$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa File: 858c308a-431a-38d2-bff9-7bcffc77a16b.roa (raw, json) Hash identifier: zwQq+am/zs6kE5aTN3jxGf23IdN6OrZntgYYsWF2XuU= Subject key identifier: 4F:C9:CF:B1:BC:F0:28:A9:75:AA:93:15:DE:C2:A5:0B:8C:E2:14:8E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B66320A935DC488E900922240 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 2615 IP address blocks: 147.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0a:93:5d:c4:88:e9:00:92:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=ef39ecc7-dd05-467d-8703-a2dd5937360e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:18:fa:49:83:69:23:16:65:49:38:f9:82: ad:e4:54:ab:64:9a:9b:41:51:00:9f:4d:75:7a:2b: 0f:a4:ef:fd:2c:1a:9f:4a:87:04:a8:7a:f8:06:79: 62:4d:75:31:ff:81:bb:ff:71:8c:09:f2:cd:6a:90: 13:ca:4e:79:02:6f:c9:a3:25:d3:3f:f9:52:19:73: cc:f5:1f:dd:5d:21:13:58:ee:9c:8f:c7:73:c8:da: 98:c6:1d:0f:c7:9d:4c:4d:76:3c:a3:72:fc:68:f6: e0:13:87:64:fb:eb:bc:a5:79:97:9b:24:31:63:79: cc:2f:31:ef:c7:53:6f:11:df:ca:48:ae:0e:87:7d: 69:42:60:b9:63:1b:c2:53:23:43:4a:a8:fa:11:87: ee:ef:1d:7c:76:ac:c0:19:18:c0:c0:b1:e3:80:a0: 1f:a7:49:77:d0:42:75:36:ad:8d:00:0d:a4:4c:83: f8:ed:22:94:7f:e6:ca:56:ef:08:aa:d1:ce:89:f6: 9a:52:8e:df:5a:ca:9a:ae:96:b8:30:9b:e8:a3:ab: 45:c8:be:92:87:3d:6b:38:b0:84:e3:53:16:0d:81: 1a:34:ee:df:07:8b:eb:64:9d:4a:35:32:b4:b0:8d: 84:df:85:72:61:42:2b:0f:4e:fd:1e:59:1b:3b:da: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C9:CF:B1:BC:F0:28:A9:75:AA:93:15:DE:C2:A5:0B:8C:E2:14:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c5:09:33:ec:6f:a8:5c:56:0c:c4:b3:23:24:8a:9a:5d:d1: f2:44:aa:d1:57:98:10:d0:2f:85:b4:14:4f:f1:78:84:eb:ce: ae:97:72:41:ed:19:9f:51:68:1f:3f:42:ab:96:a3:e1:65:9d: 45:5b:2c:f3:96:c3:80:6b:e2:97:50:61:03:23:94:5f:8e:24: c9:01:e7:09:d6:fe:9e:b1:e5:64:5b:15:17:9c:7a:3b:bf:77: 09:09:47:f3:71:df:f5:98:ac:d3:f4:29:3e:b1:1c:b6:99:26: 77:93:8b:55:4e:35:e7:c6:57:ef:be:41:30:9a:9b:24:18:fe: 2c:3a:7b:0e:dd:8d:63:29:b2:6f:5b:13:3b:68:32:24:8c:c5: a4:7b:a9:44:2a:62:ec:ac:dc:40:11:3e:2d:e0:f0:cf:26:3b: 43:90:be:fc:93:c8:e9:8a:cb:21:ed:74:a9:e6:fd:b4:0e:eb: 59:8f:e5:41:fb:dc:1b:15:20:02:4d:5d:e6:a9:49:7f:94:e6: c7:ec:35:b5:b4:c7:fb:36:e8:63:cd:6b:a5:47:59:3f:28:65: b9:3a:29:d4:52:32:58:f8:e3:fb:7e:c4:08:df:1f:19:3a:5c: 5c:fb:df:21:e6:56:51:35:33:eb:a1:f4:5b:af:ee:0a:46:62: b1:00:2f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgqTXcSI6QCSIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZWYzOWVjYzctZGQwNS00NjdkLTg3MDMtYTJkZDU5MzczNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z4Y+kmDaSMWZUk4+YKt5FSrZJqbQVEAn011 eisPpO/9LBqfSocEqHr4BnliTXUx/4G7/3GMCfLNapATyk55Am/JoyXTP/lSGXPM 9R/dXSETWO6cj8dzyNqYxh0Px51MTXY8o3L8aPbgE4dk++u8pXmXmyQxY3nMLzHv x1NvEd/KSK4Oh31pQmC5YxvCUyNDSqj6EYfu7x18dqzAGRjAwLHjgKAfp0l30EJ1 Nq2NAA2kTIP47SKUf+bKVu8IqtHOifaaUo7fWsqarpa4MJvoo6tFyL6Shz1rOLCE 41MWDYEaNO7fB4vrZJ1KNTK0sI2E34VyYUIrD079HlkbO9rOjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/Jz7G88CipdaqTFd7CpQuM4hSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODU4YzMwOGEtNDMxYS0z OGQyLWJmZjktN2JjZmZjNzdhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjFCTPsb6hcVgzEsyMkippd0fJEqtFXmBDQL4W0FE/xeITrzq6XckHt GZ9RaB8/QquWo+FlnUVbLPOWw4Br4pdQYQMjlF+OJMkB5wnW/p6x5WRbFReceju/ dwkJR/Nx3/WYrNP0KT6xHLaZJneTi1VONefGV+++QTCamyQY/iw6ew7djWMpsm9b EztoMiSMxaR7qUQqYuys3EARPi3g8M8mO0OQvvyTyOmKyyHtdKnm/bQO61mP5UH7 3BsVIAJNXeapSX+U5sfsNbW0x/s26GPNa6VHWT8oZbk6KdRSMlj44/t+xAjfHxk6 XFz73yHmVlE1M+uh9Fuv7gpGYrEAL7Y= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:08 2025 by rpki-client