
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa
File: 596fd63d-5bef-3d40-8843-dbfa4121de60.roa (raw, json)
Hash identifier: 2KvorrAPNmEZXPjmwoN4TWbcQ3Znx38YAhL0eRlUQQg=
Subject key identifier: 57:D7:F0:84:64:69:51:5C:1B:56:AB:FE:0E:53:B2:56:42:03:3B:3D
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584B6E91FF1D258F437301AD4EC0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa
Signing time: Mon 06 Oct 2025 13:00:41 +0000
ROA not before: Mon 06 Oct 2025 13:00:41 +0000
ROA not after: Sun 04 Jan 2026 14:00:41 +0000
asID: 2615
IP address blocks: 147.1.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6e:91:ff:1d:25:8f:43:73:01:ad:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Oct 6 13:00:41 2025 GMT
Not After : Jan 4 14:00:41 2026 GMT
Subject: CN=e3ea5b62-14c7-4cee-bce5-fc157f187a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:92:52:83:ad:09:27:89:11:bc:83:6b:72:
35:74:38:fc:7f:0a:97:56:43:e4:65:7b:3c:79:26:
86:10:c0:a4:01:11:3d:25:09:b8:5b:fd:e0:0f:18:
5f:f1:92:49:c7:7f:ad:77:f9:87:41:90:2d:6a:8c:
73:e5:00:e9:5f:c9:2e:7a:f1:b8:d2:b1:1d:59:4f:
a1:99:04:be:63:2e:6e:94:a9:91:58:4d:80:09:1c:
dd:ea:0c:31:69:45:14:50:9a:94:21:af:7b:9b:f4:
b8:9b:d8:4b:2d:0e:20:aa:d7:b6:d3:08:b1:1d:a5:
69:07:a3:26:a5:0c:13:06:0d:ec:79:4d:5f:16:1a:
59:ee:cc:a6:d1:da:95:cb:e0:fa:7e:a9:20:50:8d:
e1:37:ee:99:07:f4:ae:40:64:b6:fd:4c:37:95:06:
27:2e:90:20:89:80:f9:d7:5d:a3:7e:e5:bc:a1:51:
b2:de:76:94:ab:f3:ea:c0:d9:c0:bb:c9:5b:f0:ec:
4a:38:c3:db:fc:b8:73:c2:e3:39:04:5f:a0:de:11:
c0:be:e5:e7:70:7a:dc:60:24:07:c8:13:0a:30:9d:
78:d1:21:1e:ba:db:47:89:52:10:00:a2:05:45:45:
b2:69:e5:ea:56:fa:32:17:d1:7b:2c:ee:75:9e:d4:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D7:F0:84:64:69:51:5C:1B:56:AB:FE:0E:53:B2:56:42:03:3B:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/596fd63d-5bef-3d40-8843-dbfa4121de60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:4a:f5:fa:d6:87:9b:b6:3f:b6:db:40:bc:41:02:f2:24:b5:
37:55:d3:95:2f:77:f4:6f:50:39:48:27:e6:d9:c4:06:d4:9e:
99:c5:57:a9:58:01:c0:29:4b:6b:ba:37:56:11:77:3c:f1:c4:
d4:dd:94:f3:8c:7c:91:1c:ab:92:e1:15:bb:41:96:28:7a:fb:
06:9e:ad:31:07:94:24:06:ad:4f:3b:b1:66:30:df:89:95:13:
85:06:cd:9d:62:c9:91:2d:4d:d3:65:0e:1a:54:a9:fa:0b:bc:
40:c2:a7:5c:61:51:38:c5:07:d8:d0:9b:e9:5b:fb:6f:90:23:
0c:83:e0:ed:56:c9:f1:83:79:83:7a:71:78:ec:65:02:20:08:
09:65:81:a5:17:64:a4:bf:4b:f4:5e:dd:14:52:13:57:ea:e8:
cf:48:59:43:9c:25:ac:86:31:85:d1:9e:06:81:e0:53:a0:b7:
e6:7b:e3:08:b0:38:df:24:f5:0d:0e:2e:b3:39:a4:c0:49:f6:
9c:b4:3e:5c:18:78:f9:06:67:fa:38:2e:a1:4d:2d:40:51:5a:
15:52:b3:13:ae:27:5c:2d:07:3d:bf:a4:2e:9d:ca:7a:b9:9a:
75:fa:91:f1:99:18:99:81:01:ad:60:91:31:de:52:9c:4a:15:
a1:79:4b:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukf8dJY9DcwGtTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTNlYTViNjItMTRjNy00Y2VlLWJjZTUtZmMxNTdmMTg3YThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYWSUoOtCSeJEbyDa3I1dDj8fwqXVkPkZXs8
eSaGEMCkARE9JQm4W/3gDxhf8ZJJx3+td/mHQZAtaoxz5QDpX8kuevG40rEdWU+h
mQS+Yy5ulKmRWE2ACRzd6gwxaUUUUJqUIa97m/S4m9hLLQ4gqte20wixHaVpB6Mm
pQwTBg3seU1fFhpZ7sym0dqVy+D6fqkgUI3hN+6ZB/SuQGS2/Uw3lQYnLpAgiYD5
112jfuW8oVGy3naUq/PqwNnAu8lb8OxKOMPb/LhzwuM5BF+g3hHAvuXncHrcYCQH
yBMKMJ140SEeuttHiVIQAKIFRUWyaeXqVvoyF9F7LO51ntQvnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfX8IRkaVFcG1ar/g5TslZCAzs9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTk2ZmQ2M2QtNWJlZi0z
ZDQwLTg4NDMtZGJmYTQxMjFkZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9K9frWh5u2P7bbQLxBAvIktTdV05Uvd/RvUDlIJ+bZxAbUnpnFV6lY
AcApS2u6N1YRdzzxxNTdlPOMfJEcq5LhFbtBlih6+waerTEHlCQGrU87sWYw34mV
E4UGzZ1iyZEtTdNlDhpUqfoLvEDCp1xhUTjFB9jQm+lb+2+QIwyD4O1WyfGDeYN6
cXjsZQIgCAllgaUXZKS/S/Re3RRSE1fq6M9IWUOcJayGMYXRngaB4FOgt+Z74wiw
ON8k9Q0OLrM5pMBJ9py0PlwYePkGZ/o4LqFNLUBRWhVSsxOuJ1wtBz2/pC6dynq5
mnX6kfGZGJmBAa1gkTHeUpxKFaF5SyM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:37:21 2025 by rpki-client