$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa File: 596fd63d-5bef-3d40-8843-dbfa4121de60.roa (raw, json) Hash identifier: BVakODTozyI7Vo/c6//n8bMDmyR3DkOfRThvixKMf+Y= Subject key identifier: 51:BC:E6:9E:B3:54:D7:1D:7A:B3:07:63:67:8D:9F:20:E5:40:61:54 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A8DD60105CF6AD1E2D6D56980 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 2615 IP address blocks: 147.1.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d6:01:05:cf:6a:d1:e2:d6:d5:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=7b81dca6-16c6-4c89-b75b-e52379716fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b1:f8:f9:7d:0b:1c:e3:89:90:7b:19:94:3a: 8e:bc:2b:a8:75:71:3e:c3:26:10:1c:f5:d6:5d:5e: 08:69:9b:48:77:be:a4:64:7a:f8:08:32:21:b3:4e: 7f:34:4c:d8:8c:42:ba:1c:c7:0a:f1:4e:36:96:84: 13:d2:9e:e6:9f:40:d2:82:58:5f:a3:f3:7f:45:74: cc:68:39:e6:66:5c:00:c4:a6:95:3c:9a:aa:3b:d3: cd:0d:9a:28:90:02:c3:af:60:72:9f:38:15:eb:98: 5b:e4:84:bd:fb:3f:86:52:51:ce:ce:90:8c:08:fd: ed:6b:6f:96:83:a9:92:07:00:d7:bc:c0:e7:29:1b: 6f:84:c2:54:5e:19:f6:b5:25:b1:89:98:62:18:ed: 5b:f5:d0:28:3a:16:e1:02:d4:d5:4a:68:a7:60:b9: b9:17:7b:f4:a9:de:4f:0d:d6:77:07:39:cf:8c:dc: 5f:1d:55:f0:8b:da:9c:f9:f0:dd:c8:32:37:73:13: 16:36:fa:47:a3:80:50:3b:2c:50:b7:8d:39:44:a7: 4a:a6:00:4b:5e:ee:a5:4e:c8:8e:91:f9:d8:4a:ee: 76:de:b7:e3:7d:5b:e8:7b:ad:be:0c:88:97:d8:8c: 02:43:1f:95:dc:81:ea:d8:a9:02:ce:1a:58:7b:ac: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:E6:9E:B3:54:D7:1D:7A:B3:07:63:67:8D:9F:20:E5:40:61:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8f:2c:dd:73:b5:fa:a3:d6:4b:cb:e9:96:c3:63:95:25:ee: 41:a8:a7:00:4c:30:39:25:d1:9a:0b:56:d8:bb:64:5a:09:5d: 72:ce:81:22:9f:13:a0:17:d0:41:ac:aa:fa:b7:b2:5c:82:fa: 34:42:0f:4a:1f:f2:e7:2a:f6:9b:a0:d1:b7:dd:3b:80:fa:26: 53:33:24:44:7a:dd:50:a2:bb:b4:24:5a:d2:c5:17:05:88:a8: 1f:fe:6c:bf:66:6e:a9:8f:a7:37:70:d9:5f:63:81:8f:29:5f: 80:f0:e1:71:f6:b3:2f:a2:62:8d:b4:ef:c1:4a:50:9c:fb:b4: 9a:5d:9c:71:4f:7c:de:77:d6:a6:77:a9:53:db:90:44:35:71: 97:e8:28:98:2e:11:70:ec:2e:a2:93:ef:34:e2:da:c9:b6:db: b0:92:96:90:a6:61:80:75:1f:dc:72:cf:73:d0:09:ff:01:06: 06:ad:70:f2:9a:58:dc:b9:bb:9d:3b:c4:f4:f1:1e:51:4e:47: dc:5e:06:c7:df:2d:81:3e:0a:48:e9:7b:0d:ce:ef:03:09:6c: f3:94:1b:3d:79:9c:28:dd:d7:da:c4:3e:50:65:37:64:fc:79: 9a:d9:19:6a:52:24:a9:2d:3e:f4:2c:07:34:78:5a:3a:9d:68: 43:16:42:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1gEFz2rR4tbVaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk N2I4MWRjYTYtMTZjNi00Yzg5LWI3NWItZTUyMzc5NzE2ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bH4+X0LHOOJkHsZlDqOvCuodXE+wyYQHPXW XV4IaZtId76kZHr4CDIhs05/NEzYjEK6HMcK8U42loQT0p7mn0DSglhfo/N/RXTM aDnmZlwAxKaVPJqqO9PNDZookALDr2BynzgV65hb5IS9+z+GUlHOzpCMCP3ta2+W g6mSBwDXvMDnKRtvhMJUXhn2tSWxiZhiGO1b9dAoOhbhAtTVSminYLm5F3v0qd5P DdZ3BznPjNxfHVXwi9qc+fDdyDI3cxMWNvpHo4BQOyxQt405RKdKpgBLXu6lTsiO kfnYSu523rfjfVvoe62+DIiX2IwCQx+V3IHq2KkCzhpYe6w/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG85p6zVNcderMHY2eNnyDlQGFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTk2ZmQ2M2QtNWJlZi0z ZDQwLTg4NDMtZGJmYTQxMjFkZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACePLN1ztfqj1kvL6ZbDY5Ul7kGopwBMMDkl0ZoLVti7ZFoJXXLOgSKf E6AX0EGsqvq3slyC+jRCD0of8ucq9pug0bfdO4D6JlMzJER63VCiu7QkWtLFFwWI qB/+bL9mbqmPpzdw2V9jgY8pX4Dw4XH2sy+iYo2078FKUJz7tJpdnHFPfN531qZ3 qVPbkEQ1cZfoKJguEXDsLqKT7zTi2sm227CSlpCmYYB1H9xyz3PQCf8BBgatcPKa WNy5u507xPTxHlFOR9xeBsffLYE+Ckjpew3O7wMJbPOUGz15nCjd19rEPlBlN2T8 eZrZGWpSJKktPvQsBzR4WjqdaEMWQj8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:01 2025 by rpki-client