c4:54: 19:2c:10:88:d8:67:70:fd:9c:0f:5a:20:97:5d:04:78:de:79: 7c:4c:57:80:5c:d4:f4:5d:72:58:f2:43:e9:c6:af:8d:ff:f4: a4:6f:5b:3b:70:02:38:08:0c:92:2d:8e:55:e5:31:5d:b0:59: ef:9a:48:f0:07:28:87:a9:a0:7a:9f:92:18:0c:52:65:52:ed: a3:7e:fb:81:28:de:d4:29:bd:28:a1:32:ad:4e:b4:7c:fe:84: 16:c2:3b:ee:1d:5d:d9:6f:24:92:36:20:8f:e7:ff:4f:32:01: 24:2a:ba:eb:fa:bf:b0:9f:9e:f9:9a:c5:50:43:fc:0a:cc:ee: c6:86:40:92:06:84:37:b2:8b:88:ba:21:c0:92:d9:71:2b:0c: 31:31:11:d8:85:ac:26:03:e3:47:cd:35:01:e3:65:8d:e9:e5: 8d:29:5f:5d:ff:71:fd:cd:40:2e:c8:65:61:bc:33:22:2d:7b: 5d:8d:c1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4Yd7e+Tc2A9SvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTY2OTFhYTktNzI1MC00YWQyLTk3MDYtMjZhMzRhMzFlNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO741iuaxoRw25+zfY9cwQXc1mkyrVRSg+EL MAu7BrvnM1340r2UJAHSJ9UAla4jCBvcHC65gkYUzO28b7xBfjMgcEhty7ZZn5jz IBTG/LPn/6nyrm/bYv/H2ywK3W1S4ZEdEiOPoZfqcmtZQCNqiP0BZAUp2Iu3OQqB Gtu2PfQ8fpsEn5q+vWA3/IvYyPs5FgWt/C2Hnls7XiZzAAN90faJCPRoZjJqBgLm xUATZRw2w4pnOTm7fi1iUYodOvaMXY9WAMo5YSjM/tjajnVlRLlg1XJa50Y+MqG0 tzgCTsVTnzkbOM/z6bOPsxv7oEkxSAGH4aEkABvHCzppVd+r0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnMS+L3MOYxA28gfXNh4cwltaDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYTkyMjllZTctYTE2ZS0z ZDNlLWI2ZGMtMjYxMDdiMTM0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPhTKf2awg8WCKW7LdHRfngOhD8390LTaCVm04ox6ZcxrCLYF4KWMjo N3yhoSqh4KPxjKHqc6sUZioHNsFJynCgIcK+zTnEVBksEIjYZ3D9nA9aIJddBHje eXxMV4Bc1PRdcljyQ+nGr43/9KRvWztwAjgIDJItjlXlMV2wWe+aSPAHKIepoHqf khgMUmVS7aN++4Eo3tQpvSihMq1OtHz+hBbCO+4dXdlvJJI2II/n/08yASQquuv6 v7CfnvmaxVBD/ArM7saGQJIGhDeyi4i6IcCS2XErDDExEdiFrCYD40fNNQHjZY3p 5Y0pX13/cf3NQC7IZWG8MyIte12NweM= -----END CERTIFICATE-----Generated at Thu Aug 7 05:03:56 2025 by rpki-client