$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa File: 8c35e725-cb7a-34fc-b8dd-3626efeea859.roa (raw, json) Hash identifier: caStUhk4A3te2wCBED19ApxNZ9ZS2WFiX28L9hITLpI= Subject key identifier: 32:8E:9A:40:20:61:4A:99:3B:1F:60:82:F1:07:FB:18:3E:95:16:8D Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B153C13B67036F4AB7ABACF80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:13:b6:70:36:f4:ab:7a:ba:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=a4f81c31-13e9-4f59-852f-a0d61057734f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:07:51:d2:da:b9:5b:51:9f:c6:a0:c0:f0: e6:e4:3d:10:d6:f5:ed:19:fc:be:fc:11:23:96:09: 69:e6:da:e3:7e:93:af:c5:e4:b9:af:a9:8e:53:9b: 28:e9:c0:bc:22:56:61:44:e3:3f:c8:9d:46:9a:b2: ba:91:fe:e4:8f:5c:b9:38:9f:19:3e:99:95:fc:5a: 5c:25:5d:d1:fe:e8:a0:15:59:06:37:84:12:e4:63: f6:f4:b4:1f:08:5a:9e:5f:c4:d2:54:93:74:68:66: 49:38:93:86:f1:fa:80:b6:ec:53:76:64:31:67:8f: 02:f5:3c:9c:af:11:05:b2:3c:29:03:8c:1d:a8:ca: 69:74:c8:0b:2f:74:7c:c2:25:87:7a:f8:c1:f5:5f: a6:23:3b:62:a4:ce:63:96:d7:22:6b:08:64:11:70: e2:5a:e0:0d:1c:3d:b9:21:a1:1f:9e:35:ad:68:80: bb:5f:06:ba:e0:ad:59:e8:5e:fa:cb:81:27:06:e0: c4:0d:9d:bf:50:b9:1c:3e:8f:a5:6c:d3:85:21:cb: 46:86:24:31:6c:5c:b1:8c:c7:e2:4a:47:ba:cc:28: 7b:b6:68:91:22:b6:cf:54:4c:b8:80:0e:ca:3c:9b: 2b:0e:b9:2f:f8:21:f3:21:eb:d4:7e:77:64:62:a3: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:9A:40:20:61:4A:99:3B:1F:60:82:F1:07:FB:18:3E:95:16:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1e:f8:d3:4d:c9:12:66:bd:d2:22:da:d4:62:c4:10:1a:62: 5c:bd:bd:ac:e0:9d:29:30:b7:da:5f:d6:e6:4a:ad:92:47:10: e6:36:0f:5f:12:7d:f8:ea:38:ad:32:ac:87:67:01:b6:59:57: 99:aa:d3:7a:59:66:16:ba:d3:eb:5c:56:c3:f9:d0:8b:65:e0: ab:7b:a6:ef:e1:32:bd:31:70:b2:58:79:7c:78:45:d7:60:59: 80:8c:90:cd:11:ae:22:fb:66:a2:48:0f:4f:f2:25:3a:91:94: 28:f4:f6:ef:12:4a:81:35:6b:2e:2b:97:f9:3e:c6:4d:dc:bd: 0a:6f:90:88:99:de:56:df:45:c6:2a:f7:b5:38:28:21:b2:36: d4:cc:f2:26:bf:73:7b:97:21:dc:f4:c1:9a:9c:7d:61:aa:82: 1a:01:c9:ff:76:8f:5a:77:16:bb:dc:81:78:be:db:f8:58:42: 94:2d:ba:c1:b1:67:c5:5b:5c:23:c7:bf:88:a5:16:62:fa:0c: 27:fa:c2:3b:f7:6b:b0:94:f2:45:e3:f0:ff:77:01:1f:ce:a4: 2c:3b:19:77:f2:4b:31:68:55:0a:c6:02:20:6c:34:7a:ef:d1: ce:c4:42:97:2e:4e:36:8c:26:06:51:bd:29:5b:41:78:77:64: 35:fe:10:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBO2cDb0q3q6z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YTRmODFjMzEtMTNlOS00ZjU5LTg1MmYtYTBkNjEwNTc3MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEMHUdLauVtRn8agwPDm5D0Q1vXtGfy+/BEj lglp5trjfpOvxeS5r6mOU5so6cC8IlZhROM/yJ1GmrK6kf7kj1y5OJ8ZPpmV/Fpc JV3R/uigFVkGN4QS5GP29LQfCFqeX8TSVJN0aGZJOJOG8fqAtuxTdmQxZ48C9Tyc rxEFsjwpA4wdqMppdMgLL3R8wiWHevjB9V+mIztipM5jltciawhkEXDiWuANHD25 IaEfnjWtaIC7Xwa64K1Z6F76y4EnBuDEDZ2/ULkcPo+lbNOFIctGhiQxbFyxjMfi Ske6zCh7tmiRIrbPVEy4gA7KPJsrDrkv+CHzIevUfndkYqMTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKOmkAgYUqZOx9ggvEH+xg+lRaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGMzNWU3MjUtY2I3YS0z NGZjLWI4ZGQtMzYyNmVmZWVhODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAe+NNNyRJmvdIi2tRixBAaYly9vazgnSkwt9pf1uZKrZJHEOY2D18S ffjqOK0yrIdnAbZZV5mq03pZZha60+tcVsP50Itl4Kt7pu/hMr0xcLJYeXx4Rddg WYCMkM0RriL7ZqJID0/yJTqRlCj09u8SSoE1ay4rl/k+xk3cvQpvkIiZ3lbfRcYq 97U4KCGyNtTM8ia/c3uXIdz0wZqcfWGqghoByf92j1p3FrvcgXi+2/hYQpQtusGx Z8VbXCPHv4ilFmL6DCf6wjv3a7CU8kXj8P93AR/OpCw7GXfySzFoVQrGAiBsNHrv 0c7EQpcuTjaMJgZRvSlbQXh3ZDX+EB0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:54 2025 by rpki-client