$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: PNou8TCwEUTtgVT9AJQy4BvCho9uv2IFVD8eaXtVQT0= Subject key identifier: B4:34:21:F3:43:DF:D5:8E:99:D7:DD:43:76:09:95:46:81:0E:AB:0A Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A77808B67E5E205652B34C290 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8b:67:e5:e2:05:65:2b:34:c2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=13a86f61-89e2-4940-bf8b-8e395c7cb932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:f1:0b:e7:3d:37:fe:92:45:e2:3a:aa:5c: fb:40:2e:e3:ff:0b:d5:e1:e0:79:68:1b:10:09:cc: ba:2d:80:c0:1e:c5:6f:21:cd:ff:2c:00:cf:f8:ed: bd:14:d7:5f:0b:a6:d9:63:68:66:66:34:ce:6d:01: d5:e8:af:f1:ef:63:2e:5b:3b:a6:c0:f6:fe:14:79: cd:28:6a:b3:53:d0:3f:a7:cb:3a:75:17:f7:29:41: 3f:02:e2:e5:a4:fd:23:bf:a5:37:e8:d3:3d:68:d4: 70:04:4b:3e:b2:fe:36:c2:7a:07:c8:82:e4:c7:11: 99:91:39:f8:f6:8a:72:ba:98:9f:62:19:0d:a6:b2: d8:d6:5b:f9:54:59:02:13:7c:12:79:43:e5:6a:35: c1:e0:57:aa:16:d6:f0:13:a0:d2:ec:4d:ab:b8:d3: 5d:17:ba:3d:d3:45:57:0e:20:b3:e6:07:d5:19:79: e5:27:cb:51:71:6c:75:4a:7e:e2:fc:9f:59:7a:5a: f5:30:41:fb:eb:76:21:70:5c:39:f4:fd:41:91:29: a3:39:bd:5a:35:b7:d8:0a:94:69:d1:74:73:9e:b6: 3c:35:af:fa:68:9e:cb:d7:5b:8f:f6:0f:1c:40:fc: d4:cc:42:6d:4d:f0:ae:4d:01:06:80:42:cf:10:4c: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:34:21:F3:43:DF:D5:8E:99:D7:DD:43:76:09:95:46:81:0E:AB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c0:d6:24:bd:75:99:d9:66:d6:3a:c3:32:d3:3a:ab:32:42: 51:23:c1:98:9b:5f:f0:c0:d1:f3:d5:7e:61:0a:08:d0:9e:40: c0:2d:a7:0a:41:7e:e8:c4:fd:4f:bc:85:82:ab:ef:06:65:5b: 48:d3:e7:4b:d4:36:f7:f0:bf:87:16:72:54:1b:8b:f7:33:9a: 77:ee:64:7f:20:2e:1d:2b:3d:05:a0:84:80:83:d7:1f:69:2e: c5:00:7e:30:d1:5a:0f:65:7f:a3:6d:78:1f:d8:58:c0:d9:74: 1f:96:d0:89:51:82:71:cf:db:69:25:b0:20:b0:44:b2:54:ce: 48:03:22:97:3c:2e:11:70:88:5b:83:62:1b:04:6c:f0:a5:5e: ac:c5:27:c8:26:68:01:93:68:c3:7d:95:6d:78:a4:7b:37:51: e0:0d:3d:02:ba:b7:61:5a:54:51:04:2f:46:6b:05:f5:e0:13: b6:79:9b:8d:84:f7:d8:8c:b2:c1:81:f6:2b:20:32:16:ce:6e: 6f:6f:94:96:4c:bb:06:70:3f:38:12:c1:af:62:8c:2d:51:d9: 5c:07:e9:81:af:2e:97:ab:b4:07:34:a4:23:37:39:a5:bb:11: 62:90:06:48:7f:0f:ae:1e:f3:19:f5:33:56:b3:8f:80:07:8f: 02:a9:5b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gItn5eIFZSs0wpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MTNhODZmNjEtODllMi00OTQwLWJmOGItOGUzOTVjN2NiOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOTxC+c9N/6SReI6qlz7QC7j/wvV4eB5aBsQ Ccy6LYDAHsVvIc3/LADP+O29FNdfC6bZY2hmZjTObQHV6K/x72MuWzumwPb+FHnN KGqzU9A/p8s6dRf3KUE/AuLlpP0jv6U36NM9aNRwBEs+sv42wnoHyILkxxGZkTn4 9opyupifYhkNprLY1lv5VFkCE3wSeUPlajXB4FeqFtbwE6DS7E2ruNNdF7o900VX DiCz5gfVGXnlJ8tRcWx1Sn7i/J9Zelr1MEH763YhcFw59P1BkSmjOb1aNbfYCpRp 0XRznrY8Na/6aJ7L11uP9g8cQPzUzEJtTfCuTQEGgELPEEwlcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ0IfND39WOmdfdQ3YJlUaBDqsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfA1iS9dZnZZtY6wzLTOqsyQlEjwZibX/DA0fPVfmEKCNCeQMAtpwpB fujE/U+8hYKr7wZlW0jT50vUNvfwv4cWclQbi/czmnfuZH8gLh0rPQWghICD1x9p LsUAfjDRWg9lf6NteB/YWMDZdB+W0IlRgnHP22klsCCwRLJUzkgDIpc8LhFwiFuD YhsEbPClXqzFJ8gmaAGTaMN9lW14pHs3UeANPQK6t2FaVFEEL0ZrBfXgE7Z5m42E 99iMssGB9isgMhbObm9vlJZMuwZwPzgSwa9ijC1R2VwH6YGvLpertAc0pCM3OaW7 EWKQBkh/D64e8xn1M1azj4AHjwKpWxs= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:56 2025 by rpki-client