$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json) Hash identifier: nSetfEbTFOW0IkF+swJUd0tDXrJCd5pbGyFGjln5EGg= Subject key identifier: F9:C4:D1:C3:DB:8F:D7:AF:BE:27:C3:0E:D6:8B:00:11:7D:D2:7F:BC Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B8D4775D149DA682139DA9200 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 2615 IP address blocks: 147.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:75:d1:49:da:68:21:39:da:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=1faab590-3e5d-496e-957a-0859a499b2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:85:cb:f5:f3:46:d4:4c:7f:f0:aa:53:9e: d2:49:3f:1c:ee:80:7a:31:da:34:d9:c9:0b:23:69: 79:a5:fa:ae:ed:35:c8:69:13:41:51:f8:7c:db:64: 0a:f9:1a:d5:fc:b7:d6:0f:d9:dc:d9:2c:84:60:8b: 10:a8:c0:98:53:d7:e6:cb:3e:08:a1:fe:c6:8c:da: 90:2d:c9:44:14:50:14:9a:ef:74:70:12:c3:31:ee: 39:e3:b7:64:04:9f:7b:e7:02:c8:a4:aa:40:54:f4: 1b:79:c5:69:45:b5:8e:55:6a:75:02:72:14:95:58: 59:4b:df:e4:9e:91:48:35:ae:1d:c9:08:d4:0e:46: 53:19:4a:f6:64:6a:60:45:e3:d3:70:b6:a7:90:3a: e1:b0:eb:af:b4:b6:75:ba:02:16:ce:d4:a5:53:c8: c7:2a:c5:0a:01:db:16:d1:5b:b8:4f:98:76:92:fd: c7:ed:f8:46:92:23:4a:c9:fd:63:bf:f1:6e:c3:74: c6:c5:9b:22:dc:b5:b2:9e:39:86:28:e7:50:49:6d: 55:4b:43:09:ed:17:c3:16:72:7a:c3:6a:6b:f7:d8: b0:99:3b:8e:38:3c:70:b1:7c:dd:9a:20:82:4c:5f: 40:54:a0:13:61:62:e0:d0:25:65:75:d8:30:d4:37: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C4:D1:C3:DB:8F:D7:AF:BE:27:C3:0E:D6:8B:00:11:7D:D2:7F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f1:d5:cf:83:2d:b6:f4:81:61:34:80:47:bb:f3:4a:37:ee: 03:3a:f5:62:ac:d9:f8:89:0a:ad:7e:0d:1b:2a:e8:4e:b6:73: e6:cc:dd:20:4a:97:1f:b9:19:31:d8:8f:95:1b:de:89:1b:68: 59:e8:36:03:35:14:9b:df:a1:40:b1:09:08:a6:3c:c0:ce:1a: cb:db:12:4e:bd:cf:0a:12:b6:14:3c:1f:47:bd:78:89:0c:06: 96:5a:29:8d:a2:4b:50:de:3e:1c:0f:1b:b9:3f:4a:09:bd:70: 7b:7f:09:e4:c2:d8:07:98:24:09:c5:0d:98:76:a4:5f:3d:5c: 4e:07:41:f3:0c:80:0c:8c:8c:3d:6a:c4:65:03:38:fd:94:e1: 36:48:74:f3:ac:d3:40:8e:fe:53:71:bf:86:3f:45:59:c0:43: 9f:85:eb:49:14:ff:29:56:b7:e2:8d:dd:25:78:67:fc:e7:03: 2d:5a:37:27:50:be:67:87:a6:23:51:92:1a:34:53:24:37:1b: 33:cf:78:9f:d6:f3:79:15:c6:32:79:c0:3c:7e:84:25:ae:9b: f3:4e:39:cb:ee:6f:06:27:d2:6f:e3:45:ed:d2:b0:8d:14:b6: 3f:e8:5c:a0:71:2a:22:0a:db:f3:a0:89:83:38:4c:95:60:6a: 4a:a1:62:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3XRSdpoITnakgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk MWZhYWI1OTAtM2U1ZC00OTZlLTk1N2EtMDg1OWE0OTliMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCqFy/XzRtRMf/CqU57SST8c7oB6Mdo02ckL I2l5pfqu7TXIaRNBUfh822QK+RrV/LfWD9nc2SyEYIsQqMCYU9fmyz4Iof7GjNqQ LclEFFAUmu90cBLDMe4547dkBJ975wLIpKpAVPQbecVpRbWOVWp1AnIUlVhZS9/k npFINa4dyQjUDkZTGUr2ZGpgRePTcLankDrhsOuvtLZ1ugIWztSlU8jHKsUKAdsW 0Vu4T5h2kv3H7fhGkiNKyf1jv/Fuw3TGxZsi3LWynjmGKOdQSW1VS0MJ7RfDFnJ6 w2pr99iwmTuOODxwsXzdmiCCTF9AVKATYWLg0CVlddgw1DeHRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnE0cPbj9evvifDDtaLABF90n+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmI3MGNkMWItNjgxZC0z MzQxLTgyNzctY2UyMWExODAxMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvx1c+DLbb0gWE0gEe780o37gM69WKs2fiJCq1+DRsq6E62c+bM3SBK lx+5GTHYj5Ub3okbaFnoNgM1FJvfoUCxCQimPMDOGsvbEk69zwoSthQ8H0e9eIkM BpZaKY2iS1DePhwPG7k/Sgm9cHt/CeTC2AeYJAnFDZh2pF89XE4HQfMMgAyMjD1q xGUDOP2U4TZIdPOs00CO/lNxv4Y/RVnAQ5+F60kU/ylWt+KN3SV4Z/znAy1aNydQ vmeHpiNRkho0UyQ3GzPPeJ/W83kVxjJ5wDx+hCWum/NOOcvubwYn0m/jRe3SsI0U tj/oXKBxKiIK2/OgiYM4TJVgakqhYgI= -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:01 2025 by rpki-client