$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa File: bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa (raw, json) Hash identifier: inIIFx+tzj2AzHFBIWWNiW74Nr709nNXGiewqpeDAwA= Subject key identifier: 5D:8C:3E:21:6B:3D:46:3A:44:5C:32:9D:F6:67:02:D8:A6:25:5A:48 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584BC2BDC609D7CB59F2B73C6D80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa Signing time: Wed 05 Nov 2025 16:36:53 +0000 ROA not before: Wed 05 Nov 2025 16:36:53 +0000 ROA not after: Tue 03 Feb 2026 16:36:53 +0000 asID: 2615 IP address blocks: 147.1.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:bd:c6:09:d7:cb:59:f2:b7:3c:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Nov 5 16:36:53 2025 GMT Not After : Feb 3 16:36:53 2026 GMT Subject: CN=403ca535-6e48-43da-9550-251acd0c8142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:56:56:d3:70:db:db:cb:0f:07:59:dc:42:bf: 3a:96:bf:c2:c8:67:c4:94:26:6f:93:e7:41:89:10: e4:93:e5:98:66:d9:0a:11:62:83:4f:3b:7f:c3:d3: 94:06:72:1e:83:4e:f3:9e:df:29:50:75:b1:57:29: 2c:87:b9:f2:11:bb:11:bc:95:50:4c:47:7c:d2:f6: 5e:4a:86:2b:33:2c:82:94:85:68:c1:0b:5b:ca:68: 45:a9:27:41:f9:40:39:2f:e5:d0:75:0b:45:a0:61: fc:d1:74:d9:51:26:f3:7f:e2:44:39:44:e1:49:9a: ac:c4:cf:aa:ad:22:78:ae:91:79:a0:f9:ec:f8:c5: e7:45:6e:f0:fd:7c:ee:96:39:ea:99:03:59:45:3e: 20:6f:f4:48:f6:03:dc:07:d9:bb:b2:e9:80:7f:3f: d0:5c:b6:f6:a7:15:10:28:b3:0e:c2:f6:93:73:eb: fa:91:1d:13:d7:6f:ce:d9:5f:db:3b:04:2e:d6:6d: a3:0d:e0:b7:1e:c9:14:00:b5:98:e2:b6:15:a4:59: f7:bf:6a:b3:bb:f3:2a:ee:d8:f4:06:6d:b5:a1:a5: c2:1f:bf:4e:ec:98:e3:1f:ed:53:9c:8a:f0:9c:be: 0e:b7:98:14:be:79:a6:1b:98:d6:1a:0c:b4:58:9b: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8C:3E:21:6B:3D:46:3A:44:5C:32:9D:F6:67:02:D8:A6:25:5A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:21:19:c8:df:4a:08:80:b2:c8:c7:64:f6:5e:8d:20:ee:8f: 1e:ca:7e:8f:e6:ca:6c:8c:b0:b2:bd:69:92:11:18:09:ec:44: d9:a6:13:78:38:42:79:82:1e:4f:d3:66:94:e0:57:8c:e1:16: 33:1c:66:2b:82:80:7b:e2:c1:92:29:8f:c8:2d:a9:2d:00:89: 93:b4:aa:28:d0:cf:76:50:59:3f:f0:61:38:ec:d2:43:55:9d: 87:7e:43:92:12:82:c0:68:ff:70:86:b2:f3:96:da:70:78:e1: 15:fb:79:4c:b9:87:30:ce:fd:4f:64:7e:1b:5f:2d:d0:a1:eb: 14:ce:91:2e:c8:90:ab:f2:0a:ef:38:26:36:cb:3f:d7:4f:3f: 72:43:8b:72:5d:1e:70:88:15:c5:38:c7:ed:38:6b:68:89:e6: c1:ea:8a:1f:70:9a:ff:c6:c3:8a:74:1e:c9:1b:42:1e:b0:8d: 73:92:99:d5:9c:da:25:2e:f5:32:49:fe:2a:06:1e:57:8d:cc: c1:4f:f9:44:72:70:de:20:96:87:9b:2f:b6:dd:5e:4e:14:95: 22:d5:4e:9f:ed:97:1e:41:3e:60:28:42:6a:d2:19:b7:bc:54: d4:0b:58:c0:a9:90:ab:93:98:d2:8f:ea:d0:8a:f7:59:bc:8f: 4b:7f:82:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCvcYJ18tZ8rc8bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTEwNTE2MzY1M1oXDTI2MDIwMzE2MzY1M1owLzEtMCsGA1UEAxMk NDAzY2E1MzUtNmU0OC00M2RhLTk1NTAtMjUxYWNkMGM4MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lZW03Db28sPB1ncQr86lr/CyGfElCZvk+dB iRDkk+WYZtkKEWKDTzt/w9OUBnIeg07znt8pUHWxVyksh7nyEbsRvJVQTEd80vZe SoYrMyyClIVowQtbymhFqSdB+UA5L+XQdQtFoGH80XTZUSbzf+JEOUThSZqsxM+q rSJ4rpF5oPns+MXnRW7w/XzuljnqmQNZRT4gb/RI9gPcB9m7sumAfz/QXLb2pxUQ KLMOwvaTc+v6kR0T12/O2V/bOwQu1m2jDeC3HskUALWY4rYVpFn3v2qzu/Mq7tj0 Bm21oaXCH79O7JjjH+1TnIrwnL4Ot5gUvnmmG5jWGgy0WJuFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2MPiFrPUY6RFwynfZnAtimJVpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYmMyYmNhZGQtM2I3MC0z YzM1LWFhNzktZGJiMmJhNTJmZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkhGcjfSgiAssjHZPZejSDujx7Kfo/mymyMsLK9aZIRGAnsRNmmE3g4 QnmCHk/TZpTgV4zhFjMcZiuCgHviwZIpj8gtqS0AiZO0qijQz3ZQWT/wYTjs0kNV nYd+Q5ISgsBo/3CGsvOW2nB44RX7eUy5hzDO/U9kfhtfLdCh6xTOkS7IkKvyCu84 JjbLP9dPP3JDi3JdHnCIFcU4x+04a2iJ5sHqih9wmv/Gw4p0HskbQh6wjXOSmdWc 2iUu9TJJ/ioGHleNzMFP+URycN4gloebL7bdXk4UlSLVTp/tlx5BPmAoQmrSGbe8 VNQLWMCpkKuTmNKP6tCK91m8j0t/ghw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:06:15 2025 by rpki-client