$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa File: eb14bdce-678f-3bbb-8240-44d411908d1e.roa (raw, json) Hash identifier: KydZSKOvjCODDIK/gDqQdJub/C96xViO/LvXJ5I+4IQ= Subject key identifier: 27:EC:EC:0F:58:B0:97:F0:6B:91:02:5B:F5:9F:8C:7A:75:C8:60:B5 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A7967007280E08E038BB76680 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa Signing time: Thu 10 Jul 2025 17:21:06 +0000 ROA not before: Thu 10 Jul 2025 17:21:06 +0000 ROA not after: Wed 08 Oct 2025 17:21:06 +0000 asID: 2615 IP address blocks: 147.1.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:67:00:72:80:e0:8e:03:8b:b7:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 10 17:21:06 2025 GMT Not After : Oct 8 17:21:06 2025 GMT Subject: CN=3f3108f6-fb26-482a-b7c5-508ef72037bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:d1:0d:b8:5c:ff:3f:e5:86:25:ce:11:88: 67:e7:f8:7d:96:b8:e2:06:0b:2d:0b:fa:12:42:82: 6d:b0:5c:98:9f:e0:8c:18:8d:59:20:fb:a7:41:7a: 9e:97:f3:7f:ce:60:b1:df:6d:71:4f:47:17:23:12: 66:5f:cd:b2:d5:7e:66:53:d2:8d:be:8f:e8:7b:3f: d9:b2:7c:3f:57:4c:33:81:64:8f:ed:88:7d:e6:46: d8:c9:b9:98:38:3c:af:0e:03:47:d6:a6:9d:ef:92: 8c:aa:7a:53:e3:c2:a8:ab:38:89:99:ac:ce:2c:d9: 00:68:80:ef:a8:8d:a4:2a:8d:d7:e6:9f:cd:ef:01: 5b:c1:cc:0e:ca:ed:3a:d3:c1:56:5b:19:d0:5c:1b: c6:2e:19:f4:83:b8:2e:3c:17:b3:6a:32:84:d7:ac: ee:94:f8:b5:5d:ba:9b:74:21:ea:f4:ac:cc:fe:d7: a3:da:21:63:ec:37:98:9e:1d:92:7a:da:23:ad:76: 9f:fe:f3:b3:ac:d2:ba:74:c6:8d:15:cb:d8:fe:a5: 48:ee:6f:73:30:c9:fe:af:03:01:b6:6e:b3:ed:4c: de:9d:d2:2a:a4:bc:76:da:48:1c:2e:18:84:33:14: ff:ff:dd:14:16:a3:fb:de:6d:08:58:3a:ec:66:fb: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:EC:0F:58:B0:97:F0:6B:91:02:5B:F5:9F:8C:7A:75:C8:60:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:68:7c:5c:df:53:fe:82:e0:7a:a1:53:8f:76:60:9e:46:4b: 3e:f1:9d:64:31:a2:7d:47:27:0e:2e:f7:c8:e9:17:cf:d5:45: 45:66:4d:6c:cb:34:4b:d6:3c:bf:85:af:8d:57:66:53:5f:cc: d2:9e:3b:e7:50:ec:e8:cc:ed:d6:4b:ae:80:40:4b:19:1e:af: 65:0b:13:01:55:ec:76:32:93:4a:f3:c4:bf:fb:97:bc:12:b9: dd:53:49:48:49:29:70:d7:04:b3:6e:8c:de:26:6a:3c:89:91: bf:2b:a5:6f:ee:95:e5:d9:48:d3:cf:e5:43:c3:43:c9:d8:08: 38:cb:b4:2f:cd:09:67:6c:8f:81:6a:0d:08:e4:d8:1c:ae:10: e8:20:69:ae:41:9e:a7:7e:4d:52:a2:92:75:be:06:c1:f6:9d: 18:3c:49:45:1c:c8:c3:01:15:6c:9a:0b:65:2d:84:c1:88:92: cf:6a:0d:3c:01:1a:bd:ba:d8:dc:36:a4:a1:2a:9b:97:25:ba: d3:e0:b8:3d:8f:9e:af:3c:c3:ee:af:43:75:cd:c2:76:9e:29: 2e:51:27:5f:0a:5e:fd:5e:1a:40:05:4c:4a:aa:1c:54:2d:3b: 32:b0:55:5c:46:27:41:5f:d8:c9:88:3a:cc:10:8c:a8:66:a7: 1b:f7:4d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp5ZwBygOCOA4u3ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcxMDE3MjEwNloXDTI1MTAwODE3MjEwNlowLzEtMCsGA1UEAxMk M2YzMTA4ZjYtZmIyNi00ODJhLWI3YzUtNTA4ZWY3MjAzN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX3RDbhc/z/lhiXOEYhn5/h9lrjiBgstC/oS QoJtsFyYn+CMGI1ZIPunQXqel/N/zmCx321xT0cXIxJmX82y1X5mU9KNvo/oez/Z snw/V0wzgWSP7Yh95kbYybmYODyvDgNH1qad75KMqnpT48KoqziJmazOLNkAaIDv qI2kKo3X5p/N7wFbwcwOyu0608FWWxnQXBvGLhn0g7guPBezajKE16zulPi1Xbqb dCHq9KzM/tej2iFj7DeYnh2SetojrXaf/vOzrNK6dMaNFcvY/qVI7m9zMMn+rwMB tm6z7UzendIqpLx22kgcLhiEMxT//90UFqP73m0IWDrsZvuz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfs7A9YsJfwa5ECW/WfjHp1yGC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZWIxNGJkY2UtNjc4Zi0z YmJiLTgyNDAtNDRkNDExOTA4ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNofFzfU/6C4HqhU492YJ5GSz7xnWQxon1HJw4u98jpF8/VRUVmTWzL NEvWPL+Fr41XZlNfzNKeO+dQ7OjM7dZLroBASxker2ULEwFV7HYyk0rzxL/7l7wS ud1TSUhJKXDXBLNujN4majyJkb8rpW/uleXZSNPP5UPDQ8nYCDjLtC/NCWdsj4Fq DQjk2ByuEOggaa5Bnqd+TVKiknW+BsH2nRg8SUUcyMMBFWyaC2UthMGIks9qDTwB Gr262Nw2pKEqm5clutPguD2Pnq88w+6vQ3XNwnaeKS5RJ18KXv1eGkAFTEqqHFQt OzKwVVxGJ0Ff2MmIOswQjKhmpxv3TTM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:50 2025 by rpki-client