$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa File: 0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa (raw, json) Hash identifier: O1ANOLjdJJrEJXmJKsZURjOnbiRGgS5EcEKWY0iFH74= Subject key identifier: 12:6C:29:EF:A4:90:48:BA:A5:78:41:0E:92:0C:BB:90:1C:F7:F6:C6 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584BC2BE29265455E1E6866F5BC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa Signing time: Wed 05 Nov 2025 16:37:40 +0000 ROA not before: Wed 05 Nov 2025 16:37:40 +0000 ROA not after: Tue 03 Feb 2026 16:37:40 +0000 asID: 2615 IP address blocks: 147.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:be:29:26:54:55:e1:e6:86:6f:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Nov 5 16:37:40 2025 GMT Not After : Feb 3 16:37:40 2026 GMT Subject: CN=e3c9e29c-c2e2-43ed-a17f-402a4481f6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:4c:5b:0f:61:f5:0d:15:5b:0b:45:2b:32: c9:64:92:4b:08:a8:cf:ee:be:bd:4d:30:23:7f:ba: e3:5e:f0:8e:55:e9:0f:2f:d8:6d:2a:30:8a:54:53: da:4c:9d:3f:df:29:ac:80:30:5d:5e:6b:b3:76:dc: eb:01:d4:d6:96:08:e2:bb:24:f6:2d:e3:d9:ba:04: 10:83:a2:b2:9a:0c:9d:26:36:df:a4:75:3f:10:80: 57:db:8a:0d:64:8e:fb:24:9e:18:73:24:b7:df:62: 3a:70:d3:a4:fb:45:35:ec:d1:83:6b:7c:4f:22:af: 36:0f:c2:4d:22:19:16:3b:8f:fb:f0:08:83:d4:ee: 56:8e:86:bc:18:bd:e0:7d:ca:ee:bb:ab:8a:f5:b3: 21:9a:e1:74:7a:56:fa:91:93:ed:3a:68:e0:8e:47: 5b:90:43:2e:c6:43:20:74:08:56:c3:dd:de:eb:0f: a3:c9:53:60:35:ce:22:a9:3a:f4:1e:12:3e:40:84: 8d:9c:4b:14:14:d1:ac:25:b7:79:6c:50:4c:be:e5: a0:a7:8a:ac:41:8c:c9:95:ff:27:a2:17:cb:f3:74: 31:5b:08:e4:6d:cf:9c:c9:17:c6:49:c7:7a:3f:89: 41:89:94:02:4d:93:05:2f:f1:62:d5:71:75:53:b3: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:29:EF:A4:90:48:BA:A5:78:41:0E:92:0C:BB:90:1C:F7:F6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:17:2a:d7:31:6d:11:df:96:4f:d6:dc:e4:94:5a:f1:ad: e0:f4:6c:46:61:2b:24:de:d4:50:0d:54:a5:38:fb:b0:f5:5f: 86:b7:ec:45:a1:27:0b:08:ec:50:02:66:2c:d5:4c:a1:38:e4: 7f:c0:d8:da:77:52:25:17:34:63:99:e5:af:10:c1:5b:3c:7d: ce:45:22:29:3d:7d:60:d7:cb:8d:1e:59:0c:2c:1d:66:88:55: df:3b:80:e4:33:82:47:0a:06:4d:c3:44:83:91:b4:53:2d:1e: 01:c2:1d:bb:74:ad:23:2a:a3:99:77:01:89:30:ec:83:fb:89: a6:84:dc:5e:eb:e8:71:a1:d2:b8:f8:27:92:6e:2f:75:2b:4a: 80:aa:e6:00:bb:11:35:e0:12:13:be:42:df:0b:4d:3e:ff:bd: 79:43:0c:ef:f8:cc:5f:26:8d:b1:97:90:a3:63:6a:37:16:2f: 15:8d:5a:59:0c:b4:55:3a:bc:53:59:52:af:9f:b8:1f:0a:e2: 09:d5:75:5b:6b:c5:4b:61:87:de:d8:df:b5:bf:61:33:9f:dd: 5f:5c:3e:c7:d0:13:89:3c:d1:9d:8e:4a:bc:a6:d7:7e:24:f2: 55:94:3e:26:66:14:30:a7:27:b5:6e:b3:c5:52:4c:99:63:86: 87:21:29:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCvikmVFXh5oZvW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTEwNTE2Mzc0MFoXDTI2MDIwMzE2Mzc0MFowLzEtMCsGA1UEAxMk ZTNjOWUyOWMtYzJlMi00M2VkLWExN2YtNDAyYTQ0ODFmNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5NMWw9h9Q0VWwtFKzLJZJJLCKjP7r69TTAj f7rjXvCOVekPL9htKjCKVFPaTJ0/3ymsgDBdXmuzdtzrAdTWlgjiuyT2LePZugQQ g6KymgydJjbfpHU/EIBX24oNZI77JJ4YcyS332I6cNOk+0U17NGDa3xPIq82D8JN IhkWO4/78AiD1O5Wjoa8GL3gfcruu6uK9bMhmuF0elb6kZPtOmjgjkdbkEMuxkMg dAhWw93e6w+jyVNgNc4iqTr0HhI+QISNnEsUFNGsJbd5bFBMvuWgp4qsQYzJlf8n ohfL83QxWwjkbc+cyRfGScd6P4lBiZQCTZMFL/Fi1XF1U7OCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJsKe+kkEi6pXhBDpIMu5Ac9/bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMGJlYTNkNGYtZmU3Zi0z ZmI1LTljYTQtY2MwOTgyYTk4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP9FyrXMW0R35ZP1tzklFrxreD0bEZhKyTe1FANVKU4+7D1X4a37EWh JwsI7FACZizVTKE45H/A2Np3UiUXNGOZ5a8QwVs8fc5FIik9fWDXy40eWQwsHWaI Vd87gOQzgkcKBk3DRIORtFMtHgHCHbt0rSMqo5l3AYkw7IP7iaaE3F7r6HGh0rj4 J5JuL3UrSoCq5gC7ETXgEhO+Qt8LTT7/vXlDDO/4zF8mjbGXkKNjajcWLxWNWlkM tFU6vFNZUq+fuB8K4gnVdVtrxUthh97Y37W/YTOf3V9cPsfQE4k80Z2OSrym134k 8lWUPiZmFDCnJ7Vus8VSTJljhochKeM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:06:11 2025 by rpki-client