
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa
File: 9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json)
Hash identifier: GLyUsbfK7Sjb21zg56ObLiasqBD2dn7UyE45kw7AQb0=
Subject key identifier: F1:8D:A1:D2:F2:5D:7B:8E:A1:AB:2F:2A:B8:44:BD:34:1F:32:42:B1
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584B6E91F82A880D5D0DD6E39E00
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa
Signing time: Mon 06 Oct 2025 13:00:41 +0000
ROA not before: Mon 06 Oct 2025 13:00:41 +0000
ROA not after: Sun 04 Jan 2026 14:00:41 +0000
asID: 2615
IP address blocks: 147.1.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6e:91:f8:2a:88:0d:5d:0d:d6:e3:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Oct 6 13:00:41 2025 GMT
Not After : Jan 4 14:00:41 2026 GMT
Subject: CN=f977cbf2-c5dc-472f-b8d7-e660cd8739e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:bd:0a:44:62:79:96:88:b0:23:33:94:ed:
0a:50:70:87:3b:b9:5b:39:a7:12:0e:de:35:42:f9:
71:db:9d:39:92:92:e5:9f:fd:ee:82:7a:f8:9d:4e:
0d:58:7e:c5:f0:b5:9a:c1:26:7e:9e:d4:86:b0:e1:
56:4b:89:dc:0e:6c:fa:d5:c9:d3:66:47:47:f4:9f:
01:d3:76:15:99:a0:fb:fd:6a:1b:28:c7:92:da:c5:
37:43:84:4b:51:6d:b4:df:d4:ff:40:71:35:5a:79:
bc:4c:49:3c:75:d2:fa:a2:8c:c9:74:7a:14:f7:59:
70:af:c7:8a:b0:ea:68:36:ab:e1:db:9f:cd:73:c3:
c8:75:c5:da:2f:c7:3a:88:c0:72:08:4b:0e:63:b6:
0f:9c:00:fe:21:46:87:b2:d4:2b:a3:50:e7:5e:ef:
16:3b:c7:72:ce:03:5e:83:91:b4:f7:ea:9a:ad:82:
27:7d:7a:43:45:12:2f:dd:a2:86:07:36:aa:a7:76:
4a:0f:86:88:0d:0b:43:d6:80:9e:4d:eb:19:02:4b:
6c:fb:6b:a4:1d:49:75:5c:4e:90:40:a1:a8:9a:4d:
8a:bb:7d:0c:a5:3d:06:a6:75:e7:00:21:dd:27:5b:
06:07:81:b8:b9:00:f4:3c:2b:e1:ac:2a:7a:6c:9d:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:A1:D2:F2:5D:7B:8E:A1:AB:2F:2A:B8:44:BD:34:1F:32:42:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:a1:5c:a8:ea:c2:41:d3:ef:4c:67:6e:90:07:03:4f:5b:eb:
a4:45:03:9b:e0:30:7a:fa:43:d4:dc:c9:0f:85:ac:1f:6a:32:
a0:2b:ef:95:65:71:05:67:4b:07:d1:69:d7:d4:f5:2a:83:43:
4a:b8:7b:46:6c:e2:16:1e:80:4e:45:58:e4:b7:55:46:bd:c1:
a2:4f:a3:a3:bd:5a:55:98:ff:71:74:e3:d3:0a:7a:7b:64:ba:
9c:cc:bc:f6:bb:35:1c:ed:5f:23:e4:2c:86:71:c8:d9:d9:18:
f5:61:0d:1d:63:3b:8a:86:94:df:db:1b:6c:35:7b:d1:f0:96:
c2:9d:27:09:45:53:e4:dd:99:b9:50:b4:51:23:88:01:d5:14:
42:00:0d:e4:6d:36:90:b8:a8:af:b4:c2:9e:d0:7a:f0:6e:7d:
df:e9:d5:d7:b2:a0:74:76:f2:06:1f:13:cc:09:e6:e8:71:16:
92:2b:bf:85:b6:b5:b1:c2:30:4d:15:c4:29:9a:bd:33:6f:c7:
6d:64:0e:87:9e:9a:05:3a:9f:a5:bd:cb:cc:23:f7:f8:26:68:
41:63:94:35:38:c8:3c:9f:fa:e5:10:08:a1:19:10:b6:b0:a5:
ca:82:a3:91:01:2e:79:34:da:fa:62:f6:5e:9c:dd:65:38:a5:
a0:03:9b:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfgqiA1dDdbjngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
Zjk3N2NiZjItYzVkYy00NzJmLWI4ZDctZTY2MGNkODczOWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1i9CkRieZaIsCMzlO0KUHCHO7lbOacSDt41
Qvlx2505kpLln/3ugnr4nU4NWH7F8LWawSZ+ntSGsOFWS4ncDmz61cnTZkdH9J8B
03YVmaD7/WobKMeS2sU3Q4RLUW2039T/QHE1Wnm8TEk8ddL6oozJdHoU91lwr8eK
sOpoNqvh25/Nc8PIdcXaL8c6iMByCEsOY7YPnAD+IUaHstQro1DnXu8WO8dyzgNe
g5G09+qarYInfXpDRRIv3aKGBzaqp3ZKD4aIDQtD1oCeTesZAkts+2ukHUl1XE6Q
QKGomk2Ku30MpT0GpnXnACHdJ1sGB4G4uQD0PCvhrCp6bJ3w8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGNodLyXXuOoasvKrhEvTQfMkKxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOWJhMDhkNzMtYjUwNS0z
ZmE1LWEzNWItMjM1MTljNDg2YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+hXKjqwkHT70xnbpAHA09b66RFA5vgMHr6Q9TcyQ+FrB9qMqAr75Vl
cQVnSwfRadfU9SqDQ0q4e0Zs4hYegE5FWOS3VUa9waJPo6O9WlWY/3F049MKentk
upzMvPa7NRztXyPkLIZxyNnZGPVhDR1jO4qGlN/bG2w1e9HwlsKdJwlFU+TdmblQ
tFEjiAHVFEIADeRtNpC4qK+0wp7QevBufd/p1deyoHR28gYfE8wJ5uhxFpIrv4W2
tbHCME0VxCmavTNvx21kDoeemgU6n6W9y8wj9/gmaEFjlDU4yDyf+uUQCKEZELaw
pcqCo5EBLnk02vpi9l6c3WU4paADm6w=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:37:55 2025 by rpki-client