$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json) Hash identifier: +O9VfTFFemeEFs4itC+UJqq1ninTxoe8mhtF2ooJZb8= Subject key identifier: AD:1E:C7:64:A9:9C:95:63:14:FD:FA:52:0E:C1:A7:F4:77:E4:68:E3 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A77808BA63DA5DE53110E4A00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 2615 IP address blocks: 147.1.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8b:a6:3d:a5:de:53:11:0e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=27d993b9-17e7-4a5c-99fd-318da5e757de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:ca:94:d2:79:08:62:4a:d6:1e:8c:5f:f5: 31:d7:c4:50:e8:ba:19:d2:7c:4c:61:73:38:36:d0: 48:3c:14:70:b3:0b:f0:9f:4e:e6:2c:b6:e7:4a:09: 6d:4c:0c:0f:d7:76:cd:e0:9b:1c:4a:b4:10:f3:8f: d1:4b:5e:39:87:e1:b8:bb:75:29:b5:22:2b:f4:0b: 0a:cc:33:66:05:77:b5:4f:0f:93:81:f4:aa:0f:ce: 85:a6:ad:e1:b8:d7:93:c8:86:fa:6c:6f:d9:2d:7a: 83:94:b1:6d:b7:f0:64:39:e9:c7:1c:fb:23:f2:b0: f6:37:9e:86:05:5b:2c:57:2d:50:e0:73:61:7f:8f: b7:28:98:fc:52:bb:54:a7:f8:3b:86:c9:f9:b7:ab: 0c:5f:2d:6a:f5:9a:0a:66:06:f8:2f:fb:22:97:f6: 63:23:e4:91:02:b0:b4:d4:94:b9:b2:7a:40:cd:e4: 13:a4:53:cb:b2:48:5b:21:35:2e:f0:33:df:6e:7d: 32:83:74:5a:c9:5c:04:50:47:88:d1:21:8b:22:e5: 08:02:98:a8:b9:54:4a:df:9d:45:c4:83:78:2f:21: 10:f1:23:5a:12:3c:9d:7a:5f:fb:7f:e7:a6:52:56: 43:18:32:9e:99:35:56:46:8e:11:fd:f2:49:b6:7f: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:C7:64:A9:9C:95:63:14:FD:FA:52:0E:C1:A7:F4:77:E4:68:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:52:ad:7e:34:8f:03:7d:5f:8f:c8:1b:99:97:1c:bc:3a:f2: 9e:a5:16:ac:62:5d:85:cf:e7:b1:61:56:fe:26:f7:29:c3:20: 91:59:97:ae:c1:cf:32:27:20:0e:24:1b:41:cc:67:db:53:cd: a0:32:e5:87:fd:3f:02:77:0e:64:93:0f:63:e7:a3:77:01:b1: 34:aa:5a:59:b7:12:1c:b6:c9:36:71:0a:ef:57:df:0d:40:40: af:43:55:8e:47:cd:08:a9:e6:c1:bb:85:ea:bc:de:82:5b:59: f4:60:99:98:07:89:7e:95:8d:46:f3:e4:78:21:7f:5c:cb:0d: ff:a4:28:1f:5f:bf:4f:d8:01:bd:6b:af:ae:8d:d5:6d:9d:7c: a9:75:45:5c:f2:5e:88:fc:54:99:e1:c9:6f:13:b9:ac:f5:02: 25:60:eb:24:9d:71:bd:33:54:a6:05:0f:ff:47:ef:cd:15:71: dd:0f:e0:cc:09:b0:da:fa:e6:e2:00:6a:04:8c:a0:d9:50:3b: 19:fc:12:50:af:4e:d4:25:d7:4e:35:31:2c:c9:4c:8e:b4:21: 8b:89:51:ad:2f:5d:98:d1:e8:cd:80:a3:c2:e6:2d:c5:98:7b: 92:88:80:bb:14:14:83:cf:a7:40:1c:d9:6b:3f:04:c3:d0:77: 91:57:a1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIumPaXeUxEOSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MjdkOTkzYjktMTdlNy00YTVjLTk5ZmQtMzE4ZGE1ZTc1N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7KlNJ5CGJK1h6MX/Ux18RQ6LoZ0nxMYXM4 NtBIPBRwswvwn07mLLbnSgltTAwP13bN4JscSrQQ84/RS145h+G4u3UptSIr9AsK zDNmBXe1Tw+TgfSqD86Fpq3huNeTyIb6bG/ZLXqDlLFtt/BkOenHHPsj8rD2N56G BVssVy1Q4HNhf4+3KJj8UrtUp/g7hsn5t6sMXy1q9ZoKZgb4L/sil/ZjI+SRArC0 1JS5snpAzeQTpFPLskhbITUu8DPfbn0yg3RayVwEUEeI0SGLIuUIApiouVRK351F xIN4LyEQ8SNaEjydel/7f+emUlZDGDKemTVWRo4R/fJJtn9TqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0ex2SpnJVjFP36Ug7Bp/R35GjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhSrX40jwN9X4/IG5mXHLw68p6lFqxiXYXP57FhVv4m9ynDIJFZl67B zzInIA4kG0HMZ9tTzaAy5Yf9PwJ3DmSTD2Pno3cBsTSqWlm3Ehy2yTZxCu9X3w1A QK9DVY5HzQip5sG7heq83oJbWfRgmZgHiX6VjUbz5Hghf1zLDf+kKB9fv0/YAb1r r66N1W2dfKl1RVzyXoj8VJnhyW8Tuaz1AiVg6ySdcb0zVKYFD/9H780Vcd0P4MwJ sNr65uIAagSMoNlQOxn8ElCvTtQl1041MSzJTI60IYuJUa0vXZjR6M2Ao8LmLcWY e5KIgLsUFIPPp0Ac2Ws/BMPQd5FXoWE= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:06 2025 by rpki-client