$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa File: 48c6e8d1-dee5-3898-91e3-14e4dc670580.roa (raw, json) Hash identifier: KMcc5HRZBKzrCu25n9s5vExUEieZEO1ZDFYXclpTs5A= Subject key identifier: F5:75:72:F0:8D:38:FA:66:D4:B5:F5:52:1F:4A:20:AC:10:08:A8:C5 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584BC2BB857A57324BEF4697CA40 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa Signing time: Wed 05 Nov 2025 16:32:21 +0000 ROA not before: Wed 05 Nov 2025 16:32:21 +0000 ROA not after: Tue 03 Feb 2026 16:32:21 +0000 asID: 2615 IP address blocks: 147.1.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:bb:85:7a:57:32:4b:ef:46:97:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Nov 5 16:32:21 2025 GMT Not After : Feb 3 16:32:21 2026 GMT Subject: CN=3457f90b-5062-41d5-ac43-308b24fe739f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:a8:a0:53:f7:21:dc:74:b0:2b:09:e6:d6: 2c:17:11:14:02:28:8d:c5:75:e1:99:af:7c:d0:70: e1:33:0d:3c:83:22:49:60:e3:5a:db:b9:5f:2e:2b: 21:66:fa:98:f7:78:3a:0f:0f:b1:fd:5e:43:fb:26: 9e:e4:28:f3:c3:d1:7e:1a:38:0a:43:44:38:2e:c2: 7c:41:c4:36:3e:c5:9f:c9:90:38:c6:49:00:fe:63: 7b:d2:6d:2b:5e:b9:80:bf:30:45:12:58:43:0a:c7: 11:f3:01:2a:55:ab:3b:ed:d5:ca:fd:33:83:ab:df: a5:41:53:c3:97:5f:ab:89:a9:78:10:5e:07:8c:32: a5:5d:8e:1f:50:7b:bd:2d:2e:b1:a4:70:28:10:de: 18:ac:4a:22:6d:de:fc:09:03:8d:a8:f8:4d:e2:dd: 96:ff:49:9a:87:bb:d8:ed:50:91:de:44:29:0b:d6: 0c:6f:4f:11:85:20:26:16:f0:72:f1:9c:02:f6:49: ac:27:82:c0:b1:9b:91:14:2e:0d:64:93:53:c7:68: 4f:1f:68:8d:1a:39:5b:28:3e:8b:34:4f:b7:f7:1a: f7:41:7f:21:16:05:f4:ce:e2:4b:74:de:17:e9:ee: 26:99:43:49:0a:4d:b6:57:5f:0a:a6:49:01:6e:e8: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:75:72:F0:8D:38:FA:66:D4:B5:F5:52:1F:4A:20:AC:10:08:A8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:62:20:c9:3a:b2:89:65:fa:e7:8b:52:b5:32:2d:fd:7b:ea: 54:60:3e:02:c3:47:5d:18:98:7b:fc:b8:2f:a6:16:b8:8d:9e: 12:a3:c0:3f:ed:43:a0:ea:68:ea:c7:01:3a:d5:1a:87:88:f8: 34:5a:25:1a:dd:37:d7:1e:79:59:4f:f5:d4:d8:f9:03:0f:5f: 46:18:a6:86:b7:2b:8b:f6:9c:bd:49:79:1c:c7:21:6a:eb:8e: af:82:be:65:1e:33:d1:a3:82:41:a1:a3:e4:40:28:1f:df:36: a7:4b:45:cf:31:24:5d:b3:c3:81:16:7c:65:2d:eb:5f:4b:68: ae:5b:67:6f:cb:55:15:78:db:02:cd:3f:f8:5a:bd:a8:eb:b0: 18:68:b7:df:c8:88:cd:1b:67:10:d5:a8:fd:91:01:26:6c:fb: 9c:9f:ba:fc:e7:07:c2:cf:d5:51:94:a3:f9:de:f2:a3:b2:5c: 3c:9c:98:f7:84:82:5f:35:81:63:7e:49:af:ae:3d:a4:09:86: 6b:47:34:e3:36:4e:29:53:81:cd:24:11:5c:62:c9:38:22:e8: 56:6e:f8:01:33:06:30:95:f2:11:8c:a4:9a:b5:53:44:cf:07: 50:50:34:ea:f9:42:88:5b:e0:fe:3d:ee:71:ad:b3:a4:61:f6: da:9a:f3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCu4V6VzJL70aXykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTEwNTE2MzIyMVoXDTI2MDIwMzE2MzIyMVowLzEtMCsGA1UEAxMk MzQ1N2Y5MGItNTA2Mi00MWQ1LWFjNDMtMzA4YjI0ZmU3MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRqooFP3Idx0sCsJ5tYsFxEUAiiNxXXhma98 0HDhMw08gyJJYONa27lfLishZvqY93g6Dw+x/V5D+yae5Cjzw9F+GjgKQ0Q4LsJ8 QcQ2PsWfyZA4xkkA/mN70m0rXrmAvzBFElhDCscR8wEqVas77dXK/TODq9+lQVPD l1+rial4EF4HjDKlXY4fUHu9LS6xpHAoEN4YrEoibd78CQONqPhN4t2W/0mah7vY 7VCR3kQpC9YMb08RhSAmFvBy8ZwC9kmsJ4LAsZuRFC4NZJNTx2hPH2iNGjlbKD6L NE+39xr3QX8hFgX0zuJLdN4X6e4mmUNJCk22V18KpkkBbuiTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV1cvCNOPpm1LX1Uh9KIKwQCKjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDhjNmU4ZDEtZGVlNS0z ODk4LTkxZTMtMTRlNGRjNjcwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5iIMk6soll+ueLUrUyLf176lRgPgLDR10YmHv8uC+mFriNnhKjwD/t Q6DqaOrHATrVGoeI+DRaJRrdN9ceeVlP9dTY+QMPX0YYpoa3K4v2nL1JeRzHIWrr jq+CvmUeM9GjgkGho+RAKB/fNqdLRc8xJF2zw4EWfGUt619LaK5bZ2/LVRV42wLN P/havajrsBhot9/IiM0bZxDVqP2RASZs+5yfuvznB8LP1VGUo/ne8qOyXDycmPeE gl81gWN+Sa+uPaQJhmtHNOM2TilTgc0kEVxiyTgi6FZu+AEzBjCV8hGMpJq1U0TP B1BQNOr5Qohb4P497nGts6Rh9tqa83E= -----END CERTIFICATE-----Generated at Wed Nov 5 19:06:09 2025 by rpki-client