$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c44ea085-8669-3f3d-9f14-9b561636774e.roa File: c44ea085-8669-3f3d-9f14-9b561636774e.roa (raw, json) Hash identifier: o3BW2rj4cc24fcEhv0289RXxCbBUyShWxSR8B04R8v4= Subject key identifier: EC:F2:35:A7:7E:F6:A6:26:D5:3B:B3:CF:AF:1F:C9:E7:5E:06:01:39 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584AAC8B7FD9FBA8B23F11116480 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c44ea085-8669-3f3d-9f14-9b561636774e.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 2615 IP address blocks: 147.1.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:7f:d9:fb:a8:b2:3f:11:11:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=f89b109b-6ab1-4b60-a7ef-280ffd655b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:d5:7f:8f:18:ff:ff:ef:43:69:ac:c5:55: 4b:aa:38:ef:87:dc:65:09:61:16:64:79:72:e6:b4: e1:9c:d0:3a:55:0a:e6:95:38:4c:98:0f:f3:11:9c: 6d:1e:ff:48:67:af:0a:0a:d2:4c:d3:e8:66:9f:cc: bf:1f:53:cd:3e:86:f7:19:d3:a5:b3:5f:47:e6:b8: 8b:d9:61:d4:d3:cf:c2:14:e1:d6:74:e8:62:4f:4f: 47:2d:6a:4e:ff:e5:23:8c:bb:c0:7d:8e:a9:45:4c: 9d:c2:f8:8e:3b:02:f1:c8:53:3f:b0:ce:1e:0b:90: a0:ef:85:f2:d7:be:c1:c9:32:83:38:f6:90:40:1b: fa:a3:75:ae:eb:ea:c5:db:9f:fa:b4:7a:05:65:8c: 1f:28:fa:b5:48:06:de:c3:d9:ce:9c:0d:f3:f2:27: d3:1a:02:b0:15:0f:23:6a:a7:59:82:9d:07:bb:93: a3:3c:85:88:9b:44:07:46:7f:07:34:b4:61:db:29: 6e:cc:c5:d7:1d:52:e7:17:27:44:d9:d6:74:2a:e1: 2b:4a:81:97:b0:1c:1a:9e:69:5e:eb:67:11:79:0b: 94:ba:89:7c:02:de:13:81:a7:ba:14:a9:5d:e4:ff: 6e:73:a9:8f:3e:f9:c0:b9:10:a1:90:ea:58:5e:58: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F2:35:A7:7E:F6:A6:26:D5:3B:B3:CF:AF:1F:C9:E7:5E:06:01:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/c44ea085-8669-3f3d-9f14-9b561636774e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:46:14:a1:fc:4b:8b:a6:79:25:45:17:b2:91:d6:55:f7:92: 9e:45:78:54:50:50:0e:6f:6d:ed:a6:63:14:73:37:c7:64:88: 0f:8d:45:71:96:79:6b:0d:c5:c7:16:a3:84:56:9e:9a:f5:2b: 19:cb:4f:80:b3:25:0c:c2:c1:0a:51:33:c7:54:6f:53:54:52: a9:24:a1:80:a8:7e:00:99:b5:b8:e4:1e:e3:8e:5a:3b:84:4c: 7a:ff:3e:ed:e9:61:13:58:7a:1d:db:d9:af:0c:75:e3:e7:26: f5:24:eb:8f:8f:72:91:c1:39:c4:87:1f:c5:be:57:66:e4:2b: 9f:3d:2e:73:87:2b:58:47:f9:bc:6f:f3:55:e3:01:d4:1a:31: e0:75:89:41:b0:be:9d:3f:d3:d0:74:f7:2b:6b:ec:6b:dd:fc: 60:a1:19:18:c4:b8:09:c7:44:80:07:29:19:ce:83:5f:c4:61: ac:55:22:31:7d:67:34:1a:6d:63:91:67:12:ab:40:58:cc:76: fb:14:75:ca:77:82:63:00:3a:b8:6c:26:0f:ac:5a:0b:35:f4: 18:65:1e:f2:a5:01:fe:ad:97:51:bb:75:98:a1:d0:5a:a1:f2: 1d:c0:e1:20:5b:3b:70:fb:4e:1d:24:c5:d9:b5:0c:f5:03:9c: e5:3d:06:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi3/Z+6iyPxERZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk Zjg5YjEwOWItNmFiMS00YjYwLWE3ZWYtMjgwZmZkNjU1YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjVf48Y///vQ2msxVVLqjjvh9xlCWEWZHly 5rThnNA6VQrmlThMmA/zEZxtHv9IZ68KCtJM0+hmn8y/H1PNPob3GdOls19H5riL 2WHU08/CFOHWdOhiT09HLWpO/+UjjLvAfY6pRUydwviOOwLxyFM/sM4eC5Cg74Xy 177ByTKDOPaQQBv6o3Wu6+rF25/6tHoFZYwfKPq1SAbew9nOnA3z8ifTGgKwFQ8j aqdZgp0Hu5OjPIWIm0QHRn8HNLRh2yluzMXXHVLnFydE2dZ0KuErSoGXsBwanmle 62cReQuUuol8At4Tgae6FKld5P9uc6mPPvnAuRChkOpYXliyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzyNad+9qYm1Tuzz68fyedeBgE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYzQ0ZWEwODUtODY2OS0z ZjNkLTlmMTQtOWI1NjE2MzY3NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBGFKH8S4umeSVFF7KR1lX3kp5FeFRQUA5vbe2mYxRzN8dkiA+NRXGW eWsNxccWo4RWnpr1KxnLT4CzJQzCwQpRM8dUb1NUUqkkoYCofgCZtbjkHuOOWjuE THr/Pu3pYRNYeh3b2a8MdePnJvUk64+PcpHBOcSHH8W+V2bkK589LnOHK1hH+bxv 81XjAdQaMeB1iUGwvp0/09B09ytr7Gvd/GChGRjEuAnHRIAHKRnOg1/EYaxVIjF9 ZzQabWORZxKrQFjMdvsUdcp3gmMAOrhsJg+sWgs19BhlHvKlAf6tl1G7dZih0Fqh 8h3A4SBbO3D7Th0kxdm1DPUDnOU9BkY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:57 2025 by rpki-client