$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: 2Q7erb1LhLt0yY+V78sECMJ3lSN9v4s8IfmvSDryd7k= Subject key identifier: 46:4B:57:E0:C2:47:75:FB:3E:F2:C2:4B:84:96:4D:9A:50:9F:24:59 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A8DD5F90CC93FFCFF7E0EFE00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f9:0c:c9:3f:fc:ff:7e:0e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=37c4068c-aad4-4e4b-b4f1-8a708b9ef91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:f6:2f:2d:f5:53:2c:8f:0f:b2:e8:48:96: d5:dc:63:4f:32:48:f0:9b:37:41:a0:08:b2:9a:9c: a0:48:24:eb:b7:06:3d:15:62:df:c0:99:05:a9:47: f0:9e:2e:da:ca:ec:c0:19:1a:69:85:4f:84:b9:0e: a3:22:ef:80:49:06:7e:e5:2e:21:45:48:38:d9:f5: 4d:35:9b:ba:1f:38:94:8e:22:bd:81:65:1e:49:24: 61:de:4b:c9:19:be:8f:69:bd:4b:6a:c0:ca:b4:b5: f9:b9:03:28:b8:d1:c5:b3:09:d6:a3:91:01:eb:7f: a5:a8:4c:43:bc:bd:6c:8c:1a:5d:dc:6d:58:1f:fd: 95:a7:18:3e:a6:d3:50:1f:2c:a0:81:77:49:83:bf: d2:54:e0:6e:f8:56:7a:3c:87:fc:01:41:20:99:79: 29:da:51:ff:16:f8:41:5e:a2:6d:09:87:6a:e3:18: 50:d8:01:ab:13:25:06:fc:10:47:73:6a:76:ca:b9: c9:58:0b:b3:97:9e:04:ee:74:c1:c6:cd:ca:91:8f: f7:24:cf:4a:8f:8f:1b:fb:9b:e7:10:b6:f3:eb:40: 9e:ba:5f:c3:80:cd:08:f6:c1:1e:54:e8:84:47:2e: 05:fd:c9:e8:e2:a4:7f:46:74:46:47:2c:72:55:d8: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4B:57:E0:C2:47:75:FB:3E:F2:C2:4B:84:96:4D:9A:50:9F:24:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:13:a2:85:fd:07:b2:43:40:ed:b7:20:26:18:d2:f9:e8:18: df:96:42:a5:46:d1:2e:d8:ab:0b:ec:07:7c:db:ad:1e:0b:8f: 8d:7f:03:42:12:5f:fa:2f:9f:98:91:66:7f:c3:0d:e8:99:03: 95:9f:78:17:8f:56:72:56:70:0c:64:17:e6:80:55:91:7b:b6: 7e:76:54:c4:6c:db:64:66:f6:54:32:07:84:94:78:38:a4:f8: 91:a9:6b:01:08:79:96:0f:56:90:39:bf:80:f2:c8:11:be:95: 63:90:1d:35:92:bb:02:9e:e6:30:ae:04:77:7e:74:91:c4:3d: ec:56:5b:89:c5:65:d1:1f:02:36:a3:0c:8d:d6:2c:d1:db:05: e1:6f:92:24:2d:ce:0e:3b:e6:0d:b3:5e:8d:28:25:4d:78:79: 2d:3f:b1:86:36:07:d2:58:b2:b2:71:57:67:ce:4e:2f:e4:06: 79:d4:9a:46:1d:38:d4:09:5b:f7:49:5f:6f:d0:4f:49:20:f5: 6f:a7:4b:60:1b:b8:5c:4f:8c:22:1c:7d:01:5a:e1:cc:ec:f0: 36:00:fe:bc:9b:3c:13:46:1f:46:99:9f:ff:ff:93:6d:f7:3e: da:97:3c:77:18:4a:3e:ee:71:5e:cc:41:4c:ef:04:9c:7a:e3: ef:24:75:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fkMyT/8/34O/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk MzdjNDA2OGMtYWFkNC00ZTRiLWI0ZjEtOGE3MDhiOWVmOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgb2Ly31UyyPD7LoSJbV3GNPMkjwmzdBoAiy mpygSCTrtwY9FWLfwJkFqUfwni7ayuzAGRpphU+EuQ6jIu+ASQZ+5S4hRUg42fVN NZu6HziUjiK9gWUeSSRh3kvJGb6Pab1LasDKtLX5uQMouNHFswnWo5EB63+lqExD vL1sjBpd3G1YH/2Vpxg+ptNQHyyggXdJg7/SVOBu+FZ6PIf8AUEgmXkp2lH/FvhB XqJtCYdq4xhQ2AGrEyUG/BBHc2p2yrnJWAuzl54E7nTBxs3KkY/3JM9Kj48b+5vn ELbz60Ceul/DgM0I9sEeVOiERy4F/cno4qR/RnRGRyxyVdjJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZLV+DCR3X7PvLCS4SWTZpQnyRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQTooX9B7JDQO23ICYY0vnoGN+WQqVG0S7YqwvsB3zbrR4Lj41/A0IS X/ovn5iRZn/DDeiZA5WfeBePVnJWcAxkF+aAVZF7tn52VMRs22Rm9lQyB4SUeDik +JGpawEIeZYPVpA5v4DyyBG+lWOQHTWSuwKe5jCuBHd+dJHEPexWW4nFZdEfAjaj DI3WLNHbBeFvkiQtzg475g2zXo0oJU14eS0/sYY2B9JYsrJxV2fOTi/kBnnUmkYd ONQJW/dJX2/QT0kg9W+nS2AbuFxPjCIcfQFa4czs8DYA/rybPBNGH0aZn///k233 PtqXPHcYSj7ucV7MQUzvBJx64+8kdXQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:18 2025 by rpki-client