$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa File: b354ebbc-2421-3278-ae3a-2710d363b5a5.roa (raw, json) Hash identifier: z4hceQsFd9/kyI7eK42QDBGiMPKfSgB9AvOvnDPhduk= Subject key identifier: 5E:78:9A:89:CF:B9:F5:95:09:E7:00:BD:EA:7B:F9:42:F4:57:08:D6 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A82AB48DF2E44237201E30B20 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 2615 IP address blocks: 147.1.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:48:df:2e:44:23:72:01:e3:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=d231cf84-549a-4920-b104-3996c7d05009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:5b:9f:8e:a8:3a:e6:66:62:30:e4:9b:48: f7:5b:87:e1:86:60:df:9d:f9:86:b1:3e:28:7b:3e: aa:ee:00:c4:11:a9:6c:f5:8a:62:25:69:af:6c:34: ae:11:98:65:0a:34:64:b6:82:d4:9b:dd:02:50:f3: cb:93:05:51:3c:a1:bd:17:c0:78:e5:f5:f2:3d:9c: 6e:95:2d:dd:6b:7a:70:d1:9a:51:9c:0a:cf:78:cc: 7d:38:ca:dc:61:64:86:93:cf:64:cb:7b:de:b6:22: fa:1d:26:2f:80:ed:aa:6c:f9:31:bf:36:14:16:e4: 95:07:83:6a:05:f6:07:b7:a8:66:29:a1:27:c6:17: 42:e1:00:2d:c6:e4:64:a4:cf:26:60:8d:78:78:46: c0:8b:ca:49:dd:25:77:a3:b2:98:36:63:c1:0f:e9: 2e:7e:c4:92:6b:76:51:84:b1:00:5a:f3:18:fa:fa: 03:e3:84:e8:f0:be:1f:00:a2:56:be:7f:f6:b4:01: 1b:a3:d0:d3:9f:dc:a7:8b:94:3a:d2:d4:3f:28:7b: f0:99:97:9d:6f:f0:e8:02:a2:9a:17:62:45:c7:b6: fd:16:87:01:0c:a9:1b:ff:91:94:46:f2:e0:45:f9: f0:c7:f9:87:61:5c:02:e4:53:2c:3e:8d:a4:74:ee: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:9A:89:CF:B9:F5:95:09:E7:00:BD:EA:7B:F9:42:F4:57:08:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fb:7f:ad:75:ab:0a:7b:d2:ff:e1:f0:6e:e7:2c:09:3c:d7: ce:3d:10:8f:e8:8a:6c:6b:8e:24:af:bd:27:09:c4:51:2b:a9: 40:d9:8c:51:be:e9:d2:70:c2:9b:0b:d6:a1:29:a5:d1:22:14: 00:1c:a5:16:4a:cf:4e:90:0a:e0:1e:07:f8:94:b5:3b:ff:26: 80:c9:2a:3b:97:80:51:cd:71:a6:2c:d2:80:26:b3:32:62:4f: b9:41:f0:3b:06:d8:73:31:c5:ee:87:09:21:49:ba:3a:eb:bb: 35:08:4a:c7:75:b7:f7:66:d2:bf:73:d1:bf:f4:b4:57:54:a6: 3c:81:75:5a:56:bb:11:21:3f:f4:94:72:af:f2:41:63:b3:d9: 80:a0:7a:42:35:9d:c2:e8:72:4c:bf:15:b8:5e:34:7d:95:c4: f7:94:d0:87:36:be:d4:48:fe:ad:47:83:1e:f5:3f:be:71:92: d3:df:ea:ef:4d:f0:d3:7c:da:8e:fd:8f:70:0c:94:37:ed:76: 4e:ff:32:20:9c:bb:3f:fe:9a:56:d2:15:4c:e9:32:5c:f6:c9: b2:48:4f:24:a7:18:5e:70:c6:07:9f:2f:10:f3:b2:e0:56:69: 8e:ec:55:26:2c:fd:ae:33:6d:e5:1f:80:45:dc:c2:40:10:02: d7:23:c8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0jfLkQjcgHjCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZDIzMWNmODQtNTQ5YS00OTIwLWIxMDQtMzk5NmM3ZDA1MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieVbn46oOuZmYjDkm0j3W4fhhmDfnfmGsT4o ez6q7gDEEals9YpiJWmvbDSuEZhlCjRktoLUm90CUPPLkwVRPKG9F8B45fXyPZxu lS3da3pw0ZpRnArPeMx9OMrcYWSGk89ky3vetiL6HSYvgO2qbPkxvzYUFuSVB4Nq BfYHt6hmKaEnxhdC4QAtxuRkpM8mYI14eEbAi8pJ3SV3o7KYNmPBD+kufsSSa3ZR hLEAWvMY+voD44To8L4fAKJWvn/2tAEbo9DTn9yni5Q60tQ/KHvwmZedb/DoAqKa F2JFx7b9FocBDKkb/5GURvLgRfnwx/mHYVwC5FMsPo2kdO684wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF54monPufWVCecAvep7+UL0VwjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYjM1NGViYmMtMjQyMS0z Mjc4LWFlM2EtMjcxMGQzNjNiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj7f611qwp70v/h8G7nLAk81849EI/oimxrjiSvvScJxFErqUDZjFG+ 6dJwwpsL1qEppdEiFAAcpRZKz06QCuAeB/iUtTv/JoDJKjuXgFHNcaYs0oAmszJi T7lB8DsG2HMxxe6HCSFJujrruzUISsd1t/dm0r9z0b/0tFdUpjyBdVpWuxEhP/SU cq/yQWOz2YCgekI1ncLocky/FbheNH2VxPeU0Ic2vtRI/q1Hgx71P75xktPf6u9N 8NN82o79j3AMlDftdk7/MiCcuz/+mlbSFUzpMlz2ybJITySnGF5wxgefLxDzsuBW aY7sVSYs/a4zbeUfgEXcwkAQAtcjyCc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:48 2025 by rpki-client